HPE Aruba Certified Mobility Expert (ACMX) — Question 31

An administrator uses a ClearPass server to perform user authentication and download the role configuration that should be applied to the users session. The server is associated to an AAA profile of a VAP. However, when a user connects to the SSID of the VAP, they are assigned the default role.
What must the administrator do to ensure that the role is downloaded and used?

Answer options

• A. Enable download role for CPPM in the VAP’s WLAN profile.
• B. Enable server derivation in the ClearPass’ RADIUS configuration.
• C. Enable server derivation in the server group.
• D. Enable server derivation in the AAA Server Group.

Correct answer: B

Explanation

The correct answer is B because enabling server derivation in the ClearPass RADIUS configuration allows the server to properly assign roles based on the authentication results. The other options do not directly address the requirement of allowing ClearPass to derive the user roles based on the authentication process.