6.2 Implement BYOD and Guest 300-430 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A retail chain uses Local Web Authentication (LWA) with ISE as the authentication source for a guest SSID. The WLC is configured for LWA and points to ISE. A client connects, opens a browser, and is redirected to a login page. After the client submits credentials, ISE authenticates the user. What must be configured on the WLC to ensure the client is redirected to the correct ISE portal?

   • AThe pre-authentication ACL that permits the client to reach the ISE portal and blocks all other traffic.
   • BThe RADIUS server's shared secret and the ISE portal's URL in the LWA configuration.
   • CThe WLC's local user database with the same usernames as ISE.
   • DThe WLC's certificate must be replaced with the ISE certificate to avoid browser warnings.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which method can be used to generate a certificate for the WLC's web authentication service?

   • AUse a certificate from the access point.
   • BGenerate a self-signed certificate on the WLC.
   • CUse the client's certificate.
   • DUse a certificate from the RADIUS server.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A hospital deploys a new BYOD SSID for visitors. The SSID uses Central Web Authentication (CWA) with ISE. Visitors must first authenticate with a sponsor-created account, then see a terms-of-use page. The WLC and ISE already trust each other via RADIUS. Which two configurations are required on ISE to meet this requirement?

   • AEnable Local Web Authentication on the WLC and add sponsor usernames to the WLC local database.
   • BCreate a sponsored guest portal and configure a policy set that redirects unauthenticated clients to that portal.
   • CCreate a guest portal with self-registration enabled and set the WLC's redirect ACL to permit the portal URL.
   • DConfigure the WLC to use a pre-shared key for RADIUS and set the portal to use a self-signed certificate.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When configuring Local Web Authentication directly on a WLC without an external RADIUS server, where are user credentials stored?

   • AIn the WLC's local user database
   • BIn the ISE identity store
   • CIn the client's browser cache
   • DIn the RADIUS server's user database
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An administrator is comparing Local Web Authentication (LWA) with Central Web Authentication (CWA) for a new guest SSID. The company wants to use ISE for policy enforcement and also wants to support self-registration. Which statement correctly describes the appropriate choice?

   • AUse CWA with the WLC hosting the portal.
   • BUse LWA because it is simpler and can still use ISE for RADIUS authentication.
   • CUse LWA with a redirect to the ISE portal.
   • DUse CWA because it allows ISE to host the portal and enforce policy after authentication.
   Reveal Solution Discussion Select an answer first