300-715 Question #240: Real Exam Question with Answer & Explanation

Question

Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)

Options

• AThe guest device successfully associates with the correct SSID.
• BThe guest user gets redirected to the authentication page when opening a browser.
• CThe guest device has internal network access on the WLAN.
• DThe guest device can connect to network file shares.
• ECisco ISE sends a CoA upon successful guest authentication.

Explanation

To confirm internet access through a guest portal, verify that users are redirected to the authentication page and that Cisco ISE sends a Change of Authorization (CoA) upon successful authentication.

Common mistakes.

• A. While associating with the correct SSID is a necessary first step, it only confirms basic wireless connectivity, not that the guest portal or internet access is fully functional.
• C. Guest access policies are typically designed to prevent internal network access; allowing it would indicate a misconfiguration, not successful internet access via the guest portal.
• D. Connecting to network file shares is an internal network access action, which is generally restricted for guest users, and thus not a verification for internet accessibility.

Concept tested. Cisco ISE Guest Portal configuration verification

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_01001.html

No community discussion yet for this question.