A network engineer must configure BYOD using Cisco ISE. In the deployment, the users must be able to submit CSR through the end devices. Which two features must be enabled to meet the requirement?…

Defining a certificate group tag is used for grouping certificates but is not a prerequisite for enabling users to submit CSRs.

While a BYOD portal is generally used for the BYOD flow, the more specific requirement for CSR submission and certificate enrollment points to the certificate provisioning portal.

Adding a SuperAdmin account to a portal admin group is related to administrative access to the portal, not to enabling the fundamental functionality for users to submit CSRs.

Enabling the Cisco ISE internal CA service is essential for ISE to act as a Certificate Authority, which is necessary for issuing certificates for BYOD devices once CSRs are submitted.

A certificate provisioning portal is specifically designed to allow end-users to enroll their devices, submit CSRs, and obtain certificates, fulfilling the requirement for users to submit CSRs through end devices.