350-701 Practice Question: Deploying Cisco ISE for network access control

Correct answer & explanation

MAB uses MAC address for authentication. Profiling can identify the device and then ISE can apply policies, but profiling alone does not authenticate; it is often combined with MAB. The question asks for authentication methods, so MAB and (if the device can be profiled and then authenticated via a policy) but typically MAB is the primary method. Another method is to use a device certificate if the device supports it, but the question says non-802.1X devices. So MAB and possibly web authentication (guest portal) for devices that can browse. However, the most common are MAB and web authentication. But from ISE perspective, for non-supplicant devices, MAB and web-auth are options. Since the question says 'authenticate', and web-auth is for guest, I'll include MAB and device registration (which is not standard). Better: MAB and local database authentication via web portal. However, to be precise, the two methods are MAB and authentication using a local or AD account via a web portal (for devices that can do HTTP). But the options: A) 802.1X (not supported), B) MAB, C) Profiling, D) Guest portal, E) Device registration. The correct two: MAB and Guest portal (since guest portal can provide authentication for non-supplicant devices).