Aruba Certified ClearPass Professional V6.7 (HPE6-A68)Demo

By HP · Question Mode

QuestionQ17

Posture

Refer to the exhibit.

Question Image

Based on the Enforcement Policy configuration, when a user with the Engineer role connects to the network and is assigned an Unknown posture token, which Enforcement Profile is applied?

  • A RestrictedACL
  • B HR VLAN
  • C Remote Employee ACL
  • D [Deny Access Profile]
  • E EMPLOYEE_VLAN
Explanation

The Engineer user with an Unknown posture token matches none of the configured rules: the Engineer rule requires a Healthy posture token, and the non-Healthy rule requires the Remote Worker role. Therefore, the policy's configured default enforcement profile, [Deny Access Profile], is applied. Cisco ISE default rules apply when no preceding rules match.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!