Refer to the scenario.
A customer is using an AOS 10 architecture with Aruba APs and Aruba gateways (two per site). Admins have implemented auto-site clustering for gateways with the default gateway mode disabled. WLANs use tunneled mode to the gateways.
The WLAN security is WPA3-Enterprise with authentication to an Aruba ClearPass Policy Manager (CPPM) cluster VIP. RADIUS communications use RADIUS, not RadSec.
For which devices does CPPM require network device entries?

• A. ForAP clusters'virtual IP addresses
• B. For APs' actual IP addresses
• C. Forgateways' actual IP addresses and dynamic authorization VRRP addresses
• D. For gateways' actual IP addresses and AP clusters' virtual IP addresses for dynamic authorization

A company has Aruba gateways that are Implementing gateway IDS/IPS in IDS mode. The customer complains that admins are receiving too frequent of repeat email notifications for the same threat. The threat itself might be one that the admins should investigate, but the customer does not want the email notification to repeat as often.
Which setting should you adjust in Aruba Central?

• A. The allowlist settings in the IDS policy
• B. Report scheduling settings
• C. The IDS policy setting (strict, medium, or lenient)
• D. Alert duration and threshold settings

You are setting up Aruba ClearPass Policy Manager (CPPM) to enforce EAP-TLS authentication with Active Directory as the authentication source. The company wants to prevent users with disabled accounts from connecting even if those users still have valid certificates.
As the first part of meeting these criteria, what should you do to enable CPPM to determine where accounts are enabled in AD or not?

• A. Add an Endpoint Context Server to the domain controller with actions for querying the domain controller for account status.
• B. Install a Microsoft Active Directory extension in Aruba ClearPass Guest and set up an HTTP authentication source that points to that extension.
• C. Add a custom attribute for userAccountControl to the filters in the AD authentication source.
• D. Enable OCSP in the EAP-TLS authentication method settings and configure an OCSP override to the domain controller FQDN.

Refer to the scenario.
A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster.
In Aruba Central, you are examining network traffic flows on a wireless IoT device that is categorized as
"Raspberry Pi" clients. You see SSH traffic. You then check several more wireless IoT clients and see that they are sending SSH also.
You want an easy way to communicate the information that an IoT client has used SSH to Aruba ClearPass Policy Manager (CPPM).
What step should you take?

• A. On Central configure APs and gateways to use CPPM as the RADIUS accounting server.
• B. On Central set up CPPM as a Webhook application.
• C. On CPPM enable Device Insight integration.
• D. On CPPM create an Endpoint Context Server that points to the Central API.

Refer to the scenario.
A customer has asked you to review their AOS-CX switches for potential vulnerabilities. The configuration for these switches is shown below:

What is one immediate remediation that you should recommend?

• A. Setting the clock manually instead of using NTP
• B. Changing the switch's DNS server to the mgmt VRF
• C. Disabling Telnet
• D. Either disabling DHCPv4-snoopinq or leaving it enabled, but also enabling ARP inspection