300-715 · Question #239
A security administrator is using Cisco ISE to create a BYOD onboarding solution for all employees who use personal devices on the corporate network. The administrator generates a Certificate…
The correct answer is C. Portal. When importing a certificate signed by an external CA for a Cisco ISE BYOD onboarding solution, the 'Portal' certificate usage option must be selected.
Question
A security administrator is using Cisco ISE to create a BYOD onboarding solution for all employees who use personal devices on the corporate network. The administrator generates a Certificate Signing Request and signs the request using an external Certificate Authority server. Which certificate usage option must be selected when importing the certificate into ISE?
Options
- ARADIUS
- BDLTS
- CPortal
- DAdmin
How the community answered
(28 responses)- A4% (1)
- B7% (2)
- C89% (25)
Why each option
When importing a certificate signed by an external CA for a Cisco ISE BYOD onboarding solution, the 'Portal' certificate usage option must be selected.
'RADIUS' certificate usage is for authenticating the ISE node to RADIUS clients (e.g., network devices) and for EAP methods like EAP-TLS, not specifically for the user-facing BYOD portal.
'DLTS' (DTLS - Datagram Transport Layer Security) is not a standard certificate usage option in Cisco ISE for importing server certificates in this context.
For BYOD onboarding, the certificate is primarily used to secure the communication with end-user facing portals, such as the BYOD portal, Guest portal, or My Devices portal. Selecting the 'Portal' usage ensures that the certificate is used to establish secure HTTPS connections for these web-based interactions with endpoints.
'Admin' certificate usage is for securing the administrative web interface that administrators use to manage ISE, not for end-user BYOD portals.
Concept tested: Cisco ISE certificate usage for BYOD portals
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_0101.html#concept_8AFE7C2B291244C3A350812984F7C733
Topics
Community Discussion
No community discussion yet for this question.