nerdexam
Cisco

300-715 · Question #217

An administrator is configuring sponsored guest access using Cisco ISE Access must be restricted to the sponsor portal to ensure that only necessary employees can issue sponsored accounts and…

The correct answer is C. Modify the sponsor groups assigned to reflect the desired user groups. To restrict sponsor portal access to specific employees, an administrator must assign the appropriate user identity groups to the sponsor groups configured in Cisco ISE.

Web Auth and Guest Services

Question

An administrator is configuring sponsored guest access using Cisco ISE Access must be restricted to the sponsor portal to ensure that only necessary employees can issue sponsored accounts and employees must be classified to do so. What must be done to accomplish this task?

Options

  • AConfigure an identity-based access list in Cisco ISE to restrict the users allowed to login
  • BEdit the sponsor portal to only accept members from the selected groups
  • CModify the sponsor groups assigned to reflect the desired user groups
  • DCreate an authorization rule using the Guest Flow condition to authorize the administrators

How the community answered

(44 responses)
  • A
    11% (5)
  • B
    5% (2)
  • C
    82% (36)
  • D
    2% (1)

Why each option

To restrict sponsor portal access to specific employees, an administrator must assign the appropriate user identity groups to the sponsor groups configured in Cisco ISE.

AConfigure an identity-based access list in Cisco ISE to restrict the users allowed to login

Identity-based access lists control network access for users and devices, not access to the sponsor portal itself for administrators.

BEdit the sponsor portal to only accept members from the selected groups
CModify the sponsor groups assigned to reflect the desired user groupsCorrect

To ensure only specific employees can access the sponsor portal, the sponsor groups within Cisco ISE must be linked to the relevant internal identity groups or external directory groups that classify these authorized employees. This mapping directly controls who has permission to use the portal and issue sponsored accounts.

DCreate an authorization rule using the Guest Flow condition to authorize the administrators

Concept tested: Cisco ISE sponsored guest access configuration

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ISE_admin_guide_27/b_ISE_admin_guide_27_chapter_0110.html#concept_81F4B0C7747D4C82A2B29446D06D8A39

Topics

#Sponsored Guest Access#Sponsor Portal#Sponsor Groups#ISE Identity Groups

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-715 Practice