300-715 Question #357: Real Exam Question with Answer & Explanation

Question

A network administrator must restrict sponsor account privileges for managing guest accounts on Cisco ISE for a new account that is being created. Sponsor groups currently exist for each business unit. The new sponsor that is being added must be restricted to only managing guest accounts created by sponsors from the same sponsor group. In which group must the new sponsor account be configured?

Options

• AGROUP_ACCOUNTS
• BOWN_ACCOUNTS
• CALL_ ACCOUNTS
• DALL_EMPLOYEES

Explanation

{"question_number": 2, "question": "A network administrator must restrict sponsor account privileges for managing guest accounts on Cisco ISE...", "correct_answer": "A", "explanation": "Cisco ISE sponsor groups define the scope of guest accounts a sponsor can manage. There are three built-in scopes: OWN_ACCOUNTS (sponsor can only manage accounts they personally created), GROUP_ACCOUNTS (sponsor can manage any account created by any sponsor within the same sponsor group), and ALL_ACCOUNTS (sponsor can manage all guest accounts regardless of creator or group). Because the requirement is that the new sponsor can manage guest accounts created by other sponsors in the same business unit group - but not accounts from other groups - the correct scope is GROUP_ACCOUNTS (A). ALL_EMPLOYEES (D) is not a standard ISE sponsor management scope.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.