# Introduction to the customer You are helping a company add HPE Aruba Networking ClearPass to their network, which uses HPE Aruba Networking network infrastructure devices. The company currently has a Windows domain and Windows CA. The Window CA issues certificates to domain computers, domain users, and servers such as domain controllers. An example of a certificate issued by the Windows CA is shown here. # ClearPass cluster IP addressing and hostnames A customer's ClearPass cluster has these IP addresses: • Publisher = 10.47.47.5 • Subscriber 1 = 10.47.47.6 • Subscriber 2 = 10.47.47.7 • Virtual IP with Subscriber 1 and Subscriber 2 = 10.47.47.8 The customer's DNS server has these entries • cp.acnsxtest.com = 10.47.47.5 • cps1.acnsxtest.com = 10.47.47.6 • cps2.acnsxtest.com = 10.47.47.7 • radius.acnsxtest.com = 10.47.47.8 • onboard.acnsxtest.com = 10.47.47.8 Refer to the scenario. You have started to create a CA to meet the customer's requirements for issuing certificates to mobile clients, as shown in the exhibit below. What change will help to meet those requirements and the requirements for authenticating clients? Reveal Solution Hide Solution Discussion Correct Answer: D 🗳️
Select an option, then click Submit answer.
- ○ Change the EST authentication method to use an external validator.
- ○ Change the EST Digest Algorithm to SHA-512.
- ○ Recreate the CA as a registration authority under Microsoft Entra ID (Azure AD).
- ○ Specify an OCSP responder, setting the hostname to localhost.
