Refer to the exhibit.

Where will the guests browser be redirected during a captive portal login attempt?
A. The redirect will time out and fail to resolve.
B. The captive portal page hosted on Aruba Central in the cloud.
C. The captive portal page hosted on the Aruba controller.
D. The captive portal page hosted on ClearPass.
Refer to the exhibit.

A client is attempting to authenticate using their Windows account with a bad password. If the Remote Lab AD server is down for maintenance, what will be the expected result?
A. ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and receive a result of Active Directory Authentication failed. No further processing will occur.
B. ClearPass try either server Backup 1 or Backup 2 depending on which has responded the fastest in prior attempts to authenticate ClearPass will then receive a result of Active Directory Authentication failed. No further processing will occur.
C. ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and Backup 2; both will send a result authentication failed.
D. ClearPass receive a timeout attempt when trying the Remote Lab AD server first. No further processing will occur until the Remote Lab AD server is marked as "Down" by the Administrator.
ClearPass receives fingerprinting profile data for a client device that is based on MAC OUI, NMAP, DHCP, and OnGuard. Which fingerprint or fingerprints are used?
A. NMAP because it is actively obtained
B. The last fingerprint gathered
C. OnGuard because it is application based
D. All fingerprints are applied
What is the purpose of service rules in ClearPass?
A. selects the Enforcement Profiles used in a service
B. selects the Service to process a request
C. selects the Authentication Source for the client
D. selects the Posture Policy used with OnGuard
What is a good collector type used for ClearPass to discover devices with static IP addresses?
A. DHCP Collectors
B. ClearPass Air Monitors
C. Active Collectors
D. Network Functions
Refer to the exhibit.

When creating a new ClearPass Service, the [Time Source] has been added as an authorization source. What time source is ClearPass referencing?
A. the ClearPass server where Insight Master has been enabled
B. the local clock of the ClearPass server doing the authentication
C. the local time setting found on the authenticating client machine
D. the NTP (Network Time Protocol) source indicated in the Cluster settings
When using Guest Authentication with MAC Caching service template, which statements are true? (Choose two.)
A. The guest authentication is provided better security than without using MAC caching.
B. The endpoint status of the client will be treated as "known" the first time the client associates to the network.
C. Which wireless SSID and wireless controller must be indicated when configuring the template.
D. The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term.
What services are recommended to be allowed by the pre-authenticated role assigned to the Client during the Captive Portal process? (Choose three.)
A. DHCP options 43 and 150
B. RADIUS to ClearPass
C. HTTPS to ClearPass
D. HTTPS to the Internet
E. DHCP address assignment
F. DNS resolution
An organization wants guests to be able to create their own guest accounts for access to the public WLAN. Guests do not want to have to repeatedly log in multiple times through the day.
Which ClearPass feature can meet these requirements?
A. ClearPass Onboard Portal.
B. Guest access with Media Access Control (MAC) caching.
C. Enforcement based on endpoint profiling.
D. Guest self-registration with sponsor approval.
An organization wants to have guests connect their own personal devices to the wireless network without requiring a receptionist setting up a guest account.
Which ClearPass feature can be used to meet the organization's requirements?
A. Policy Manager Enforcement
B. MAC authentication with profiling
C. ClearPass Onboard
D. Guest with self-registration