Câu 23: HPE7-A10: HPE Network Security Expert

A customer is migrating from on-prem AD to Microsoft Entra ID (Azure AD) as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft Endpoint Manager (Intune). The customer wants to improve security for the network edge. You are helping the customer design an HPE Aruba Networking ClearPass deployment for this purpose. HPE Aruba Networking devices will authenticate wireless and wired clients to a ClearPass Policy Manager (CPPM) cluster (which uses version 6.10). The customer has several requirements for authentication. The clients should only pass EAP-TLS authentication if a query to Microsoft Entra ID (Azure AD) shows that they have accounts in Microsoft Entra ID (Azure AD). To further refine the clients' privileges, ClearPass also should use information collected by Intune to make access control decisions. Refer to the scenario. The Intune extension is configured as shown in this exhibit. The customer wants to reduce the overhead of polling information from Intune to CPPM. However, they require fresh information about clients at least every hour. What should you recommend?

1. A. Setting the "enableEndpointCache" setting to false
2. B. Setting "enableSyncAll" to false
3. C. Setting "syncAllOnStart" to false
4. D. Setting "syncUpdatedOnly" to true — đáp án hiện tại