Courseiva
Secure Network Access, Visibility and EnforcementmediumMultiple ChoiceObjective-mapped

350-701 Practice Question: Secure Network Access, Visibility and Enforcement

An engineer is configuring ISE for guest access via a sponsor portal. The policy requires that a sponsor must approve each guest. However, guests are being automatically approved without sponsor interaction. What is the most likely misconfiguration?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The guest portal's 'Access setting' is set to 'Self-Registration' instead of 'Sponsor Approval'

The guest portal's 'Access setting' must be configured to require sponsor approval. If it is set to 'Self-Registration', guests are automatically approved upon registration without any sponsor action, which matches the described symptom. Option B is incorrect because email notifications to sponsors are optional and do not affect the approval process itself. Option C is incorrect because the sponsor group assignment determines which users can act as sponsors, not whether approval is required. Option D is incorrect because profiling a guest endpoint as a known device would affect authentication methods, not the approval workflow.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The guest portal's 'Access setting' is set to 'Self-Registration' instead of 'Sponsor Approval'

    Why this is correct

    If the portal is set to self-registration, guests are automatically approved. It must be set to sponsor approval to require manual approval.

  • The guest portal is not configured to send email notifications to sponsors

    Why it's wrong here

    Email notifications do not affect approval; they only notify.

  • The sponsor user account is assigned to the wrong sponsor group

    Why it's wrong here

    Sponsor group affects who can approve, but if the portal is set to auto-approve, sponsor group doesn't matter.

  • The guest endpoint is being profiled as a known device

    Why it's wrong here

    Profiling does not override portal approval settings.

About these practice questions

Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.