4.11 Integration of MDM with Cisco ISE CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company wants to implement a BYOD policy where employees can register their personal devices with the MDM to gain network access. They want the process to be as seamless as possible. What is the recommended workflow?

   • AUse the guest portal to register devices and then manually add them to the MDM.
   • BEmployees must manually register their devices in the MDM before connecting to the network.
   • CWhen a device connects, ISE redirects it to the MDM registration portal. After registration, ISE re-evaluates the device and grants access based on compliance.
   • DISE automatically registers the device with the MDM without user interaction.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An administrator is troubleshooting an MDM integration issue. ISE can reach the MDM server, but the compliance status for all devices is 'Unknown'. The administrator has verified that the API credentials are correct. What should they check next?

   • AVerify that the MDM server has the correct compliance policies configured.
   • BRestart the ISE Policy Service.
   • CCheck if the devices are connected to the network.
   • DEnsure that the MDM server's API endpoint is correctly configured in ISE.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security team wants to enforce a policy that only devices with a specific MDM profile (e.g., 'Corporate') are allowed to access sensitive data. They have integrated ISE with MDM. What is the best way to implement this?

   • ACreate a separate SSID for corporate devices and use that to enforce access.
   • BUse the posture agent to check for the profile.
   • CUse the MDM profile attribute in an authorization policy to grant access only to devices with the 'Corporate' profile.
   • DManually create a list of allowed device MAC addresses.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An administrator is configuring MDM integration in ISE and wants to ensure that the connection is resilient. They plan to use multiple ISE nodes. What should they consider?

   • AThe MDM server must be configured as a network device in ISE.
   • BThe API credentials must be stored on each node separately.
   • CEach ISE node must have its own MDM server configuration.
   • DThe MDM server configuration is global and shared across all ISE nodes in the deployment.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a mixed environment with both corporate-owned and BYOD devices. They want to give corporate-owned devices full access, BYOD devices limited access, and non-compliant devices no access. They have MDM integration. What is the best way to achieve this?

   • AManually assign devices to groups in ISE.
   • BCreate separate SSIDs for corporate and BYOD devices.
   • CUse MDM attributes such as ownership and compliance in authorization policies to assign different access levels.
   • DUse the posture agent to determine ownership.
   Reveal Solution Discussion Select an answer first