Exam 300-208 topic 1 question 50 discussion

Correct answer should be A. D would be correct if it had 4. Install the issued certificate on the ISE.

agree, the answer is A, the option D missing the step "Access the CA server and submit the ISE request."

Surely Answer is A. You need to install the CA issued ISE cert at some point. You do this by 'binding' the CA-signed cert to the ISE CSR you generated.

Cisco ISE Administrator Guide 2.6 page 164: Certificate Signing Requests For a certificate authority (CA) to issue a signed certificate, you must create a certificate signing request (CSR) and submit it to the CA. The list of Certificate Signing Requests (CSRs) that you have created is available in the Certificate Signing Requests page. To obtain signatures from a Certificate Authority (CA), you must export the CSRs and then send the certificates to the CA. The CA signs and returns your certificates. You can manage the certificates centrally from the Admin portal. You can create CSRs for all nodes in the deployment and export them. Then you should submit the CSRs to a CA, obtain the CA-signed certificates from the CA, import the root and intermediary CA certificates returned by the CA in to the Trusted Certificates Store, and bind the CA-signed certificates to the CSRs.