HPE7-A01 Exam - Topic 3 Question 2 Discussion

Actual exam question for HP's HPE7-A01 exam

Question #: 2
Topic #: 3

you are implementing ClearPass Policy Manager with EAP-TLS for authenticating all corporate-owned devices.

What are two possible solutions to the problem of deploying client certificates to corporate MacBooks that are joined to a Windows domain? (Select two.)

AClearPass OnBoard

BWindows Server PKl and a GPO

CApple Configurator and a GPO

DClearPass OnGuard

EMobile Device Manager

Show Suggested Answer

Suggested Answer: A, B

The reason is that ClearPass OnBoard is a tool that allows you to enroll Mac computers into a ClearPass Policy Manager site using an Apple MDM push certificate. This certificate can be obtained from Apple or from a third-party PKI provider.

Apple Configurator is a tool that allows you to configure and deploy Mac computers using a GPO. This tool can also be used to enroll Mac computers into a ClearPass Policy Manager site using an Apple MDM push certificate.

by Kristofer at Oct 16, 2023, 11:25 PM

Limited Time Offer

25%

Off

Get Premium HPE7-A01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Niesha

4 months ago

Wait, can you really use ClearPass OnGuard for this? Sounds off!

upvoted 0 times

...

Rodolfo

4 months ago

I agree, GPO is definitely the best method here.

upvoted 0 times

...

Kip

4 months ago

Apple Configurator? Really? That seems complicated.

upvoted 0 times

...

Dominque

4 months ago

I think Windows Server PKI with GPO is the way to go!

upvoted 0 times

...

Harrison

5 months ago

ClearPass OnBoard is a solid choice for certificate deployment.

upvoted 0 times

...

Luis

5 months ago

I feel like Mobile Device Manager could be relevant, but I’m not sure if it’s the best fit for MacBooks in a Windows domain setup.

upvoted 0 times

...

Felice

5 months ago

I’m a bit confused about whether Apple Configurator would work with GPOs since it’s more for iOS devices, but it could be worth considering.

upvoted 0 times

...

Kassandra

5 months ago

I remember something about using a Windows Server PKI and GPO for certificate deployment, so that might be a good choice here too.

upvoted 0 times

...

Charlie

5 months ago

I think ClearPass OnBoard could be one of the solutions since it helps with certificate provisioning, but I'm not entirely sure about the second option.

upvoted 0 times

...

Daniel

5 months ago

This seems straightforward to me. ClearPass OnBoard is designed for this exact use case, so that's an obvious choice. And the Windows Server PKI with a GPO is a common way to deploy certificates to devices joined to a Windows domain, so that's a good second option.

upvoted 0 times

...

Destiny

5 months ago

I'm a bit confused by this question. I'm not sure how ClearPass OnGuard or a Mobile Device Manager would help with deploying client certificates to MacBooks joined to a Windows domain. I think I'll focus on the ClearPass OnBoard and Windows Server PKI options.

upvoted 0 times

...

Juan

5 months ago

Okay, let's think this through. We need to find a way to get the client certificates onto the MacBooks, and it looks like ClearPass OnBoard and the Windows Server PKI with a GPO are the two best solutions based on the options provided.

upvoted 0 times

...

Yuette

6 months ago

Hmm, this is a tricky one. I'm not too familiar with ClearPass, but I know that Apple Configurator can be used to deploy profiles and certificates to MacBooks, so that could be an option worth considering.

upvoted 0 times

...

German

6 months ago

I think the key here is to find a way to deploy the client certificates to the corporate MacBooks that are joined to a Windows domain. The options that seem most relevant are ClearPass OnBoard and using a Windows Server PKI with a GPO.

upvoted 0 times

...