Exam 300-430 topic 1 question 137 discussion

Worst question I saw on this exam.... I agree with daeman. Explanations : A. Configure the certificate, WLAN, and radio interface on WGB. --> That's true B. Configure the certificate on the WLC. --> Nope, the WLC is the authenticator, it is neither authenticated or needs to authenticate anything C. Configure WLAN to authenticate using ISE. --> True, on the controller the SSID to which the WGB will connect must be configured, and broadcasted by the LAP D. Configure the access point with the root certificate from ISE. --> If they are talking about the WGB access point, then that's true, the root certificate that signed ISE certificate needs to be installed in the WGB AP E. Configure WGB as a network device in ISE. --> That's surely wrong. The WGB is not the authenticator in the dot1x process. It is the client. The controller is the authenticator. F. Configure a policy on ISE to allow devices to connect that validate the certificate. --> As I understand it, in some ways, that's true. We need to create an authentication/authorization policy on ISE so that the WGB AP will be authenticated by ISE based on the its certificate.

A Workgroup Bridge (WGB) allows a non-wireless-capable device (like a forklift scanner or computer) to connect to a Wi-Fi network by acting as a client. Since the authentication must be performed using certificates and RADIUS (ISE), the following steps are required: Configure the WGB: The WGB must have a certificate installed for authentication. The WLAN and radio interface must be configured so it can associate with the network. (Step A) ✅ Ensure the WLAN Uses ISE for Authentication: The WLAN must be set up to authenticate using 802.1x with EAP-TLS (certificate-based authentication) through Cisco ISE. (Step C) ✅ Configure the ISE Policy to Validate Certificates: The Cisco ISE policy must allow devices (like WGBs) that present a valid certificate to connect. ISE will validate the certificate against its CA (Certificate Authority). (Step F) ✅

A C F makes sense.

Incorrect, the correct answer is A C F

A C F make more sense, due to the fact that the question states that the WLC is already configured these are the remaining tasks needed to configure the WGB and ISE.