If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

The correct answer is D. Blacklist. The Blacklist portal in Cisco ISE is purpose-built for blocking stolen or lost devices. When a device MAC address is added to the Blacklist endpoint identity group, access is denied at the authorization stage. Critically, the Blacklist portal serves a customizable web page to…

Policy Enforcement

Question

Options

AClient Provisioning
BGuest
CBYOD
DBlacklist

How the community answered

(41 responses)

A
7% (3)
B
2% (1)
C
2% (1)
D
88% (36)

Explanation

The Blacklist portal in Cisco ISE is purpose-built for blocking stolen or lost devices. When a device MAC address is added to the Blacklist endpoint identity group, access is denied at the authorization stage. Critically, the Blacklist portal serves a customizable web page to the blocked device explaining why access was denied - giving visibility to the user that the device is blacklisted rather than experiencing a silent failure. The BYOD portal handles enrollment, the Guest portal handles visitor access, and the Client Provisioning portal handles posture/supplicant setup - none of these are designed for blocking and notifying about stolen devices.

Topics

#Blacklisting#Lost/Stolen Devices#Network Access Control#Security Policy

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice