Exam 300-715 topic 1 question 117 discussion

Lost: The user logs on to the My Devices portal, and marks a currently onboarded device as Lost that causes the following actions: - The device is assigned to Blacklist identity group. - Certificates provisioned to the device are not revoked. - The device status is updated to Lost. - BYODRegistration status is updated to No.

Answers are correct https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_byod.html Lost: The user logs on to the My Devices portal, and marks a currently onboarded device as Lost that causes the following actions: The device is assigned to Blacklist identity group. Certificates provisioned to the device are not revoked. The device status is updated to Lost. BYODRegistration status is updated to No. A lost device still has network access unless you create an authorization policy to block lost devices.

A & D Lost—The user logs on to the MyDevices portal, and marks a currently onboarded device as Lost. That causes the following actions: • That device is assigned to Blacklist identity group. • Certificates provisioned to the device are not revoked. • The device status is updated to Lost. • “BYODRegistration” is updated to No. A lost device still has network access unless you create an authorization policy to block lost devices. You can use the Blacklist identity group or the endpoint:BYODRegistration attribute in your rule. For example, IF Endpoint Identity Group is Blacklist AND EndPoints:BYODRegistrations Equals No THEN BYOD. For more granular access, you can also add NetworkAccess:EAPAuthenticationMethod Equals PEAP or EAP-TLS or EAP-FAST” , InternalUser:IdentityGroup Equals <<group>> to the IF part of the rule. https://www.cisco.com/c/ja_jp/td/docs/security/ise/2-7/admin_guide/workflow/html/b_byod_2_7.pdf

• Lost—The user logs on to the MyDevices portal, and marks a currently onboarded device as Lost. That causes the following actions: • That device is assigned to Blacklist identity group. • Certificates provisioned to the device are not revoked. • The device status is updated to Lost. • “BYODRegistration” is updated to No

Lost: The user logs on to the My Devices portal, and marks a currently onboarded device as Lost that causes the following actions: - The device is assigned to Blocked List identity group. - Certificates provisioned to the device are not revoked. - The device status is updated to Lost. - BYODRegistration status is updated to No. A lost device still has network access unless you create an authorization policy to block lost devices.

Testet this in lab. Device status is set to "lost". Device is added to "blocked list" and a COA Terminate was sent. Certificate is not revoked.

A and D answers are correct: • Lost—The user logs on to the MyDevices portal, and marks a currently onboarded device as Lost. That causes the following actions: • That device is assigned to Blacklist identity group. • Certificates provisioned to the device are not revoked. • The device status is updated to Lost. • “BYODRegistration” is updated to No https://www.cisco.com/c/ja_jp/td/docs/security/ise/2-7/admin_guide/workflow/html/b_byod_2_7.pdf

BYOD Registration refers to whether it is registered or not in BYOD, not the state of it in the portal. It is either yes or no, and it is yes even if it is lost or stolen.

C. the device dont have network access after mark as lost in My Device Portal. D. The cert are not revoke