HP Exam HPE6-A84 Topic 10 Question 20 Discussion

Actual exam question for HP's HPE6-A84 exam

Question #: 20
Topic #: 10

You need to install a certificate on a standalone Aruba Mobility Controller (MC). The MC will need to use the certificate for the Web UI and for implementing RadSec with Aruba ClearPass Policy Manager. You have been given a certificate with these settings:

What issue does this certificate have for the purposes for which the certificate is intended?

AIt has conflicting EKUs.

BIt is issued by a private CA.

CIt specifies domain info in the CN field instead of the DC field.

DIt lacks a DNS SAN.

Show Suggested Answer

Suggested Answer: C

According to the ClearPass Policy Manager User Guide1, userAccountControl is a custom attribute in Active Directory that contains a set of flags that define the properties and behavior of user accounts. One of these flags is ACCOUNTDISABLE, which indicates whether the account is disabled or not. By adding this attribute to the filters in the AD authentication source, CPPM can retrieve this attribute for each user and use it as a condition in the enforcement policies to prevent users with disabled accounts from connecting even if they have valid certificates. Therefore, option C is the correct answer.

by Veronika at Jun 02, 2024, 08:34 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A84 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cherry

4 days ago

Hmm, this seems like a tricky one. I'll need to carefully consider the certificate requirements for the Web UI and RadSec.

upvoted 0 times

...

Brock

6 days ago

Based on the information provided, I think the LTM Specialist should try reducing the RAM cache size first. That seems like the most straightforward way to address the memory pressure without impacting user experience. I'd go with option C.

upvoted 0 times

...

Coletta

7 days ago

I remember something about service composition requiring at least two services for the interaction to be more than just a simple exchange.

upvoted 0 times

...

Carlota

8 days ago

I'm a bit confused by this question. The criteria for revenue recognition can be a bit complex, so I'll need to think through this step-by-step to make sure I understand which one is not met.

upvoted 0 times

...

Brigette

13 days ago

I practiced a similar question last week, and I believe using the GUI to set it is much simpler. It might be option C.

upvoted 0 times

...

Maryann

5 months ago

Ah, the age-old dilemma of 'which field do I put my domain in?' It's like a game of certificate bingo, but with higher stakes!

upvoted 0 times

...

Candida

5 months ago

The lack of a DNS SAN is a red flag. The certificate won't be trusted for the Web UI, and it may not work for RadSec either.

upvoted 0 times

Latosha

3 months ago

D) It lacks a DNS SAN.

upvoted 0 times

...

Cherri

3 months ago

C) It specifies domain info in the CN field instead of the DC field.

upvoted 0 times

...

Francoise

4 months ago

B) It is issued by a private CA.

upvoted 0 times

...

Pa

4 months ago

A) It has conflicting EKUs.

upvoted 0 times

...

Pa

5 months ago

Specifying domain info in the CN field instead of the DC field is not ideal, but it shouldn't be a major problem here.

upvoted 0 times

...

Rutha

5 months ago

Having a certificate issued by a private CA is a common issue, but it should still work for the intended purposes.

upvoted 0 times

Mila

4 months ago

C) It specifies domain info in the CN field instead of the DC field.

upvoted 0 times

...

Sage

4 months ago

C) It specifies domain info in the CN field instead of the DC field.

upvoted 0 times

...

Nathalie

4 months ago

B) It is issued by a private CA.

upvoted 0 times

...

Alease

4 months ago

B) It is issued by a private CA.

upvoted 0 times

...

Alecia

4 months ago

A) It has conflicting EKUs.

upvoted 0 times

...

Lucia

5 months ago

A) It has conflicting EKUs.

upvoted 0 times

...

Barrett

5 months ago

The certificate has conflicting Extended Key Usage (EKU) settings, which is a problem for using it on the Mobility Controller for both the Web UI and RadSec.

upvoted 0 times