What are two features provided by ISE? (Choose two.)

ISE includes a full guest lifecycle management capability with customizable guest portals, self-registration, sponsor approval workflows, and time-limited access - this is a primary ISE use case.

DDoS attack prevention is handled by dedicated solutions such as Cisco Secure DDoS Protection; ISE focuses on identity-based access control, not volumetric traffic mitigation.

While ISE contributes contextual data (identity, posture) to network visibility, dedicated network visibility is a function of solutions like Cisco Secure Network Analytics (Stealthwatch), not a primary ISE feature.

ISE serves as a centralized policy engine where network access, profiling, posture, and device administration policies are authored and enforced from a single platform across the entire network infrastructure.

Device firewalling is a function of next-generation firewalls such as Cisco Firepower; ISE does not perform packet-level traffic filtering or stateful firewall inspection.