Exam 300-430 topic 1 question 81 discussion

Provided answer is correct, the question is what is configured on ISE not the WLC where WPA2 is configured.

When using a Single SSID for BYOD (Bring Your Own Device) with Cisco ISE version 2.1, 802.1X authentication must be configured. This ensures that devices are properly authenticated and authorized before gaining access to the network, while also allowing for seamless onboarding and provisioning. Explanation of the options: A. open authentication: This is incorrect. Open authentication is insecure and does not provide the necessary control for BYOD onboarding and network access. B. 802.1x: This is correct. 802.1X authentication is required for a Single SSID BYOD design to ensure secure authentication and authorization of devices.

Open Authentication is typically used in the initial phase of a BYOD deployment with a Single SSID. It allows devices to connect to the network without requiring credentials initially, enabling them to onboard and register with the ISE server. After the device is onboarded, more secure authentication methods (e.g., 802.1X or WPA2) can be enforced for subsequent connections. Why not the others? B. 802.1x: This is a secure authentication method but is not used in the initial phase of BYOD onboarding with a Single SSID. C. No Authentication: This is not a valid configuration for BYOD deployments, as some form of authentication is required for security. D. WPA2: This is a security protocol for Wi-Fi networks but is not used in the initial phase of BYOD onboarding with a Single SSID.

The question text want to know the config on ISE not on WLC - so it must be B

the correct answer is A : https://community.cisco.com/t5/security-knowledge-base/ise-byod-dual-vs-single-ssid-onboarding/ta-p/3641422

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216535-configure-single-ssid-wireless-byod-on-w.html

Answer is D