An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificat

The correct answer is C. Public-Signed SAN. A Public-Signed SAN (Subject Alternative Name) certificate allows multiple domain names to be protected with a single certificate. This is useful in a distributed environment like a guest portal on Cisco ISE, where there may be multiple nodes with different Common Names (CNs). Us

Wireless Security and Mobility

Question

An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificate type helps resolve this issue?

Options

APublic-Signed Root
BSelf-Signed Standard
CPublic-Signed SAN
DSelf-Signed Wildcard

How the community answered

(23 responses)

A
17% (4)
B
4% (1)
C
70% (16)
D
9% (2)

Explanation

A Public-Signed SAN (Subject Alternative Name) certificate allows multiple domain names to be protected with a single certificate. This is useful in a distributed environment like a guest portal on Cisco ISE, where there may be multiple nodes with different Common Names (CNs). Using a SAN certificate can prevent CN mismatch errors during SSL/TLS handshakes.

Topics

#ISE certificate#SAN certificate#guest portal#CN mismatch

Community Discussion

No community discussion yet for this question.

Full 300-430 Practice