What must an administrator configure in order for the ClearPass server to execute a RADIUS Change of Authorization (CoA) to Aruba Mobility Controllers (MCs) in a cluster?

An administrator manages an Aruba wireless network. ClearPass is used to centralize AAA functions. The administrator wants to implement server role derivation.
Which information will the ClearPass server return in regards to the user role assignment?

Refer tothe exhibits.
Exhibit 1: WLAN VAP configuration

Exhibit 2: Microsoft NPS server configuration

Exhibit 3: Server group configuration for the VAP.

An employee authenticates with the username employee and the correct password. However, once theuser authenticates, an administrator notices that the employee is assigned the authenticated role and not the desired employee role.
What should the administrator do to solve this problem?

Refer to the exhibit.

The branch office RAP shown in the exhibitprovides secure wireless employee access. Because of security concerns, the company's security policy does not allow wireless guest access. Some customers that visit the Branch office need Internet access. A RAP's Ethernet Port 3 is used for wired guest access and Port2 is used for wired employee access. When employees connect to Port2, they are authenticated successfully and split-tunnel policy allows them access to both corporate and Internet resources from the Branch office. Guest users, however, cannotaccess Internet resources on Port 3.
How can the administrator provide guest users Internet access?

An administrator wants to temporarily deny login access to users who fail 802.1x authentication functions three or more times. Which process will the administrator need to configure?