A customer would like to allow only the AD users with the "Manager" title from the "HO" location to Onboard their personal devices. Any other AD users should not be authorized to pass beyond the initial device provisioning page. Which Onboard service will you use to implement this requirement?

• A. Onboard Authorization service
• B. Onboard CP login service
• C. Onboard Provisioning service
• D. Onboard Pre-Auth service

Refer to the exhibit.

What enforcement prof lit will be assigned to the Windows 10 MDH enabled devices if it completes user authentication and is already profiled by ClearPess?

• A. Cisco Redirect URL - Service Unavailable
• B. Default - Deny Access Profile
• C. Cisco Full Access VLAN
• D. Cisco Redirect ACL for profiling

Which statements are true about that integration between ClearPass Policy Manager and ClearPass Device Insight? (Select two)

• A. An attribute named Device Insight Tags art added to the Endpoints that art available to use in service, role-mapping, and enforcement policy Rules
• B. To provide enhanced profiling and reporting. additional configuration is required to transmit data in both directions between CPPM and Device Insight.
• C. When Device Insight integration mode is enabled. you can still use Update Fingerprint button to Update Endpoints at Configuration > Identity > Endpoints
• D. ClearPass Device Insight updates ClearPass Policy Manager every 60 minutes if it detects a change in device classification like device spoofing.
• E. Policy Manager stops using ClearPass Profiler for fingerprinting and uses Device Insight Analyzer instead for endpoint in-depth data analysis.

A customer has deployed an OnGuard Solution to all the corporate devices using a group policy result to push the OnGuard Agtnts. The network administrator is complaining that soma of the agents are communicating to the ClearPass server that is located in a DMZ. outside the firewall The network administrator wants all of the agents System Health Validation traffic to stay inside the Management subnets.
What can the ClearPass administrator do to move the traffic only to the ClearPass Management Ports?

• A. Filter TCP port 6658 on the firewall, forcing the OnGuard agent to use the ClearPass Management port.
• B. Select the correct OnGuard Agent installer, and use the one configured for Management Port for the clients.
• C. Edit the agent.conf file being deployed to the clients to use the ClearPass Management Port for SHV updates
• D. Configure a Policy Manager Zone mapping so the OnGuard agent will use the Management Port IP.

Refer to the exhibit.


The customer configured a guest operator access by creating a custom operator profile and the built-in universal ClearPass profile mapping translation rule. When he tests the setup, he gets authentication failed. Using the streenshots sent by the customer as a reference, what would suggest to the customer to fix the issue?

• A. To verify if the username Mike07 has the Active Directory Title attribute set as Reception.
• B. To correct the case sensitive attribute name in the enforcement profile to admin_privileges
• C. To map the operator profile name HS_Receptionist in the translation rule value field
• D. To re-enter the correct username and password for the Active Directory user Mike07.