Aruba Certified Network Security Expert Written: HPE6-A84

You are configuring gateway IDS/IPS settings in Aruba Central.

For which reason would you set the Fail Strategy to Bypass?

A. To permit traffic if the IPS engine falls to inspect It

B. To enable the gateway to honor the allowlist settings configured in IDS/IPS policies

C. To tell gateways to stop enforcing IDS/IPS policies if they lose connectivity to the Internet

D. To avoid wasting IPS engine resources on filtering traffic for unauthenticated clients

You are setting up Aruba ClearPass Policy Manager (CPPM) to enforce EAP-TLS authentication with Active Directory as the authentication source. The company wants to prevent users with disabled accounts from connecting even if those users still have valid certificates.

As the first part of meeting these criteria, what should you do to enable CPPM to determine where accounts are enabled in AD or not?

A. Add an Endpoint Context Server to the domain controller with actions for querying the domain controller for account status.

B. Enable OCSP in the EAP-TLS authentication method settings and configure an OCSP override to the domain controller FQDN.

C. Add a custom attribute for userAccountControl to the filters in the AD authentication source.

D. Install a Microsoft Active Directory extension in Aruba ClearPass Guest and set up an HTTP authentication source that points to that extension.

Refer to the scenario.

A hospital has an AOS10 architecture that is managed by Aruba Central. The customer has deployed a pair of Aruba 9000 Series gateways with Security licenses at each clinic. The gateways implement IDS/IPS in IDS mode.

The Security Dashboard shows these several recent events with the same signature, as shown below:

Which step could give you valuable context about the incident?

A. View firewall sessions on the APs and record the threat sources' type and OS.

B. View the user-table on APs and record the threat sources' 802.11 settings.

C. View the RAPIDS Security Dashboard and see if the threat sources are listed as rogues.

D. Find the Central client profile for the threat sources and note their category and family.