Refer to the scenario.
A customer is using an AOS 10 architecture with Aruba APs and Aruba gateways (two per site). Admins have implemented auto-site clustering for gateways with the default gateway mode disabled. WLANs use tunneled mode to the gateways.
The WLAN security is WPA3-Enterprise with authentication to an Aruba ClearPass Policy Manager (CPPM) cluster VIP. RADIUS communications use RADIUS, not RadSec.
CPPM is using the service shown in the exhibits.

Which step can you take to improve operations during a possible gateway failover event?

• A. Set up qatewav clusters manually and set VRRP IP addresses for dynamic authorization.
• B. Use auto-group clustering instead of auto-site clustering for the gateways.
• C. Enable default gateway mode for the gateway clusters.
• D. Chanqe the WLANs to mixed-mode forwardinq so that vou can select multiple qatewav clusters.

You need to install a certificate on a standalone Aruba Mobility Controller (MC). The MC will need to use the certificate for the Web UI and for implementing RadSec with Aruba ClearPass Policy Manager. You have been given a certificate with these settings:
Subject: CN=mc41.site94.example.com
* No SANs
* Issuer: CN=ca41.example.com
EKUs: Server Authentication, Client Authentication
What issue does this certificate have for the purposes for which the certificate is intended?

• A. It lacks a DNS SAN.
• B. It specifies domain info in the CN field instead of the DC field.
• C. It has conflicting EKUs.
• D. It is issued by a private CA.

Refer to the scenario.
A customer is migrating from on-prem AD to Azure AD as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft Endpoint Manager (Intune).
The customer wants to improve security for the network edge. You are helping the customer design a ClearPass deployment for this purpose. Aruba network devices will authenticate wireless and wired clients to an Aruba ClearPass Policy Manager (CPPM) cluster (which uses version 6.10).
The customer has several requirements for authentication. The clients should only pass EAP-TLS authentication if a query to Azure AD shows that they have accounts in Azure AD. To further refine the clients' privileges, ClearPass also should use information collected by Intune to make access control decisions.
You are planning to use Azure AD as the authentication source in 802.1X services.
What should you make sure that the customer understands is required?

• A. An app registration on Azure AD that references the CPPM's FQDN
• B. Windows 365 subscriptions
• C. Azure AD Domain Services
• D. CPPM's RADIUS certificate was imported as trusted in the Azure AD directory

You are setting up Aruba ClearPass Policy Manager (CPPM) to enforce EAP-TLS authentication with Active Directory as the authentication source. The company wants to prevent users with disabled accounts from connecting even if those users still have valid certificates.
As the first part of meeting these criteria, what should you do to enable CPPM to determine where accounts are enabled in AD or not?

• A. Add a custom attribute for userAccountControl to the filters in the AD authentication source.
• B. Install a Microsoft Active Directory extension in Aruba ClearPass Guest and set up an HTTP authentication source that points to that extension.
• C. Enable OCSP in the EAP-TLS authentication method settings and configure an OCSP override to the domain controller FQDN.
• D. Add an Endpoint Context Server to the domain controller with actions for querying the domain controller for account status.