HPE Aruba Certified Network Security Associate (ACNSA) — Question 8

A Microsoft RADIUS server is used to centralize AAA functions by a company. Upon a successful authentication lookup performed by an Aruba Mobility Controller
(MC), the administrator wants to have the RADIUS server pass back the correct post-authentication role name that the controller should apply to the user's traffic.
Which additional task must the administrator perform for the controller's configuration to implement this process?

Answer options

• A. Configure the server-derived rules on the controller.
• B. Install ClearPass's VSA file on the controller.
• C. Install Microsoft's VSA file on the controller.
• D. Enable AAA on the controller.

Correct answer: A

Explanation

The correct answer is A, as configuring server-derived rules on the controller is necessary for it to apply the role returned by the RADIUS server. Options B and C involve installing VSA files, which are not directly related to passing back role names after authentication. Option D, enabling AAA, is a prerequisite but does not specifically address the requirement of applying role names based on RADIUS responses.