nerdexam
HP

HPE6-A78 · Question #84

HPE6-A78 Question #84: Real Exam Question with Answer & Explanation

The correct answer is C. general-access. In an AOS-8 Mobility Controller (MC) environment, a WLAN is configured with WPA3-Enterprise security, using HPE Aruba Networking ClearPass Policy Manager (CPPM) for authentication. The WLAN's default role is set to "guest," which would be applied if no specific role is assigned a

Question

An MC has a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). The WLAN's default role is set to guest. A Mobility Controller (MC) has these roles configured on it: authenticated denyall guest general-access guest-logon logon stateful-dot1x switch-logon voice A client authenticates. CPPM returns an Access-Accept with an Aruba-User-Role VSA set to general_access. What role does the client receive?

Options

  • Aguest
  • Blogon
  • Cgeneral-access
  • Dauthenticated

Explanation

In an AOS-8 Mobility Controller (MC) environment, a WLAN is configured with WPA3-Enterprise security, using HPE Aruba Networking ClearPass Policy Manager (CPPM) for authentication. The WLAN's default role is set to "guest," which would be applied if no specific role is assigned after authentication. The MC has several roles configured, including "general-access" (note the underscore in the question : "general_access"). The client successfully authenticates, and CPPM sends an Access-Accept message with an Aruba- User-Role Vendor-Specific Attribute (VSA) set to "general_access." In AOS-8, the Aruba- User-Role VSA is used to assign a specific role to the client, overriding the default role configured on the WLAN. The role specified in the VSA must match a role that exists on the MC. Since "general-access" (or "general_access" as written in the question) is listed among the roles configured on the MC, the MC will apply this role to the client. The underscore in "general_access" in the VSA versus the hyphen in "general-access" in the MC's role list is likely a typographical inconsistency in the question. In practice, AOS-8 role names are case- insensitive and typically use hyphens, not underscores, but for the purpose of this question, we assume "general_access" matches "general-access" as the intended role.

Community Discussion

No community discussion yet for this question.

Full HPE6-A78 Practice