A law firm is implementing BYOD for attorneys. They want to integrate with their on-premises Active Directory and also support multi-factor authentication (MFA) for network access. Which approach should they take?

Use LDAP directly on the wireless controller

Use RADIUS with PEAP-MSCHAPv2 and a RADIUS server that supports MFA via an external identity provider

Use a captive portal that authenticates against AD without MFA

A manufacturing company uses 802.1X for wired and wireless BYOD. They want to ensure that if a device fails posture assessment, it is placed in a quarantine VLAN with limited access. Which configuration is required?

Configure the switch to use a static VLAN for all BYOD devices

Configure the RADIUS server to return a quarantine VLAN for non-compliant devices

Disable 802.1X and use a captive portal

Use MAC authentication bypass (MAB) for all devices

Users report that they are unable to complete BYOD onboarding. The process involves a captive portal and a self-registration form. The portal loads but the form submission fails. What should you check first?

Whether the DNS server is resolving the portal URL

Whether the user's device has a valid certificate

Whether the RADIUS server is reachable from the captive portal

Whether the self-registration backend database is accessible

CCIE Security

Domain 4Objective 6

4.6 BYOD On-Boarding and Network Access Flows CCIE-SECURITY Practice Questions (Page 10)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

25%of the exam

Questions 46–48

46application · medium
A law firm is implementing BYOD for attorneys. They want to integrate with their on-premises Active Directory and also support multi-factor authentication (MFA) for network access. Which approach should they take?
Select an answer first
47application · medium
A manufacturing company uses 802.1X for wired and wireless BYOD. They want to ensure that if a device fails posture assessment, it is placed in a quarantine VLAN with limited access. Which configuration is required?
Select an answer first
48application · medium
Users report that they are unable to complete BYOD onboarding. The process involves a captive portal and a self-registration form. The portal loads but the form submission fails. What should you check first?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

4.6 BYOD On-Boarding and Network Access Flows CCIE-SECURITY Practice Questions (Page 10)

Questions 46–48

A law firm is implementing BYOD for attorneys. They want to integrate with their on-premises Active Directory and also support multi-factor authentication (MFA) for network access. Which approach should they take?

A manufacturing company uses 802.1X for wired and wireless BYOD. They want to ensure that if a device fails posture assessment, it is placed in a quarantine VLAN with limited access. Which configuration is required?

Users report that they are unable to complete BYOD onboarding. The process involves a captive portal and a self-registration form. The portal loads but the form submission fails. What should you check first?

Keep studying — 4.0 Identity Management, Information Exchange, and Access Control