Configure personas

Describe deployment options

Describe hardware and virtual machine performance specifications

Describe zero-touch provisionin

Configure native AD and LDAP

Describe identity store options

LDAP

AD

PKI

Multifactor authentication

Local

SAML IDP

Rest ID

Configure wireless network access using 802.1X

Configure wired network access using 802.1X and IBNS 2.0

Monitor mode

Low impact

Closed mode

Implement MAB

Configure Cisco TrustSec

Configure policies including authentication and authorization profiles

Configure web authentication

Configure guest access services

Configure sponsor and guest portals

Implement profiler services

Implement probes

Implement CoA

Configure endpoint identity management

Describe Cisco BYOD functionality

Use cases and requirements

Solution components

BYOD flow

Configure BYOD device on-boarding using internal CA with Cisco switches and Cisco

wireless LAN controllers

Configure certificates for BYOD

Configure block list/allow list

Describe endpoint compliance, posture services, and client provisioning

Configure posture conditions and policy, and client provisioning

Configure the compliance module

Configure posture agents and operational modes

Describe supplicant, supplicant options, authenticator, and server

Compare AAA protocols

Configure TACACS+ device administration and command authorization