HPE Networking ClearPass (HPE6-A88)Demo

By HP · Question Mode

QuestionQ98

Define Onboard Provisioning and Posture Attribute Enforcement

In a network that uses ClearPass with 802.1X authentication and a dissolvable agent, a client receives limited access through a captive-portal redirect.

After the client completes the health check on the webpage, which critical action is required to ensure that the updated posture token is used for later authentications?

  • A ClearPass must send a termination message to the client to enforce a new role.
  • B The client must restart their device to apply the updated posture token.
  • C The posture token must be cached in the service by selecting the Cached Policies and Roles option on the 802.1X service Enforcement tab.
Explanation

In ClearPass Policy Manager, a dissolvable (browser-based) agent submits its posture results once and then exits, leaving no persistent process to re-validate posture on future connections. To ensure a client's updated posture token continues to be honored on subsequent 802.1X re-authentications, the administrator must enable the Cached Policies and Roles option on the Enforcement tab of the 802.1X service, which instructs ClearPass to reuse the previously derived role/posture result instead of re-evaluating posture from scratch each time.

Community Discussion

No comments yet. Be the first to start the discussion!