Examine the AOS-CS switch output:
Based on this output, what is correct?
HPE6-A73 Exam QuestionsBrowse all questions from this exam
HPE6-A73 Exam - Question 21
Show AnswerHide Answer
Correct Answer: B
The correct interpretation of the output is that 802.1X authentication occurred, and downloadable user roles (DURs) are deployed. The session details indicate that the client is authenticated using dot1x, as shown by 'dot1x Authenticated.' The 'Authorization Details' section confirms that a specific role, 'aruba_contractor-3044-7,' is applied, which suggests that downloadable user roles are in use. Therefore, it justifies that the 802.1X authentication was successful and a downloadable user role was applied.
Discussion
9 commentsLuke80Option: B
Jan 17, 2022Look at the role that has been applied - looks like a typical DUR
CloudeivOption: B
Jul 6, 2021B is correct
Linares1234
Sep 28, 2021i think that it's A
filthyxOption: B
Oct 25, 2021B seems correct. The precedense is: 802.1x and if it times out, mac-auth.
jordib4Option: B
Jan 9, 2022I think that its B. because the Role has been assigned as per the book page 723.
Redrum702Option: B
May 25, 2023Correction B: When the configuration status shows "applied," it means that the specified AAA settings are in effect and active on the AOS-CX switch. This confirms that the configured authentication and authorization parameters are being used to control user access and permissions on the network.
SeidorBrunoOption: B
Jun 28, 2023Page 435 Lab Guide: In this example, the numbers 3044 and 7. 3044: Every enforcement profile in ClearPass has an internal object number, the range starts at 3000. This is the unique identifier of the enforcement profile, while the name makes it easy to recognize it. 7: This is the version number. Every time an enforcement profile is saved, the version number is incremented with 1. The complete DUR consists of: • Enforcement Profile name: aruba_contractor • Enforcement Profile internal object number: 3044 • Enforcement Profile version number: 7
DianaDeckerOption: D
Dec 28, 2021It is D. (Book pages 703 & 711) No mac-auth configured.
KillorpOption: B
Jun 18, 2022I too think it's B. The role 'aruba_contractor-3044-7' is the exact correct format for a DUR. See page 814.
moe706706
May 1, 2023what do you mean by correct format ? you can name the role as you wish , the name doesnt point whether role is locally pushed or downloaded via clearpass. Actually, the role information section from the show command is where we can find out whether its local or clearpass, since its shown in the output so what we only conclude from this that 802.1x is the only method of authentication , so D is the correct answer
Redrum702Option: D
May 22, 2023D: If the output of the command show aaa authentication port-access interface <interface> client-status on an Aruba switch shows that "dot1x" is authenticated but "mac-auth" is not attempted, it means that the switch is successfully performing 802.1X authentication for clients on that interface, but it is not attempting MAC authentication.