6.2 Implement BYOD and Guest 300-430 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An enterprise is deploying 802.1X for corporate laptops. The security team wants to ensure that only devices with a valid certificate can connect, and they want to use ISE to provision the certificates to the laptops. Which ISE feature should be used?

   • ANative supplicant provisioning with a certificate authority (CA) configured in ISE.
   • BMAC authentication bypass with a pre-shared key.
   • CSelf-registration portal with a downloadable certificate.
   • DLocal Web Authentication with a certificate upload page.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When a client connects to a wireless SSID configured for Central Web Authentication (CWA) with ISE, what is the first step the client experiences before being redirected to the captive portal?

   • AThe client is redirected to the ISE portal after the WLC sends an HTTP redirect based on the client's initial HTTP request.
   • BThe client receives an IP address and is immediately allowed full network access.
   • CThe client is assigned a static IP address by the WLC before the portal is displayed.
   • DThe client must first install a supplicant and then authenticate via 802.1X before any web redirect occurs.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which WLAN security setting must be selected to enable Local Web Authentication on a WLC without an external RADIUS server?

   • AOpen Authentication
   • BWPA2-Enterprise
   • CWeb Policy: Authentication
   • DWPA2-PSK
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A library offers guest Wi-Fi with a self-registration portal on ISE. The library wants to limit each guest's session to 2 hours and allow only one active session per email address. Which ISE configuration is needed?

   • AConfigure the WLC's session timeout and rely on the WLC to enforce the limit.
   • BUse a sponsored guest portal and manually set each guest's session limits.
   • CConfigure the guest portal's session timeout and set the maximum number of concurrent sessions per user.
   • DCreate a RADIUS attribute to limit session time and concurrent sessions.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An administrator is configuring a WLC for Central Web Authentication with ISE. The WLC's HTTPS certificate is self-signed, and clients are receiving browser warnings when redirected to the portal. The administrator wants to eliminate the warnings without changing the WLC's hostname. Which action should be taken?

   • AAdd the self-signed certificate to the clients' trusted root store using group policy.
   • BDisable HTTPS on the WLC and use HTTP for the redirect.
   • CInstall the ISE certificate on the WLC and use it for the HTTPS service.
   • DInstall a CA-signed certificate on the WLC that matches the WLC's hostname.
   Reveal Solution Discussion Select an answer first