When creating a policy within Cisco ISE for network access control, the administrator wants to allow different access restrictions based upon the wireless SSID to which the device is connecting. Which policy condition must be used in order to accomplish this?

• A.Airespace Airespace-Wlan-ld CONTAINS <SSID Name>
• B.Radius Called-Station-ID CONTAINS <SSID Name>
• C.DEVICE Device Type CONTAINS <SSID Name>
• D.Network Access NetworkDeviceName CONTAINS <SSID Name>

Comment: *

Name: *

Email: *

Verification: *

An administrator is configuring endpoint profiling and needs to enable CoA for devices that change profiles. Which two actions must be taken to accomplish this goal? (Choose two.)

• A.Ensure that the firewall is not blocking port 1700
• B.Use an API to detect when profile changes occur and send instructions to ISE to provide a CoA
• C.Enable the CoA policy and create rules for each type
• D.Modify the RADIUS endpoint attribute filters to send CoA actions as the profiles change
• E.Define "reauth" in the default CoA action to be used

Comment: *

Name: *

Email: *

Verification: *

What should be considered when configuring certificates for BYOD?

• A.The CN field is populated with the endpoint host name.
• B.An endpoint certificate is mandatory for the Cisco ISE BYOD
• C.An Android endpoint uses EST whereas other operation systems use SCEP for enrollment
• D.The SAN field is populated with the end user name

Comment: *

Name: *

Email: *

Verification: *

When creating a policy within Cisco ISE for network access control, the administrator wants to allow different access restrictions based upon the wireless SSID to which the device is connecting. Which policy condition must be used in order to accomplish this?

• A.Network Access NetworkDeviceName CONTAINS <SSID Name>
• B.DEVICE Device Type CONTAINS <SSID Name>
• C.Radius Called-Station-ID CONTAINS <SSID Name>
• D.Airespace Airespace-Wlan-ld CONTAINS <SSID Name>

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. An engineer needs to configure central web authentication on the Cisco Wireless LAN Controller to use Cisco ISE for all guests connected to the wireless network. The components are configured already:
* Cisco Wireless LAN Controller is fully configured
* authorization profile on the Cisco ISE
* authentication policy on the Cisco ISE
Which component would be configured next on Cisco ISE?

• A.authorization policy
• B.accounting profile
• C.authentication profile
• D.authorization rule

Comment: *

Name: *

Email: *

Verification: *