HPE Aruba Certified Mobility Professional (ACMP) — Question 35

AOS-Switches authenticate guests to ClearPass with captive portal. When guests first connect their device to the network, they are redirected to a captive portal in which they log in. ClearPass then stores the guest MAC addresses, and the guests are permitted access. Due to a conflict, the network administrator needs to change the dynamic authorization port, port 3799 on Aruba ClearPass.
If the administrator forgets to also change the port on one of the AOS-Switches, what will be one symptom?

Answer options

• A. Some guests receive full access to the network when they first connect instead of being redirected to the portal page
• B. When some guests successfully authenticate in the captive portal, they are redirected back to the portal page
• C. Guests are redirected to the system listening on port 3799
• D. Some guests are unable to reach the captive portal page. Instead, they receive no access at all

Correct answer: D

Explanation

If the dynamic authorization port is not updated on the AOS-Switch, guests may not be able to communicate with ClearPass to authenticate, leading to option D where they cannot reach the captive portal. Option A is incorrect because guests should not get full access without authentication. Option B is wrong since successful authentication would not redirect them back to the portal. Option C is also incorrect as it implies they are reaching the wrong service on the old port.