SISE BYOD Practice Question
During the BYOD onboarding process, a user is successfully redirected to the portal, but the certificate installation fails because the client cannot trust the root CA. Which configuration is required to resolve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Import the Root CA certificate into the 'Trusted Certificates' store with the 'Trust for client authentication or issuance of users' checkbox enabled.
The Root CA certificate must be uploaded to the 'Trusted Certificates' store in ISE and marked as trusted for 'Client Authentication'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Install the CA certificate on the local WLC controller under the WLAN configuration.
Why it's wrong here
The WLC handles the traffic but does not manage the trust chain for the supplicant's certificate.
- ✗
Add the Root CA to the 'System Certificates' store instead of 'Trusted Certificates'.
Why it's wrong here
System certificates are for the ISE server's identity, not for verifying client certificates.
- ✗
Enable 'Allow Weak Ciphers' in the global BYOD settings.
Why it's wrong here
Cipher strength does not affect the trust validation of a CA certificate.
- ✓
Import the Root CA certificate into the 'Trusted Certificates' store with the 'Trust for client authentication or issuance of users' checkbox enabled.
Why this is correct
This ensures that the ISE node trusts certificates issued by the CA and that the CA certificate is pushed to the client during onboarding.
Visual reference
About these practice questions
One of 322 original SISE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This SISE practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SISE exam.