300-430 Question 212
Select 3An enterprise network administrator is tasked with configuring native supplicant provisioning using Cisco Identity Services Engine (ISE) for wireless clients. The goal is to ensure that client devices are automatically configured with the necessary security settings (such as certificates and SSID) when they connect for the first time. Which of the following steps must the administrator take to achieve this?
- A
Enable the BYOD flow in Cisco ISE and configure a client provisioning policy
- B
Configure a WLAN on the wireless LAN controller (WLC) to support 802.1X authentication
- C
Upload client device certificates to the Cisco ISE certificate store
- D
Set up a Self-Service Portal in Cisco ISE to guide users through the provisioning process
- E
Enable dynamic VLAN assignment in Cisco ISE for the WLAN
Show answer and explanation
Correct answers: A, B, D
Explanation
Native supplicant provisioning using Cisco Identity Services Engine (ISE) allows client devices to be automatically configured with the necessary security settings. This process involves enabling the BYOD flow, configuring an 802.1X WLAN, and setting up a Self-Service Portal within Cisco ISE. These steps ensure a seamless onboarding experience for end users and streamline the provisioning of certificates and network settings. While features like dynamic VLAN assignment and certificate uploads to ISE may complement network security, they are not mandatory for native supplicant provisioning.
- A. Correct.
Correct. Enabling the BYOD flow and configuring a client provisioning policy in Cisco ISE is essential for enabling native supplicant provisioning as part of the BYOD process.
- B. Correct.
Correct. The WLAN must support 802.1X authentication to allow secure communication and integration with Cisco ISE for client provisioning.
- C. Incorrect.
Incorrect. While certificates are important, uploading client device certificates directly to the ISE certificate store is not required for native supplicant provisioning. Certificates are typically provisioned dynamically during the onboarding process.
- D. Correct.
Correct. Setting up a Self-Service Portal in Cisco ISE is a critical step to guide users through the provisioning process and assist with automatic configuration of their devices.
- E. Incorrect.
Incorrect. Dynamic VLAN assignment is a useful feature for network segmentation but is not directly required for native supplicant provisioning via ISE.