What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

1. A. Network Access Control
2. B. My Devices Portal
3. C. Application Visibility and Control
4. D. Supplicant Provisioning Wizard

Correct Answer: D

An administrator has added a new Cisco ISE PSN to their distributed deployment. Which two features must the administrator enable to accept authentication requests and profile the endpoints correctly, and add them to their respective endpoint identity groups? (Choose two )

1. A. Session Services
2. B. Endpoint Attribute Filter
3. C. Posture Services
4. D. Profiling Services
5. E. Radius Service

Correct Answer: DE

What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

1. A. Authentication is redirected to the internal identity source.
2. B. Authentication is redirected to the external identity source.
3. C. Authentication is granted.
4. D. Authentication fails.

Correct Answer: D

What is a requirement for Feed Service to work?

1. A. TCP port 3080 must be opened between Cisco ISE and the feed server
2. B. Cisco ISE has a base license.
3. C. Cisco ISE has access to an internal server to download feed update
4. D. Cisco ISE has Internet access to download feed update

Correct Answer: C

An employee logs on to the My Devices portal and marks a currently on-boarded device as ‘Lost’. Which two actions occur within Cisco ISE as a result oí this action? (Choose two)

1. A. Certificates provisioned to the device are not revoked
2. B. BYOD Registration status is updated to No
3. C. The device access has been denied
4. D. BYOD Registration status is updated to Unknown.
5. E. The device status is updated to Stolen

Correct Answer: AB
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide