Question

A company wants employees to be able to register and configure their personally owned devices for secure 802.1X access to the corporate WLAN without help-desk involvement. Requirements: each device must automatically receive the correct supplicant configuration and be issued a unique X.509 certificate for EAP-TLS authentication. Which Cisco ISE capability satisfies these BYOD requirements?

Accepted Answer

The Native Supplicant Provisioning flow using the BYOD portal, which pushes supplicant settings and enrolls the device with a certificate via SCEP

Answer

A Hotspot Guest portal that grants access after the user accepts an acceptable-use policy

Answer

MAC Authentication Bypass configured on the WLC to whitelist each employee device's MAC address

Answer

A posture assessment policy that checks the endpoint for antivirus before granting full access