Exam HPE7-A07 topic 1 question 30 discussion

Actual exam question from HP's HPE7-A07

Question #: 30
Topic #: 1

A customer is planning to add IoT devices that connect wirelessly to the existing 802.1 X SSID. The customer will use HPE Aruba Networking ClearPass to authenticate the IoT devices by MAC address but other devices will still need to authenticate by only 802.1X.
Refer to the exhibit.

The customer provided the current configuration and reported their non-IoT 802.1X devices are no longer able to connect. Which configuration change can be made to fix the issue?

A. Remove mac-authentication from the WLAN configuration.
B. Modify opmode wpa3-aes-gcm-256 to opmode wpa2-aes.
C. Add l2-auth-failthrough to the WLAN configuration.
D. Modify max-authentication failures to 0.

Show Suggested Answer

Suggested Answer: C 🗳️

by LarsBoerdijk at Nov. 4, 2025, 2:33 p.m.

Comments

Submit Cancel

LarsBoerdijk

3 weeks, 2 days ago

Selected Answer: A

The existing configuration for the WLAN ssid-profile has enabled MAC authentication which, while suitable for IoT devices that may not support 802.1X, can interfere with the normal 802.1X authentication process for other devices. By removing the mac-authentication directive from the WLAN configuration, the non-IoT 802.1X devices should be able to connect without issues as the authentication process will not be disrupted by MAC authentication checks. This adjustment ensures that the WLAN ssid-profile is correctly aligned with the authentication requirements for both IoT and non-IoT devices within the network environment, conforming to the best practices for mixed-device WLAN configurations.

upvoted 1 times

...