nerdexam
Cisco

300-715 · Question #239

A security administrator is using Cisco ISE to create a BYOD onboarding solution for all employees who use personal devices on the corporate network. The administrator generates a Certificate…

The correct answer is C. Portal. When importing a certificate signed by an external CA for a Cisco ISE BYOD onboarding solution, the 'Portal' certificate usage option must be selected.

BYOD

Question

A security administrator is using Cisco ISE to create a BYOD onboarding solution for all employees who use personal devices on the corporate network. The administrator generates a Certificate Signing Request and signs the request using an external Certificate Authority server. Which certificate usage option must be selected when importing the certificate into ISE?

Options

  • ARADIUS
  • BDLTS
  • CPortal
  • DAdmin

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    7% (2)
  • C
    89% (25)

Why each option

When importing a certificate signed by an external CA for a Cisco ISE BYOD onboarding solution, the 'Portal' certificate usage option must be selected.

ARADIUS

'RADIUS' certificate usage is for authenticating the ISE node to RADIUS clients (e.g., network devices) and for EAP methods like EAP-TLS, not specifically for the user-facing BYOD portal.

BDLTS

'DLTS' (DTLS - Datagram Transport Layer Security) is not a standard certificate usage option in Cisco ISE for importing server certificates in this context.

CPortalCorrect

For BYOD onboarding, the certificate is primarily used to secure the communication with end-user facing portals, such as the BYOD portal, Guest portal, or My Devices portal. Selecting the 'Portal' usage ensures that the certificate is used to establish secure HTTPS connections for these web-based interactions with endpoints.

DAdmin

'Admin' certificate usage is for securing the administrative web interface that administrators use to manage ISE, not for end-user BYOD portals.

Concept tested: Cisco ISE certificate usage for BYOD portals

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_0101.html#concept_8AFE7C2B291244C3A350812984F7C733

Topics

#BYOD onboarding#Certificate management#Cisco ISE#Web portal security

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice