Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 115

An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?

Answer options

• A. Common Name and GUID
• B. MAC Address and GUID
• C. Distinguished Name
• D. Common Name

Correct answer: B

Explanation

The correct answer is B, as selecting 'MAC Address and GUID' allows the certificate to remain valid despite changes in the MAC address of BYOD devices. The other options do not account for the MAC address change, which would require re-enrollment, making them unsuitable for this requirement.