To configure BYOD using Cisco ISE. an administrator is considering issuing certificates to the devices connecting to provide a better user experience. External CA servers cannot be used for this purpose because everything must be local to the Cisco ISE. What must be done to accomplish this?

A. Use the captive portal network assistant to issue certificates to the endpoints as they authenticate.

B. Use ISE as a sub CA for the BYOD portal and redirect users to the Root CA for certificate issuance.

C. Configure the Cisco ISE Internal CA to issue certificates to each endpoint connecting to the BYOD network.

D. Configure MS SCEP so that endpoints can query their local AD server for the correct certificate.








 

Suggested Answer: C



This question is in 300-715 Implementing and Configuring Cisco Identity Services Engine (SISE) Exam
For getting Cisco Certified Network Professional Security (CCNP Security) Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.
The website does not contain actual questions and answers from Cisco's Certification Exam.