nerdexam
Cisco

300-715 · Question #240

Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)

The correct answer is B. The guest user gets redirected to the authentication page when opening a browser. E. Cisco ISE sends a CoA upon successful guest authentication. To confirm internet access through a guest portal, verify that users are redirected to the authentication page and that Cisco ISE sends a Change of Authorization (CoA) upon successful authentication.

Web Auth and Guest Services

Question

Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)

Options

  • AThe guest device successfully associates with the correct SSID.
  • BThe guest user gets redirected to the authentication page when opening a browser.
  • CThe guest device has internal network access on the WLAN.
  • DThe guest device can connect to network file shares.
  • ECisco ISE sends a CoA upon successful guest authentication.

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    78% (29)
  • C
    5% (2)
  • D
    11% (4)

Why each option

To confirm internet access through a guest portal, verify that users are redirected to the authentication page and that Cisco ISE sends a Change of Authorization (CoA) upon successful authentication.

AThe guest device successfully associates with the correct SSID.

While associating with the correct SSID is a necessary first step, it only confirms basic wireless connectivity, not that the guest portal or internet access is fully functional.

BThe guest user gets redirected to the authentication page when opening a browser.Correct

Successful redirection to the authentication page (captive portal) confirms that the initial network access, DNS resolution, and web redirection mechanisms are functioning correctly, which is a prerequisite for guests to authenticate and gain internet access.

CThe guest device has internal network access on the WLAN.

Guest access policies are typically designed to *prevent* internal network access; allowing it would indicate a misconfiguration, not successful internet access via the guest portal.

DThe guest device can connect to network file shares.

Connecting to network file shares is an internal network access action, which is generally restricted for guest users, and thus not a verification for internet accessibility.

ECisco ISE sends a CoA upon successful guest authentication.Correct

Cisco ISE sending a Change of Authorization (CoA) upon successful guest authentication is critical because it dynamically instructs the Network Access Device (NAD) to re-authorize the guest session and apply a new policy that grants internet access. Without a successful CoA, the guest device might remain in a limited access state.

Concept tested: Cisco ISE Guest Portal configuration verification

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_01001.html

Topics

#Guest Access#Web Authentication#Cisco ISE#Change of Authorization

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice