Cisco 300-715 Exam - Topic 3 Question 89 Discussion

Actual exam question for Cisco's 300-715 exam

Question #: 89
Topic #: 3

[All 300-715 Questions]

Which statement about configuring certificates for BYOD is true?

AAn Android endpoint uses EST, whereas other operating systems use SCEP for enrollment

BThe SAN field is populated with the end user name.

CAn endpoint certificate is mandatory for the Cisco ISE BYOD

DThe CN field is populated with the endpoint host name

Show Suggested Answer

Suggested Answer: C

Cisco ISE provides a feature called Adaptive Network Control (ANC) that allows administrators to apply policies to endpoints based on their behavior or status1. One of the ANC policies is Quarantine, which restricts network access for an endpoint by assigning it to a limited-access VLAN or applying an access control list (ACL) on the switch port2. To use the Quarantine policy, the administrator must add the MAC address of the rogue endpoint to the endpoint quarantine list in ISE2. This will trigger a change of authorization (CoA) for the endpoint and apply the Quarantine policy. The other options are not effective for restricting network access for a rogue endpoint, as they do not use the ANC feature of ISE.

by Lea at May 28, 2024, 11:34 PM

Limited Time Offer

25%

Off

Get Premium 300-715 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brock

5 months ago

I remember reading that the SAN can have multiple entries, not just the user name.

upvoted 0 times

...

Mica

6 months ago

Definitely D! The CN should be the host name for sure.

upvoted 0 times

...

Tawanna

6 months ago

Wait, is the SAN field really just the user name? That seems off.

upvoted 0 times

...

Verdell

6 months ago

I disagree, I thought it was A. Android does use EST.

upvoted 0 times

...

Rosalia

6 months ago

I think option C is correct. Endpoint certs are a must for ISE.

upvoted 0 times

...

Carmen

7 months ago

I vaguely remember that the CN field is often related to the device name, but I’m not confident if that's the correct answer here.

upvoted 0 times

...

Haley

7 months ago

I’m pretty certain that for Cisco ISE BYOD, an endpoint certificate is required, but I can't recall the exact details.

upvoted 0 times

...

Shawnda

7 months ago

I practiced a question similar to this, and I feel like the SAN field usually has the email or user ID, not just the end user name.

upvoted 0 times

...

Deonna

7 months ago

I think I remember something about SCEP being used for most devices, but I'm not sure if Android uses EST or not.

upvoted 0 times

...

Elena

7 months ago

Okay, let me think this through. I know the SAN field is used for the end user's name, not the hostname. And I believe SCEP is the standard enrollment protocol, not EST. I'll go with option C.

upvoted 0 times

...

Deja

7 months ago

Hmm, I'm a bit unsure about this. I'll need to review the material on certificate configuration for BYOD again to make sure I understand the differences between the operating systems.

upvoted 0 times

...

King

7 months ago

I'm pretty confident about this one. I think the answer is C - an endpoint certificate is mandatory for Cisco ISE BYOD.

upvoted 0 times

...

Charlie

7 months ago

I'm a little confused on the details here. I know certificates are important for BYOD, but I'm not sure about the specifics of the enrollment protocols and field population. I'll have to make an educated guess on this one.

upvoted 0 times

...

Merlyn

7 months ago

Hmm, this one seems tricky. I'll need to carefully read through the options and think about what I know about integrating ServiceNow with external content.

upvoted 0 times

...

Delila

7 months ago

Ah, I've got it! A brute force attack is when an attacker tries to guess passwords by trying every possible combination. That's the right answer, I'm confident about that.

upvoted 0 times

...