nerdexam
Cisco

300-715 · Question #347

Refer to the exhibit. An engineer needs to configure central web authentication on the Cisco Wireless LAN Controller to use Cisco ISE for all guests connected to the wireless network. The components a

The correct answer is B. authorization policy. After configuring an authorization profile and authentication rule, the next step in Cisco ISE for central web authentication is to define the authorization policy that links the conditions to the authorization profile.

Web Auth and Guest Services

Question

Refer to the exhibit. An engineer needs to configure central web authentication on the Cisco Wireless LAN Controller to use Cisco ISE for all guests connected to the wireless network. The components are configured:

  • Cisco Wireless LAN Controller
  • authorization profile on the Cisco ISE
  • authentication rule on the Cisco IS

What must be configured next on the Cisco ISE?

Exhibit

300-715 question #347 exhibit

Options

  • Aauthorization rule
  • Bauthorization policy
  • Caccounting profile
  • Dauthentication profile

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    87% (47)
  • C
    7% (4)
  • D
    2% (1)

Why each option

After configuring an authorization profile and authentication rule, the next step in Cisco ISE for central web authentication is to define the authorization policy that links the conditions to the authorization profile.

Aauthorization rule

An authorization rule is a component of an authorization policy, but the broader next step is to configure the policy itself to contain and apply these rules effectively.

Bauthorization policyCorrect

An authorization policy, comprising a set of authorization rules, must be configured next to match specific conditions for guest access and apply the appropriate authorization profile for central web authentication.

Caccounting profile

An accounting profile specifies how accounting data is sent, which is related to logging and reporting, not the core logic for granting network access in central web authentication.

Dauthentication profile

An authentication profile defines how users are authenticated, but the question implies authentication rules are already in place, and the focus is on linking conditions to access permissions.

Concept tested: Cisco ISE central web authentication flow

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_0100.html

Topics

#Cisco ISE#Central Web Authentication#Guest Access#Authorization Policy

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice