Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) — Question 683

An engineer modifies the existing ISE guest portal URL to use a static FQDN. Users immediately report that they receive certificate errors when they are redirected to the new page. Which two additional configuration steps are needed to implement the change? (Choose two.)

Answer options

• A. Add a new DNS record to resolve the FQDN to the PSN IP address
• B. Create and sign a new CSR that contains the static FQDN entry
• C. Manually configure the hosts file on each user device.
• D. Disable HTTPS on the WLC under the Management menu
• E. Add the FQDN entry under the WLC virtual interface

Correct answer: A, B

Explanation

The correct answers A and B are necessary because adding a DNS record ensures the FQDN resolves to the correct IP address, and creating a new CSR with the FQDN is required to obtain a valid SSL certificate that matches the new URL. Options C, D, and E are not suitable solutions for addressing the certificate errors; modifying the hosts file is impractical for all users, disabling HTTPS is not advisable for security, and adding the FQDN entry under the WLC virtual interface does not resolve certificate mismatches.