HP Exam HPE6-A84 Topic 10 Question 20 Discussion

Actual exam question for HP's HPE6-A84 exam

Question #: 20
Topic #: 10

You need to install a certificate on a standalone Aruba Mobility Controller (MC). The MC will need to use the certificate for the Web UI and for implementing RadSec with Aruba ClearPass Policy Manager. You have been given a certificate with these settings:

What issue does this certificate have for the purposes for which the certificate is intended?

AIt has conflicting EKUs.

BIt is issued by a private CA.

CIt specifies domain info in the CN field instead of the DC field.

DIt lacks a DNS SAN.

Show Suggested Answer

Suggested Answer: C

According to the ClearPass Policy Manager User Guide1, userAccountControl is a custom attribute in Active Directory that contains a set of flags that define the properties and behavior of user accounts. One of these flags is ACCOUNTDISABLE, which indicates whether the account is disabled or not. By adding this attribute to the filters in the AD authentication source, CPPM can retrieve this attribute for each user and use it as a condition in the enforcement policies to prevent users with disabled accounts from connecting even if they have valid certificates. Therefore, option C is the correct answer.

by Veronika at Jun 02, 2024, 07:34 AM

Limited Time Offer

25%

Off