HPE Aruba Certified Mobility Expert (ACMX) — Question 24

An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8 x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user. However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server.
Which two items should the administrator verify that might be the cause of this problem? (Choose two.)

Answer options

• A. Enablement of user roles on the controller
• B. Spelling of the role on the ClearPass server
• C. Server-derived role assignment on the ClearPass server
• D. Role existence on the Managed Network

Correct answer: B, D

Explanation

Checking the correctness of the role name on the ClearPass server (Option B) is essential because a typo can lead to a mismatch in role assignment. Additionally, confirming the presence of the role in the Managed Network (Option D) is crucial since roles must exist on the network components to be assigned correctly; if they do not, the user will receive a different role.