A company has AOS-CX switches, which authenticate clients to HPE Aruba Networking ClearPass Policy Manager...

Dynamic Authorization for Enforcement Profile Updates:

When CPPM receives updated client posture or profile data, it can initiate a Change of Authorization (CoA) to update enforcement profiles dynamically.

To support this:

Dynamic Authorization must be enabled on the switches.

CPPM must be configured as a dynamic authorization client to send CoA requests.

Option C: Correct. Dynamic authorization ensures that the switch can apply updated enforcement profiles based on new information from CPPM.

Option A: Incorrect. RADIUS accounting provides session updates but does not enable dynamic changes to enforcement profiles.

Option B: Incorrect. RADIUS track is for monitoring RADIUS server availability, not dynamic enforcement updates.

Option D: Incorrect. TACACS is not used for dynamic authorization; RADIUS handles this functionality.