HP Exam HPE6-A84 Topic 8 Question 35 Discussion

Actual exam question for HP's HPE6-A84 exam

Question #: 35
Topic #: 8

Refer to the scenario.

A customer is migrating from on-prem AD to Azure AD as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft Endpoint Manager (Intune).

The customer wants to improve security for the network edge. You are helping the customer design a ClearPass deployment for this purpose. Aruba network devices will authenticate wireless and wired clients to an Aruba ClearPass Policy Manager (CPPM) cluster (which uses version 6.10).

The customer has several requirements for authentication. The clients should only pass EAP-TLS authentication if a query to Azure AD shows that they have accounts in Azure AD. To further refine the clients' privileges, ClearPass also should use information collected by Intune to make access control decisions.

You are planning to use Azure AD as the authentication source in 802.1X services.

What should you make sure that the customer understands is required?

AAn app registration on Azure AD that references the CPPM's FQDN

BWindows 365 subscriptions

CCPPM's RADIUS certificate was imported as trusted in the Azure AD directory

DAzure AD Domain Services

Show Suggested Answer

Suggested Answer: A

To use Azure AD as the authentication source in 802.1X services, you need to configure CPPM as a SAML service provider and Azure AD as a SAML identity provider. This allows CPPM to use Azure AD for user authentication and role mapping. To do this, you need to create an app registration on Azure AD that references the CPPM's FQDN as the reply URL and the entity ID.You also need to grant the app registration the required permissions to access user information from Azure AD1

by Emerson at Dec 06, 2024, 03:01 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A84 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chaya

6 days ago

Yes, that's crucial for ensuring secure authentication and access control decisions based on Intune information.

upvoted 0 times

...

Daniela

9 days ago

I believe the customer should also be aware that CPPM's RADIUS certificate needs to be imported as trusted in the Azure AD directory.

upvoted 0 times

...

Eva

12 days ago

I agree with Walker. It's important for the authentication process to work smoothly.

upvoted 0 times

...

Vallie

14 days ago

Wait, we need an app registration on Azure AD? I bet the customer is going to love that extra step. *chuckles*

upvoted 0 times

...

Desiree

15 days ago

Azure AD Domain Services? Really? I thought we were just using plain old Azure AD. This is getting a bit complex.

upvoted 0 times

Casie

6 days ago

B: Windows 365 subscriptions

upvoted 0 times

...

Jeniffer

7 days ago

A: An app registration on Azure AD that references the CPPM's FQDN

upvoted 0 times

...

Colette

21 days ago

Hmm, I think the trusted RADIUS certificate in Azure AD is the important piece here. Can't have those authentication requests getting rejected.

upvoted 0 times

Tarra

8 days ago

C) CPPM's RADIUS certificate was imported as trusted in the Azure AD directory

upvoted 0 times

...

Ora

13 days ago

A) An app registration on Azure AD that references the CPPM's FQDN

upvoted 0 times

...

Serina

1 months ago

Ah, I see the key is authenticating wireless and wired clients using Azure AD. The ClearPass integration is crucial for that.

upvoted 0 times

Rebecka

23 hours ago

Yes, and importing the RADIUS certificate ensures secure authentication.

upvoted 0 times

...

Derick

7 days ago

That's correct. The app registration on Azure AD is necessary for the integration.

upvoted 0 times

...

Genevive

9 days ago

C) CPPM's RADIUS certificate was imported as trusted in the Azure AD directory

upvoted 0 times

...

Truman

15 days ago

A) An app registration on Azure AD that references the CPPM's FQDN

upvoted 0 times

...

Walker

1 months ago

I think the customer should understand that an app registration on Azure AD that references the CPPM's FQDN is required.

upvoted 0 times

...