Courseiva

SISE · domain

BYOD

Practise Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) BYOD practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

42 questions8 easy21 medium13 hard

Focused practice

Practice BYOD questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about BYOD

BYOD questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common BYOD exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All BYOD questions (42)

Click any question to see the full explanation, or start a practice session above.

1

Which THREE of the following are necessary to support 'Native Supplicant Provisioning' for iOS devices?

Hard
2

Which TWO of the following are valid device attributes that can be used to identify a device for BYOD onboarding?

Easy
3

In the BYOD flow, what occurs immediately after the user provides credentials in the portal?

Medium
4

Which TWO of the following are benefits of integrating MDM with Cisco ISE for BYOD?

Medium
5

An organization wants to implement EAP-TLS for BYOD. What is the correct sequence of the certificate lifecycle during the onboarding process?

Hard
6

A user reports that their BYOD device is not being recognized as 'Compliant' even though the MDM shows it is compliant. Which ISE component is responsible for retrieving this status?

Medium
7

Which TWO of the following are common troubleshooting steps for a failed BYOD portal redirection?

Medium
8

Which of the following is a requirement for a successful BYOD certificate provisioning flow?

Medium
9

What is the purpose of the 'Redirect ACL' on the network access device?

Easy
10

If a user is successfully registered but cannot connect after the BYOD flow, which status should you check in the 'Endpoints' menu?

Medium
11

You are configuring a BYOD flow where users must register their devices via the self-service portal. Which ISE component is responsible for triggering the redirection to the BYOD portal after an initial MAC Authentication Bypass (MAB) success?

Medium
12

Which component of the BYOD flow identifies the device type (e.g., iPhone vs. Windows) for appropriate configuration?

Medium
13

If a user's certificate expires, how can the user renew it using the ISE BYOD flow?

Hard
14

Which THREE actions are required when configuring a BYOD flow that involves an external MDM integration?

Medium
15

When a user's device is stolen, which action should be taken in the 'My Devices' portal?

Easy
16

You are setting up an SCEP profile for BYOD. What is the primary role of the SCEP proxy in the Cisco ISE BYOD flow?

Hard
17

You are configuring a BYOD flow for iOS devices and notice that the native supplicant provisioning process is failing during the installation of the mobile configuration profile. Where should you check the logs in ISE to determine if the issue is related to the SCEP proxy communication?

Medium
18

You are integrating an MDM server with ISE for BYOD. The requirement is that ISE must check the compliance status of the device before granting full network access. Which feature must be enabled in the MDM configuration within ISE?

Hard
19

During BYOD onboarding, the client is unable to download the Network Setup Assistant (NSA). You verify the portal settings and observe that the 'Client Provisioning' resource is correctly assigned to the policy. What is the most likely cause if the device fails to reach the download page?

Hard
20

Which protocol is used by ISE to communicate with the MDM server for device status checks?

Medium
21

Which THREE of the following items are required for the EAP-TLS authentication process to succeed?

Hard
22

An administrator needs to ensure that only devices enrolled in their corporate MDM (AirWatch) can gain full network access. How should the ISE authorization policy be configured to verify MDM compliance for a BYOD endpoint?

Medium
23

What is the primary benefit of using native supplicant provisioning in ISE?

Easy
24

Which RADIUS attribute is commonly used to inform the Network Access Server (NAS) that a re-authentication is required after a successful BYOD provisioning?

Medium
25

You are troubleshooting a certificate provisioning failure where the error is 'Internal CA Error'. What is the most likely cause?

Hard
26

Which THREE of the following protocols or standards are critical for the BYOD lifecycle?

Hard
27

Which ISE menu path is used to enable the 'BYOD' checkbox for a specific device registration portal?

Easy
28

What is the primary function of the 'Client Provisioning' policy in the context of BYOD?

Easy
29

You are configuring EAP-TLS for BYOD. What must be included in the 'Allowed Protocols' list in ISE?

Hard
30

When configuring an Authorization Policy for BYOD, which condition should be used to ensure the device has successfully performed BYOD registration?

Medium
31

When configuring certificate-based BYOD onboarding, you notice that devices are successfully registered, but the client certificate issuance fails. Where should you examine the logs to troubleshoot the Certificate Authority (CA) interaction?

Medium
32

During the BYOD onboarding process, a user is successfully redirected to the portal, but the certificate installation fails because the client cannot trust the root CA. Which configuration is required to resolve this?

Hard
33

Which TWO of the following are components of the Cisco ISE 'Endpoint' object?

Medium
34

You have configured a BYOD flow where the user must approve the device. Which portal type must be used to allow this?

Medium
35

Which TWO of the following methods can be used to identify a device as 'BYOD' in ISE?

Medium
36

Which dashboard widget provides a quick summary of BYOD activity in your network?

Easy
37

You are troubleshooting a scenario where an Android device is unable to complete the BYOD onboarding flow. You suspect the issue is with the supplicant provisioning wizard. Which tool should you use to verify if the provisioning payload was actually generated?

Medium
38

Which of the following is a common reason for a 'Certificate Mismatch' error during EAP-TLS?

Medium
39

Which THREE of the following are potential reasons a device might be placed in a 'Quarantine' VLAN during the BYOD process?

Hard
40

What is the purpose of the 'Network Setup Assistant' (NSA) in the context of Cisco ISE BYOD?

Easy
41

Which TWO of the following are mandatory steps for configuring BYOD with Cisco ISE?

Medium
42

You want to enforce a policy where personal devices are allowed access, but only if they are not jailbroken. How is this achieved in a BYOD scenario?

Hard

Frequently asked questions

What does the BYOD domain cover on the SISE exam?
BYOD questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 42 BYOD questions in the SISE question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only BYOD questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
cisco-sise CISCO-SISE byod Practice Questions