300-425 Question 214
Select 3An enterprise is deploying a secure wireless network and wants to use Cisco Identity Services Engine (ISE) for native supplicant provisioning. During the configuration process, the network administrator needs to ensure that devices are correctly provisioned for 802.1X authentication. Which of the following steps must be included in the provisioning process?
- A
Configure the ISE policy to push a native supplicant profile to client devices during onboarding.
- B
Enable WPA3-PSK on the wireless controller for secure client authentication.
- C
Ensure that the client devices trust the ISE server's certificate.
- D
Use ISE to generate and distribute certificates for EAP-TLS authentication.
- E
Deploy a Mobility Express controller to manage native supplicant provisioning.
Show answer and explanation
Correct answers: A, C, D
Explanation
Native supplicant provisioning using Cisco ISE involves creating a policy to push a supplicant profile to client devices, ensuring the devices trust the ISE certificate, and optionally using certificates for authentication (e.g., EAP-TLS). These steps enable secure 802.1X authentication. WPA3-PSK and Mobility Express controllers, while useful in other scenarios, are not relevant to ISE-based native supplicant provisioning.
- A. Correct.
Correct. The ISE policy must be configured to push a native supplicant profile to client devices during the onboarding process. This ensures that client devices are properly provisioned for 802.1X authentication.
- B. Incorrect.
Incorrect. WPA3-PSK is not relevant in this context as it is a pre-shared key method, not an 802.1X-based authentication method.
- C. Correct.
Correct. Client devices must trust the ISE server's certificate to establish a secure connection and enable proper authentication.
- D. Correct.
Correct. ISE can be used to generate and distribute certificates, which are essential for EAP-TLS, a commonly used 802.1X authentication method.
- E. Incorrect.
Incorrect. A Mobility Express controller is not required for native supplicant provisioning. The process is managed within Cisco ISE and the client devices.