300-715 Question #350: Real Exam Question with Answer & Explanation

Question

A network engineer must configure BYOD using Cisco ISE. In the deployment, the users must be able to submit CSR through the end devices. Which two features must be enabled to meet the requirement? (Choose two.)

Options

• ADefine a certificate group tag.
• BA new BYOD portal must be created.
• CAdd SuperAdmin account into portal admin group.
• DCisco ISE internal CA service must be enabled.
• EA certificate provisioning portal must be configured.

Explanation

To allow BYOD users to submit Certificate Signing Requests (CSRs) through their end devices, the Cisco ISE internal CA service must be enabled, and a certificate provisioning portal must be configured.

Common mistakes.

• A. Defining a certificate group tag is used for grouping certificates but is not a prerequisite for enabling users to submit CSRs.
• B. While a BYOD portal is generally used for the BYOD flow, the more specific requirement for CSR submission and certificate enrollment points to the certificate provisioning portal.
• C. Adding a SuperAdmin account to a portal admin group is related to administrative access to the portal, not to enabling the fundamental functionality for users to submit CSRs.

Concept tested. Cisco ISE BYOD certificate provisioning

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01101.html

No community discussion yet for this question.