This is question #3 in Study Guide:
3. Which of the following statements is NOT true about the configuration of Active Directory (AD) as an External Authentication Server in ClearPass?
A.ClearPass should join the AD domain when PEAP and MSCHAPv2 are used as the authentication type.
B.The bind DN for an AD can be in the administrator@domain format.
C.ClearPass cannot be a member of more than one AD domain.
D.The list of attributes fetched from the AD can be customized.
I am not so sure about this question.
A. is correct
B seems correct
C I don't think a host can join more than one AD domain, but not sure...
D seems correct.
Anyone? ACCP seems not a popular test
Thanks,