How does a device on a network using ISE receive its digital certificate during the new-device registration
process?

A.
ISE issues a pre-defined certificate from a local database

B.
The device requests a new certificate directly from a central CA

C.
ISE acts as a SCEP proxy to enable the device to receive a certificate from a central CA server

D.
ISE issues a certificate from its internal CA server

Explanation:
Brad
Answer- C
Confidence level: 0%
Note: Never bothered to research this question.
BD
SCEP Profile Configuration on ISE
Within this design, ISE is acting as a Simple Certificate Enrollment Protocol (SCEP) proxy server, thereby
allowing mobile clients to obtain their digital certificates from the CA server. This important feature of ISE
allows all endpoints, such as iOS, Android, Windows, and MAC, to obtain digital certificates through the ISE.
This feature combined with the initial registration process greatly simplifies the provisioning of digital certificates
on endpoints.
Source: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/
BYOD_Design_Guide/BYOD_ISE.html