Which SSID Type Is Used for BYOD Device Onboarding?
Describe Cisco BYOD functionality
Answer
Correct answer: B — The guest SSID type is the dedicated, open SSID used to onboard devices before they move to the secure corporate SSID through Cisco ISE.
An engineer is configuring a dedicated SSID for onboarding devices. Which SSID type accomplishes this configuration?
Community Insight
The question tests the difference between an SSID type (guest, corporate, personal) and a BYOD deployment model (single-SSID vs dual-SSID) — the trap is picking 'dual' because it sounds like the Cisco-recommended BYOD design.
Cisco BYOD onboarding requires a dedicated SSID that devices associate to before they are provisioned and moved onto the secure corporate network. That dedicated onboarding SSID is a guest-type SSID, which is why the answer to this 300-715 question is guest rather than the dual-SSID deployment model.
Choosing 'dual' because Cisco's recommended BYOD onboarding flow is the dual-SSID model; however, dual describes a deployment architecture, not an SSID type, and the question explicitly asks for the SSID type that performs onboarding.
Community Discussion (19 comments)
evdw
👍 1
Selected: B
BYOD deployment options and status flow The BYOD deployment flows that support personal devices vary slightly, depending on the SSID type or the device type. Single or dual SSID: With a single SSID, the same Wireless Local Area Network (WLAN) is used for certificate enrollment, provisioning, and network access. In a dual SSID deployment, two SSIDs are used: one provides enrollment and provisioning, and the other provides secure network access. So using a dedicated SSID we using single SSID ... so Answer is B
AsaHung
👍 1
Selected: C
I Chose C-Dual , here are reasons : A and D are WLC SSID function , not ISE guest ssid just for guest access , not for BYOD onboarding , in official cert guide SISE 300-715 , Chapter 16 , page 487 BYOD Onboadring is have Dual SSID onboarding and Single SSID onboarding
SrStew
👍 1
Selected: B
i think its a gotcha if you choose dual. you would use the guest type for onboarding generally, dual is the terminology for setting a dedicated and since they specifically dont mention multiple SSIDs i think this question specifically is looking for B as answer
817042b
👍 2
Selected: C
C. dual SSID model is a Cisco-recommended approach for secure BYOD onboarding. Uses two SSIDs: One SSID for initial onboarding (provisioning, certificate install). Another SSID for post-onboarding access (secured access). After the device is onboarded (e.g., via Cisco ISE), it’s moved automatically or manually to the secure SSID. This separation allows: Better security Cleaner policy control Streamlined user experience Example: Onboarding SSID: "Corp-Onboard" Access SSID: "Corp-Secure" Summary: Dual = onboarding + production access, securely.
Cachaman
👍 2
Selected: B
Correct B Dual is not and SSID type
Chowder7
👍 1
Selected: C
It is asking for ssid type. I will go with C.
luismg
👍 2
There is not an ssid type dual, dual is an implementation type. The ssid type is guest.
Korndal
👍 2
Selected: B
So Easy it's stopid. It askeds what SSID "TYPE!!!!!" There is no type called Dual. There are only Guests.Hidden and Broadcast are features of the SSID
ZappBrannigan
👍 4
Selected: B
I'm going with B, guest. hisho72 is correct in looking at the provided doc. I also referenced e-learning SISE chapter 10.2. It brought me to a same conclusion. Dual and Single SSID are methods of wireless setups for BYOD onboarding Guest is a type. Also, in that training module, it list "Open SSID" as a type for onboarding both guests and employees. Employees are then redirected to the Secure SSID.
XBfoundX
👍 2
Here they are not talking about Guest access. When you do the onboarding of the devices we are not talking about guest access but about BYOD. BYOD have to type of SSIDs DUAL or single SSID. https://www.dclessons.com/configuring-ise-for-byod-onboarding https://community.cisco.com/t5/security-knowledge-base/ise-byod-dual-vs-single-ssid-onboarding/ta-p/3641422 If you search the onboarding keyword and BYOD you wil see that they are talking about these to SSIDs.
NikoTomas
👍 5
Question states "configuring a dedicated SSID for onboarding devices" - talking about 1 particular SSID, which should be dedicated for first phase of Dual-SSID BYOD approach. You are confusing SSID type (which is open or Guest in this case) with BYOD type (which is either Single-SSID or Dual-SSID). For me, correct answer is B - Guest SSID.
