300-425 Question 195
Select 3A company wants to implement a Bring Your Own Device (BYOD) and guest access solution for its wireless network. They require users to self-register their devices via a captive portal and ensure that guest users have time-limited access without compromising the corporate network. Which solution components should be implemented to meet these requirements?
- A
Cisco Identity Services Engine (ISE) for device onboarding and guest management
- B
802.1X authentication for guest users
- C
A separate VLAN for guest traffic
- D
A Mobility Express controller to manage guest and corporate devices
- E
Captive portal with self-registration for guest users
Show answer and explanation
Correct answers: A, C, E
Explanation
To implement BYOD and guest access as described in the scenario, Cisco ISE is required for device onboarding and guest management. A separate VLAN ensures traffic isolation for security purposes. A captive portal with self-registration provides a seamless user experience for guests while maintaining security. 802.1X authentication is not suitable for guest users, and the Mobility Express controller alone does not fulfill the requirements for BYOD and guest access management.
- A. Correct.
Cisco Identity Services Engine (ISE) is a critical component for implementing BYOD and guest access. It provides features such as device onboarding, endpoint profiling, and guest management, making it essential for this scenario.
- B. Incorrect.
802.1X authentication is typically used for corporate users and is not suitable for guest users, as it requires certificates or credentials that guests may not have.
- C. Correct.
A separate VLAN for guest traffic is necessary to isolate guest devices from the corporate network, ensuring security and network segmentation.
- D. Incorrect.
While a Mobility Express controller can manage wireless devices, it does not provide the required functionalities such as captive portal, self-registration, or guest management. These are handled by other components like Cisco ISE.
- E. Correct.
A captive portal with self-registration allows guest users to register their devices and gain temporary access. This is a key requirement in the scenario.