Valid HPE6-A84 Dumps shared by ExamDiscuss.com for Helping Passing HPE6-A84 Exam! ExamDiscuss.com now offer the newest HPE6-A84 exam dumps, the ExamDiscuss.com HPE6-A84 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com HPE6-A84 dumps with Test Engine here:
You are setting up Aruba ClearPass Policy Manager (CPPM) to enforce EAP-TLS authentication with Active Directory as the authentication source. The company wants to prevent users with disabled accounts from connecting even if those users still have valid certificates. As the first part of meeting these criteria, what should you do to enable CPPM to determine where accounts are enabled in AD or not?
Correct Answer: C
Explanation According to the ClearPass Policy Manager User Guide1, userAccountControl is a custom attribute in Active Directory that contains a set of flags that define the properties and behavior of user accounts. One of these flags is ACCOUNTDISABLE, which indicates whether the account is disabled or not. By adding this attribute to the filters in the AD authentication source, CPPM can retrieve this attribute for each user and use it as a condition in the enforcement policies to prevent users with disabled accounts from connecting even if they have valid certificates. Therefore, option C is the correct answer.
