QuestionQ46

Define Onboard Provisioning and Posture Attribute Enforcement

A network administrator is setting up a ClearPass service to strengthen security by integrating multiple authentication and authorization sources. They chose Active Directory (AD) for both authentication and authorization, and integrated mobile device management for device validation.

What security and user-management benefit does this configuration offer?

  • A It eliminates the need for OnGuard and Onboard services in ClearPass.
  • B It allows for comprehensive user credential validation and provides additional context about the device’s security status.
  • C It enables the network administrator to bypass the need for user account attributes in the Active Directory.
Explanation

Active Directory can validate user credentials and provide authorization attributes for role and access-policy decisions. Mobile device management integration supplies endpoint context for device assessment and authorization, enabling policies to account for the device’s security status as well as the user’s identity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!