Refer to the exhibit:



The customer configured an 802.1x service with different enforcement actions for personal and corporate laptops. The corporate laptops are always being redirected to the BYOD Portal. The customer has sent you the above screenshots.
How would you resolve the issue? (Select two)

• A. Modify the enforcement policy and re-order the EAP-PEAP with [user authenticated] rule to the last condition.
• B. Remove the EAP-PEAP with [user authenticated] condition for Onboard and create another service
• C. Modify the enforcement policy and change the rule evaluation algorithm to select first match
• D. Modify the enforcement policy and re-order the condition with posture not_equals to healthy as the sixth condition
• E. Modify the enforcement policy and re-order the condition with Posture - Unknown as the fifth condition

A customer has configured Onboard with Single SSID provision for Aruba IAP Windows devices work as expected but cannot get the Apple iOS devices to work. The Apple iOS devices automatically get redirected to a blank page and do not get the Onboard portal page. What would you check to fix the issue?

• A. Verify if the external captive portal profile is enabled to use HTTPS with port 443.
• B. Verify if the Onboard URL is updated correctly in the external captive portal profile.
• C. Verify if the checkbox "Enable bypassing the Apple Captive Network Assistant" is checked.
• D. Verify if Onboard Pre-Provisioning enforcement profile sends the correct Aruba user role.

Refer to the Exhibit:


A customer wants to integrate posture validationinto an Aruba Wireless 802.1X authentication service During testing, the client connects to the Aruba Employee Secure SSID and is redirected to the Captive Portal page where the user can download the OnGuard Agent After the Agent is installed, the client receives the Healthy token the client remains connected to the Captive Portal page ClearPass is assigning the endpoint the following roles: T2-Staff-User. (Machine Authenticated! and T2-SOL-Device.
What could cause this behavior?

• A. RFC-3576 Is not configured correctly on the Aruba Controller and does not update the role.
• B. The Enforcement Policy conditions for rule 1 are not configured correctly.
• C. Used Cached Results: has not been enabled In the Aruba 802.1X Wireless Service
• D. The Enforcement Profile should bounce the connection instead of a Terminate session

What are valid options for Network Access Device Settings? (Select two.)

• A. In CLI settings, you can define the access credentials and the command templates that will be used.
• B. You can configure SNMP Read Settings to monitor the load of a NAD in order not to overload it with the requests.
• C. You can configure SNMP Write Settings to send commands to the devices that do not support other methods.
• D. On the Attributes tab. you can enable the service to write attributes like Location and Device type based on policy.
• E. The OnConnect Enforcement allows you to enable specific ports that trigger Enforcement when any device connects.

Refer to the exhibit:


You configuring an 802 1x service endpoint profiling. When the client connects to the network, ClearPass successfully profiles the client and sends Radius Change of Authorization (RCoA) but Radius Change of Authorization {RCoA) fails for the client You manually clicked on the Change Status button in the access tracker to force an RCoA but that failed too.
What must you check to ensure that the RCoA will work? (Select two.)

• A. RFC 3576 option is enabled for Aruba Controller under Network devicein ClearPass.
• B. RFC 3576 server should be mapped in the server group on the Aruba Controller
• C. The RFC 3576 shared secret on ClearPass should match the Authentication Server shared secret
• D. RFC 3576 server IPs and the Authentication server IPs should be same in the AAA profile