HPE7-A06 · Question #84

Security administrators are complaining about the number if HPE Aruba Networking ClearPass Access Tracker events from the user 'radius-test'. Given the configuration below, hao can the number of…

The correct answer is C. Configure 'dead-only' tracking mode. The configuration shown enables RADIUS server tracking using the test user radius-test. By default, this generates continuous Access Tracker events because every probe attempt is logged. To reduce the number of events, the tracking mode should be changed to dead-only, which…

Securing and Managing Campus Access Switching Environments

Question

Security administrators are complaining about the number if HPE Aruba Networking ClearPass Access Tracker events from the user ‘radius-test’. Given the configuration below, hao can the number of events be reduced?

Options

ADecrease the tracking retries.
BConfigure 'any' tracking mode.
CConfigure 'dead-only' tracking mode.
DIncrease the tracking interval.

How the community answered

(27 responses)

A
7% (2)
B
4% (1)
C
78% (21)
D
11% (3)

Explanation

The configuration shown enables RADIUS server tracking using the test user radius-test. By default, this generates continuous Access Tracker events because every probe attempt is logged. To reduce the number of events, the tracking mode should be changed to dead-only, which limits authentication probes to when the RADIUS server is marked as unreachable. This way, ClearPass only sees test authentications when a failure condition occurs, significantly reducing unnecessary log entries.

Topics

#ClearPass#RADIUS tracking#dead-only mode#access tracker

Community Discussion

No community discussion yet for this question.

Full HPE7-A06 Practice