Cisco Exam 300-715 Topic 12 Question 92 Discussion

Actual exam question for Cisco's 300-715 exam

Question #: 92
Topic #: 12

An enterprise uses a separate PSN for each of its four remote sites. Recently, a user reported receiving an "EAP-TLS authentication failed" message when moving between remote sites. Which configuration must be applied on Cisco ISE?

AUse a third-party certificate on the network device.

BAdd the device to all PSN nodes in the deployment.

CRenew the expired certificate on one of the PSN.

DConfigure an authorization profile for the end users.

Show Suggested Answer

Suggested Answer: B

When using separate PSNs for different sites, the network device must be added to all PSN nodes in the deployment, so that the device can communicate with the appropriate PSN based on the location of the user1. If the device is not added to all PSN nodes, the user may encounter an EAP-TLS authentication failure when moving between sites, as the device may not be able to reach the PSN that issued the certificate2. The other options are not relevant for this scenario, as they do not address the issue of PSN communication.

by Malcolm at Jul 07, 2024, 04:50 PM

Limited Time Offer

25%

Off

Get Premium 300-715 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kerry

4 months ago

Wait, is the 'EAP-TLS authentication failed' message a hint that the certificate is the issue? I'm going with C on this one.

upvoted 0 times

Gilbert

3 months ago

I agree, let's renew the expired certificate on one of the PSN nodes.

upvoted 0 times

...

Buck

3 months ago

I think the certificate might be the problem too. I'll go with option C.

upvoted 0 times

...

Kimbery

4 months ago

A is an interesting option, but using a third-party certificate on the network device might be overkill in this case.

upvoted 0 times

...

Clare

4 months ago

D doesn't make much sense to me. Configuring an authorization profile for the end users doesn't seem relevant to the problem at hand.

upvoted 0 times

Kristel

4 months ago

C) Renew the expired certificate on one of the PSN.

upvoted 0 times

...

Cordelia

4 months ago

B) Add the device to all PSN nodes in the deployment.

upvoted 0 times

...

Lilli

4 months ago

A) Use a third-party certificate on the network device.

upvoted 0 times

...

Danica

4 months ago

C seems like the easiest fix, but I'm not sure if that's the correct answer. Renewing the expired certificate on one of the PSN could be the way to go.

upvoted 0 times