Refer to the exhibit:


A customer has configured a Guest Self registration page for their Cisco Wireless network with the settings shown. What should be changed in order to successfully authenticate guests users?

• A. Login Method should be Controller-initiated - using HTTPs form submit
• B. Secure Login should use HTTP
• C. Change \he IP Address to the Cisco Controller DNS name
• D. Change the Vendor Settings to Airespace Networks

Refer to the exhibit:




After the helpdesk revoked the certificate of a device reported to be lost oy an employee, the lost device was seen as connected successfully to the secure network. Further testing has shown that device revocation is not working.
What steps should you follow to make device revocations work?

• A. Remove the EAP-TLS authentication method configuration changes are required and add "EAP-TLS with OCSP Enabled" authentication method in the OnBoard Provisioning service.
  No other configuration changes are required.
• B. Copy the default [EAP-TLS with OSCP Enabled] authentication method and set The Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA. Remove EAP-TLS and map the custom created method to the OnBoard Authorization Service.
• C. Edit the default [EAP-TLS with OSCP Enabled] authentication method and set the Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the OnBoard Provisioning Service.
• D. copy the default [EAP-TLS with OSCP Enabled] authentication method and set the verify certificate using OSCP: option as "required" then configure the correct OSCF URL link for the OnBoard CA.
  Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the 802 1X Radius Service.

Refer to the exhibit:




You have been asked to help a Customer troubleshoot an issue. They have configured an Aruba OS switch (Aruba 2930 with 16.09) to do MAC authentication with profiling using ClearPass as the authentication source. They cannot get it working.
Using the screenshots as a reference, how will you fix the issue?

• A. Change the Vendor settings for the Aruba OS switch to "Aruba" so that the enforcement will use the correct VSAs
• B. Modifythe enforcement profile conditions with Aruba Vendor specific attributes and Aruba-user-roles
• C. Use a CoA to bounce the switch port to force the port to change tothe correct Aruba user role
• D. Delete the initial role in the Aruba OS switch to force the device to get the server derived user roles
• E. User-roles are case sensitive, update the correct role with correct case in the enforcement profile

Refer to the exhibit:

A customer has configured Onboard and Windows devices workas expected but cannot get the Apple iOS devices to Onboard successfully. Where would you look to troubleshoot the Issued (Select two)

• A. Check if the customer has Instated a custom HTTPS certificate for IDS and another internal PKl HTTPS certificate for other devices.
• B. Check if the customer installed the internal PKl Root certificate presented by the ClearPass during the provisioning process.
• C. Check if a DNS entryis available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.
• D. Check if the ClearPass HTTPS server certificate installed in the server is issued by a trusted commercial certificate authority.
• E. Check if the customer has installed the sameinternal PKl signed RADIUS server certificate as the HTTPS server certificate.