Home » HP » HPE6-A15 » Why can the Onguard posture check not be performed during 802.1x authentication?
Why can the Onguard posture check not be performed during 802.1x authentication?
A. Health Checks cannot be used with 802.1x.
B. Onguard uses RADIUS, so an additional service must be created.
C. Onguard uses HTTPS, so an additional service must be created.
D. Onguard uses TACACS, so an additional service must be created.
E. 802.1x is already secure, so Onguard is not needed.
Correct Answer: C
Explanation/Reference:
Explanation:
OnGuard uses HTTPS to send posture information to the ClearPass appliance. For OnGuard to use HTTPS, it must have access to the network. If a customer requires 802.1x authentication on the wired switch, a separate 802.1x authentication must be used prior to the OnGuard posture check. In this example, an 802.1x PEAP-EAP-MSCHAPv2 authentication is completed first. A separate WebAuth service must be setup with posture checks to use the OnGuard agent.
References: MAC Authentication and OnGuard Posture Enforcement using Dell WSeries ClearPass and Dell Networking Switches (August 2013), page 21
|
Download Printable PDF. VALID exam to help you PASS.
|
 |
C is correct