HPE Networking ClearPass (HPE6-A88)Demo

By HP · Question Mode

QuestionQ1

Define Onboard Provisioning and Posture Attribute Enforcement

A network administrator must revoke a certificate for a lost device so it can no longer access the network. They go to the Certificate Authorities section in ClearPass Onboard.

What should they do next to ensure the certificate is correctly revoked and the device is blocked?

  • A Select the certificate authority, edit the retention policy to store only metadata, and then revoke the certificate.
  • B Select the certificate authority, view the issued certificates, and revoke the specific certificate associated with the lost device.
  • C Select the certificate authority, view the trust chain, and manually revoke the certificate from the list.
Explanation

A Certificate Authority’s Certificates action displays the certificates associated with that CA, allowing the administrator to locate and revoke the specific client certificate issued to the lost device. Certificate revocation makes the certificate invalid for subsequent CRL or OCSP validity checks and prevents certificate-based authentication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!