6.2 Implement BYOD and Guest 300-430 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A university wants to automate the configuration of 802.1X on student-owned Windows laptops so they can securely connect to the campus Wi-Fi. ISE will be used to provision the supplicants with the correct settings and a trusted root certificate. Which ISE feature should be used?

   • ASelf-registration guest portal with a downloadable agent.
   • BMAC authentication bypass with a pre-shared key configured on the WLC.
   • CNative supplicant provisioning using the ISE Supplicant Provisioning Portal.
   • DLocal Web Authentication with a redirect to a certificate download page.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A university wants to provision Windows and macOS laptops with the correct 802.1X settings and a trusted certificate for their secure wireless network. They use ISE for authentication. Which ISE feature should they use to automate this provisioning?

   • ALocal Web Authentication with a local user database on the WLC.
   • BCentral Web Authentication with a sponsored portal.
   • CNative supplicant provisioning, which pushes the 802.1X profile and certificate to the client.
   • DSelf-registration portal for clients to download a configuration profile.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A small business wants to use ISE as the authentication source for its guest Wi-Fi, but the WLC is an older model that does not support Central Web Authentication. The business still wants a captive portal experience where users enter credentials that are validated by ISE. Which approach should be used?

   • AConfigure the SSID for 802.1X with EAP-TLS and use ISE for certificate-based authentication.
   • BUse the WLC's local database and configure a redirect ACL to the ISE portal.
   • CUpgrade the WLC to a model that supports Central Web Authentication and use ISE's portal.
   • DConfigure Local Web Authentication on the WLC with ISE as the RADIUS server.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which ISE component must be configured to support a self-registration portal for guest access?

   • AA sponsor portal
   • BA BYOD portal
   • CA guest portal with self-registration enabled
   • DA central web authentication portal
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A retail company wants to allow customers to create their own Wi-Fi accounts through a branded captive portal. The portal must be hosted on ISE and must validate that the guest accepts the acceptable use policy before granting access. The WLC is already configured for Central Web Authentication. What must be configured on ISE to enable this self-registration flow?

   • AConfigure the WLC to use Local Web Authentication and upload the portal HTML files to the WLC.
   • BCreate a guest portal with self-registration enabled and associate it with the appropriate identity source sequence.
   • CCreate a sponsored guest portal and configure the sponsor to approve each registration.
   • DEnable the ISE guest service and configure the WLC to redirect to the ISE portal using a static URL.
   Reveal Solution Discussion Select an answer first