QuestionQ61
Protect and DefendA customer is migrating from on-premises AD to Microsoft Entra ID (Azure AD) as its only domain solution. The customer also manages wired and wireless devices with Microsoft Endpoint Manager (Intune).
The customer wants to strengthen security at the network edge. You are assisting with the design of an HPE Aruba Networking ClearPass deployment for this purpose. HPE Aruba Networking devices will authenticate wired and wireless clients to a ClearPass Policy Manager (CPPM) cluster that uses version 6.10.
The customer has several authentication requirements. Clients must pass EAP-TLS authentication only when a Microsoft Entra ID (Azure AD) query confirms that they have Microsoft Entra ID (Azure AD) accounts. To further refine client privileges, ClearPass must also use information gathered by Intune to make access-control decisions.
Refer to the scenario.
Assume that the Microsoft Entra ID (Azure AD) deployment has the required prerequisites in place.
You are planning the CPPM authentication source that you will use as the authentication source in 802.1X services. How should you configure this authentication source?
- A As Active Directory type
- B As a generic SQL database type
- C As HTTP type, referencing the IP address for an Intune SCEP extension
- D As Kerberos type
Community Discussion