Câu 164: 400-251: CCIE Security Written Exam

All your employees must authenticate their devices to the network, be they company-owned or employee-owned assets, with ISE as the authentication server. The primary identity store used is Microsoft Active Directory, with username and password authentication. To ensure the security of your enterprise, your security policy dictates that only company owned assets get access to the enterprise network, while personal assets should have restricted access. Which configuration allows you to enforce this policy using only ISE and Active Directory?

1. A. Configure an authentication policy that uses the computer credentials in Active Directory to determine whether the device is company-owned or personal.
2. B. Configure an authentication policy that checks against the MAC address database of company assets in the ISE endpoint identity store to determine the level of access depending on the device.
3. C. Configure an authorization policy that assigns the device the appropriate profile based on whether the device passes Machine Authentication or not. — đáp án hiện tại
4. D. Configure an authorization policy that checks against the MAC address database of company assets in the ISE endpoint identity store to determine the level of access depending on the device.
5. E. Deployment of a Mobile Device Management (MDM) solution is required, which can be used to register all devices against the MDM server, and use that to assign appropriate access levels.