6.2 Implement BYOD and Guest 300-430 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of ISE's self-registration portal in a guest access deployment?

   • ATo allow administrators to manually create guest accounts in bulk.
   • BTo automatically install a supplicant on the guest's device.
   • CTo provide a secure VPN connection for remote guests.
   • DTo allow guests to create their own credentials for network access.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In Local Web Authentication (LWA) with ISE as the authentication source, what does the WLC use to redirect unauthenticated clients to the ISE portal?

   • AAn HTTP redirect
   • BA DHCP option 82
   • CA DNS redirect
   • DA RADIUS Access-Challenge
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A small law firm wants to offer guest Wi-Fi to clients. They want clients to self-register with a username and password, and then be placed into a restricted VLAN. The firm uses ISE as the RADIUS server and the WLC for the guest SSID. Which ISE configuration sequence is correct?

   • AUse Central Web Authentication with a hotspot portal and let clients authenticate with social media credentials.
   • BCreate a self-registration portal, configure a policy set to redirect to that portal, and assign a VLAN via authorization profile.
   • CCreate a sponsored guest portal, then configure the WLC to use Local Web Authentication with a local user database.
   • DConfigure the WLC with a pre-shared key and use the WLC's internal guest portal for self-registration.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A small office uses a WLC with Local Web Authentication for guest access. The office manager wants to change the guest password without recreating the user account. Which WLC feature should be used?

   • AChange the SSID's pre-shared key.
   • BUse the WLC's CLI to change the RADIUS shared secret.
   • CDelete the user account and create a new one with the same username.
   • DEdit the local user account in the WLC's local database and update the password.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   After a guest successfully authenticates through the ISE captive portal in a Central Web Authentication (CWA) deployment, what happens to the client's network access?

   • AThe WLC removes the client's IP address and requires a new DHCP lease.
   • BThe client remains in the pre-authentication ACL state until the session times out.
   • CThe client must re-authenticate via 802.1X to gain full access.
   • DISE sends a CoA (Change of Authorization) to the WLC to apply the post-authentication policy.
   Reveal Solution Discussion Select an answer first