HPE Aruba Certified Network Security Associate (ACNSA) — Question 69
An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8.x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user. However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server.
Which two items should the administrator verify that might be the cause of this problem? (Choose two.)
Answer options
- A. role existence on the Managed Network
- B. order assignment that the controller uses to select a user role
- C. server-derived role assignment on the ClearPass server
- D. spelling of the role on the ClearPass server
- E. enablement of user roles on the controller
Correct answer: A, D
Explanation
The correct answers are A and D. The administrator needs to confirm that the role exists in the Managed Network to ensure it's recognized by the system, and check the spelling of the role on the ClearPass server to avoid mismatches. The other options, while related to role assignment, do not directly address the potential discrepancies in role recognition between ClearPass and the Aruba system.