6.2 Implement BYOD and Guest 300-430 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company wants to use Local Web Authentication (LWA) with ISE for a guest SSID. They want the login page to be hosted on ISE and to use a custom logo. The WLC is already configured for LWA. What must be done on ISE to present the custom portal?

   • AConfigure the WLC to use a custom URL for the portal.
   • BUpload the logo to the WLC and configure the WLC's web authentication page.
   • CUse the WLC's default internal portal and modify its HTML files.
   • DCreate a guest portal with a custom theme and assign it to the LWA policy set.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which configuration is required on the WLC to use ISE as the authentication source for Local Web Authentication?

   • AConfigure a RADIUS server with ISE and enable LWA on the WLAN.
   • BConfigure ISE as a DHCP server and enable LWA on the WLAN.
   • CConfigure ISE as a local user database on the WLC.
   • DConfigure a TACACS+ server with ISE and enable LWA on the WLAN.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of installing a certificate on a WLC for web authentication?

   • ATo encrypt the web authentication page and verify the WLC's identity to clients.
   • BTo encrypt the wireless traffic between the client and the access point.
   • CTo authenticate the WLC to the RADIUS server.
   • DTo allow the WLC to act as a certificate authority for client certificates.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A hotel offers guest Wi-Fi with a captive portal that requires guests to enter a room number and last name. The hotel wants to use ISE to validate these credentials against its property management system (PMS). The WLC is configured for Central Web Authentication. Which ISE configuration is required to integrate with the PMS?

   • AConfigure Local Web Authentication on the WLC and use the WLC's local database for room validation.
   • BCreate a custom guest portal that uses an external identity source such as a REST API or LDAP to validate credentials.
   • CUse the default self-registration portal and manually create guest accounts for each room.
   • DEnable MAC authentication bypass and use the room number as the MAC address.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A branch office has a standalone WLC and no external RADIUS server. The administrator needs to provide guest Wi-Fi access with a simple username/password login page hosted on the WLC. Which configuration is required?

   • AConfigure Local Web Authentication on the SSID and create local user accounts in the WLC's local database.
   • BEnable MAC filtering and create a guest account in the WLC's local database.
   • CConfigure Central Web Authentication and point the redirect URL to the WLC's internal portal.
   • DConfigure 802.1X with PEAP and use the WLC's local database for authentication.
   Reveal Solution Discussion Select an answer first