300-715 · Question #312
A user is attempting to register a BYOD device to the Cisco ISE deployment but needs to use the onboarding policy to request a digital certificate and provision the endpoint. What must be configured…
The correct answer is C. A native supplicant provisioning policy to redirect the user to the BYOD portal for onboarding. To onboard a BYOD device, request a digital certificate, and provision the endpoint, a native supplicant provisioning policy is required to guide the user through the BYOD portal.
Question
A user is attempting to register a BYOD device to the Cisco ISE deployment but needs to use the onboarding policy to request a digital certificate and provision the endpoint. What must be configured to accomplish this task?
Options
- AThe BYOD flow to ensure that the endpoint is provisioned prior to registering.
- BThe Cisco Secure Client provisioning policy to provision the endpoint for onboarding.
- CA native supplicant provisioning policy to redirect the user to the BYOD portal for onboarding.
- DThe posture provisioning policy to give the endpoint the required components prior to registering.
How the community answered
(13 responses)- B8% (1)
- C85% (11)
- D8% (1)
Why each option
To onboard a BYOD device, request a digital certificate, and provision the endpoint, a native supplicant provisioning policy is required to guide the user through the BYOD portal.
The BYOD flow is the overall process, but a specific provisioning policy is needed to handle the certificate request and endpoint configuration.
Cisco Secure Client (formerly AnyConnect) is a specific client, and while it can be used for BYOD, the question implies using the onboarding policy for a digital certificate, which is handled by native supplicant provisioning for general BYOD.
A native supplicant provisioning policy is designed to provision the device's native 802.1X supplicant with the necessary profile and certificate to connect to the network. This policy redirects the user to the Cisco ISE BYOD portal where they can register their device, download a certificate, and configure their device for 802.1X using the native supplicant, thereby enabling secure onboarding.
Posture provisioning policies are used to ensure endpoints meet specific security requirements after initial authentication, not for the initial certificate request and provisioning during onboarding.
Concept tested: Cisco ISE BYOD Onboarding Native Supplicant
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ise_admin_3_0/b_ise_admin_3_0_chapter_010010.html
Topics
Community Discussion
No community discussion yet for this question.