A customer wants all guests who access a company’s guest network to have their accounts approved
by the receptionist, before they are given access to the network.
How should the network administrator set this up in ClearPass? (Select two.)
A,D
Explanation:
A: Sponsored self-registration is a means to allow guests to self-register, but not give them full access
until a sponsor (could even be a central help desk) has approved the request. When the registration
form is completed by the guest/user, an on screen message is displayed for the guest stating the
account requires approval.
Guests are disabled upon registration and need to wait on the receipt page for the confirmation until
the login button gets enabled.
D: Device Mac Authentication is designed for authenticating guest devices based on their MAC
address.
Reference: ClearPass Policy Manager 6.5 User Guide (October 2015), page 94
https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/5
2/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf
Refer to the exhibit.
When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the page name field used for?
A
Explanation:
The Page Name is an identifier page name that will appear in the URL -- for example,
"/guest/page_name.php".
Reference:
http://www.arubanetworks.com/techdocs/ClearPass/CPGuest_UG_HTML_6.5/Content/Configuratio
n/CreateEditWebLogin.htm
Refer to the exhibit.
When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the Address field value ‘securelogin.arubanetworks.com’ used for?
C
Refer to the exhibit.
A guest connects to the Guest SSID and authenticates successfully using the guest.php web login
page.
Based on the MAC Caching service information shown, which statement about the guests’ MAC
address is accurate?
D
A university wants to deploy ClearPass with the Guest module. The university has two types that
need to use web login authentication. The first type of users are students whose accounts are in an
Active Directory server. The second type of users are friends of students who need to self-register to
access the network.
How should the service be set up in the Policy Manager for this network?
A
An administrator enabled the Pre-auth check for their guest self-registration.
At what stage in the registration process in this check performed?
C
Explanation:
The Onboard template is designed for configuration that allows to perform checks before allowing
Onboard provisioning for Bring Your Own Device (BYOD) use-cases. This service creates an Onboard
Pre-Auth service to check the user's credentials before starting the device provisioning process. This
also creates an authorization service that checks whether a user's device can be provisioned using
Onboard.
Refer to the exhibit.
Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage is an
email request sent to the sponsor?
C
Explanation:
There's the Self Service part of provisioning one's information.
Then the sponsor/operator part to confirm that guest is valid.
Then the enablement via the sponsor/operator clicking 'confirm'.
Reference:
https://community.arubanetworks.com/t5/Security/Guest-Captive-Portal-sponsor-
approval-architecture/td-p/267625
Refer to the exhibit.
A user logged in to the Self-Service Portal as shown.
What do the traffic received and sent statistics present?
E
Refer to the exhibit.
Based on the configuration of the create_user form shown, which statement accurately describes the
status?
A
Explanation:
Reference:
https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/expire-
timezone-field-is-not-showing-up-on-the-create-user-form/ta-p/250230
Refer to the exhibit.
Based on the information shown, which field in the Captive Portal Authentication profile should be
changed so that guest users are redirected to a page on ClearPass when they connect to the Guest
SSID?
E
Explanation:
The Login page is the URL of the page that appears for the user logon. This can be set to any URL.
The Welcome page is the URL of the page that appears after logon and before redirection to the web
URL. This can be set to any URL.
Reference:
http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Cap
tive_Portal/Captive_Portal_Authentic.htm