A.  

Device Category

B.  

Device Family

C.  

Device Health

D.  

Device Type

E.  

Device Location

A.  

Identifies clients that are not security compliant

B.  

Initiates the Auto-Remediation process

C.  

Controls access to network resources

D.  

Denies access to unhealthy clients

E.  

indicates the Health Status of the Client

A.  

This will allow conference employees to pre-load additional device information as guests arrive and

register.

B.  

This strategy effectively stops employees from putting their own corporate devices on the guest network.

C.  

This will enable additional information to be gathered about guests during the conference.

D.  

This allows guest users to create and manage their own login account.

D18912E1457D5D1DDCBD40AB3BF70D5D

E.  

This will allow employee personal devices to be Onboarded to the corporate network

A.  

Cisco Device Sensor

B.  

Exchange Plugging agent

C.  

3rd part MDM

D.  

DNS fingerprinting

E.  

NAD ARP listening handler

A.  

enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

B.  

enabling the DHCP server to profile endpoints and forward meta-data to ClearPass

C.  

DHCP profiling is enabled on ClearPass by default configuration of the network access devices is not necessary

D.  

configuring ClearPass as a DHCP relay for the client

A.  

Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.

B.  

All rules are checked. And if there is no match no Enforcement profile is applied.

C.  

Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule ts applied, along with the default Enforcement profile.

D.  

All rules are checked for any matching rules and their respective Enforcement profiles are applied.

A.  

Guest with self-registration

B.  

ClearPass Onboard

C.  

MAC authentication with profiling

D.  

Policy Manager Enforcement

A.  

ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.

B.  

Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour

period.

C.  

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.

D.  

A user changing departments may not see their Department attribute change in AD reflected while

authenticating until the Cache Timeout period has ended.

E.  

On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.

A.  

Requires the purchase of a supported Cisco Access Point licensed as an Aruoa Monitor Mode AP. to then act as !he sensor

B.  

Forwards DHCP and HTTP user-agent info to ClearPass using Control and Datagram Transport Layer Security (DTLS) encapsulation

C.  

Gathers raw endpoint data from Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP)

D.  

Forwards DHCP and HTTP user-agent info to ClearPass using RADIUS accounting packets

E.  

Requires a Cisco Smart Net license to be installed on the Network Access Device (NAD) utilizing the feature