300-425 Question 198
Select 3An enterprise organization wants to implement a BYOD policy and guest wireless network. The IT team needs to ensure that employees can self-register their personal devices for secure access while providing guests with easy onboarding and limited access to specific resources. Which combination of solutions would best meet these requirements?
- A
Configure Cisco Identity Services Engine (ISE) for self-service device onboarding and policy enforcement.
- B
Enable WPA3-Enterprise for the guest wireless network to ensure maximum security.
- C
Set up a separate SSID for guest users with a captive portal for authentication.
- D
Use 802.1X authentication for both BYOD and guest wireless networks.
- E
Implement VLAN segmentation to isolate guest traffic from internal networks.
Show answer and explanation
Correct answers: A, C, E
Explanation
To implement BYOD and guest access effectively, Cisco ISE provides the necessary tools for secure self-service onboarding and policy enforcement for employee devices. A separate SSID with a captive portal simplifies guest onboarding while VLAN segmentation ensures guest traffic is securely isolated from corporate resources. These steps collectively meet the needs of both BYOD and guest network requirements in an enterprise environment.
- A. Correct.
Cisco Identity Services Engine (ISE) is the ideal solution for implementing self-service device onboarding and applying access policies for BYOD devices.
- B. Incorrect.
WPA3-Enterprise is not relevant for guest networks as it requires certificate-based authentication, which is impractical for most guest users.
- C. Correct.
A separate SSID with a captive portal allows guest users to authenticate easily without requiring complex configurations or certificates.
- D. Incorrect.
802.1X authentication is suitable for BYOD devices but is not practical for most guest networks, which typically require simpler onboarding mechanisms.
- E. Correct.
VLAN segmentation is essential to isolate guest traffic from the internal corporate network, ensuring network security and compliance.