Question

An employee reports that their personal tablet, previously onboarded through the BYOD flow, has been lost. The security team wants to immediately prevent that specific device from gaining network access via its issued certificate, while allowing the employee to re-register a replacement device. Which ISE action accomplishes this?

Accepted Answer

Add the endpoint to the Blocklist identity group so the BYOD authorization policy denies it and redirects it to the Blocked List portal

Answer

Delete the employee's user account from Active Directory to revoke all device certificates

Answer

Disable the internal CA and reissue new certificates to all onboarded endpoints

Answer

Change the BYOD portal to require sponsor approval for all future device registrations