IETF1
👍 2
C. dual
CCNP21
👍 2
Selected: C
Dual is correct.
denverfly
👍 4
Selected: B
The correct answer is - guest. A guest SSID is a dedicated SSID that is used for onboarding devices. It is typically used for devices that are not owned by the organization, such as devices that are owned by employees or contractors. The guest SSID is typically configured with a lower level of security than the corporate SSID. This is because the devices that connect to the guest SSID are not trusted devices. The other options are not correct. A hidden SSID is an SSID that is not broadcast. This means that devices will not be able to see the SSID when they scan for networks. A dual SSID is a configuration where there are two SSIDs, one for corporate devices and one for guest devices. A broadcast SSID is an SSID that is broadcast. This means that devices will be able to see the SSID when they scan for networks.
Vlad_Is_Love_ua
👍 3
Selected: C
C is correct. There are only two TYPES of SSID for BYOD: dual and single. So B is NOT correct
madcloud
👍 2
it is called dual SSID , keyword is dedicated https://community.cisco.com/t5/security-knowledge-base/cisco-ise-byod-prescriptive-deployment-guide/ta-p/3641867#toc-hld-1517233429
awhamm
👍 3
Selected: B
The question asks for the SSID 'type' that performs the enrolment so should still be B. Guest. Even in the link it describes the concept of single vs. dual but Guest SSID is used for onboarding.
YmerG
👍 2
I agree. First I thought it was C but after re-reading it carefully I think it is asking which of 2 SSID-s in DUAL-SSID method is used for onboarding, which means the GUEST one.
hisho72
👍 3
Selected: C
Regarding to the Reference answer should be C
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The question asks for an SSID type that supports onboarding, and in Cisco wireless and ISE terminology the SSID types are guest, corporate/employee and personal — with hidden and broadcast describing SSID advertisement behavior rather than a type. Cisco's BYOD dual-SSID flow starts with the client associating to an open, dedicated onboarding SSID that redirects the user to the ISE guest/onboarding portal for registration and certificate provisioning, after which the device is moved to the secure internal SSID. Because that first-phase SSID is configured with open authentication and a web redirect for unregistered users, it is implemented as a guest SSID. Selecting guest therefore matches both the wording of the question and the way onboarding is actually built on the WLC and ISE.Why the Other Options Are Wrong
A hidden SSID is simply an SSID whose beacon is suppressed; it is a broadcast attribute, not an onboarding mechanism, and hiding the onboarding SSID would only make the BYOD flow harder for users. Dual is the most attractive distractor: dual-SSID is the Cisco-recommended BYOD architecture (one open onboarding SSID plus one secure SSID), but it is a deployment model, not an SSID type — no WLC or ISE screen lets you create a 'dual' SSID. Broadcast likewise describes whether the SSID name is advertised in beacons, a radio-level setting that is orthogonal to BYOD provisioning. Only guest is an actual SSID type that can be dedicated to onboarding.Community Comment Notes
NikoTomas draws exactly this line, observing that the question is about one particular SSID "which should be dedicated for first phase of Dual-SSID BYOD approach," and warns against confusing the SSID type with the BYOD type. ZappBrannigan backs that up from the SISE e-learning material, stating that "Dual and Single SSID are methods of wireless setups for BYOD" while guest is a type. Korndal is blunter — "There is no type called Dual" — and notes hidden and broadcast are just features of the SSID. Vlad_Is_Love_ua argues the opposite, claiming "There are only two TYPES of SSID for BYOD: dual and single," but that conflates the onboarding model with the SSID type the WLC actually creates, which is the distinction the exam is testing.Official Reference
Exam Strategy
Watch the exact noun in the question stem: if it asks for an SSID type, answer with an SSID category (guest, corporate, personal) and never with an architecture such as single-SSID or dual-SSID. When two options both relate to BYOD, eliminate the one that is a design model or a radio feature rather than something you can configure as an SSID.
Frequently Asked Questions
Why is dual SSID not the answer if Cisco recommends dual-SSID for BYOD?
Dual-SSID is the deployment model (an onboarding SSID plus a secure SSID), not an SSID type. The WLC SSID you dedicate to onboarding is configured as a guest SSID.
Is the onboarding SSID open authentication with web redirect to ISE?
Yes. In the dual-SSID BYOD flow the onboarding SSID is open with centralized web authentication, redirecting the client to the ISE BYOD/guest portal for registration and certificate provisioning.