Exam 300-715 topic 1 question 240 discussion

Actual exam question from Cisco's 300-715

Question #: 240
Topic #: 1

A network engineer is configuring a new certificate template on the internal CA within Cisco ISE to provision certificates to BYOD devices that must be enrolled in the network. What must be configured in the SAN field of the certificate to identify the devices after enrollment?

A. MAC address
B. email address
C. user principal name
D. common name

Show Suggested Answer

Suggested Answer: A 🗳️

by thol119 at Nov. 3, 2023, 4:48 p.m.

Comments

Submit Cancel

NullNull88

10 months, 1 week ago

The MAC Address

upvoted 2 times

...

XBfoundX

1 year, 1 month ago

ISE also auto populates endpoint MAC address in to the certificate SAN field. The endpoint MAC address is collected during initial authentication of the endpoint either via MAB or 802.1X and embedded in to the certificate for security purpose. By doing so, ISE policy can be crafted to match the actual endpoint MAC address and the certificate MAC address to prevent BYOD issued certificates from being used for other endpoint other than the one that was issued for. https://community.cisco.com/t5/security-knowledge-base/cisco-ise-byod-prescriptive-deployment-guide/ta-p/3641867

upvoted 2 times

...

spidaman

1 year, 2 months ago

Selected Answer: A

SAN is restricted to MAC or MAC+GUID

upvoted 3 times

...

thol119

1 year, 2 months ago

Selected Answer: A

SAN is restricted to MAC or MAC+GUID

upvoted 4 times

...