QuestionQ64

Protect and Defend

A financial institution must authenticate managers of HPE Aruba Networking Mobility Controllers (MCs) and HPE Aruba Networking Mobility Conductors through ClearPass Policy Manager (CPPM). The institution’s security policies require strong encryption for manager-authentication communications between the HPE Aruba Networking devices and CPPM.

What is a valid solution?

  • A TACACS+ inside an IPsec tunnel
  • B TACACS+ on its own
  • C LDAP using TLS security
  • D RADIUS on its own
Explanation

TACACS+ can provide centralized administrator authentication for Aruba mobility devices through ClearPass Policy Manager. Encapsulating TACACS+ traffic in an IPsec tunnel supplies encrypted, integrity-protected transport for the authentication communications, satisfying a requirement for secure encryption in transit.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!