SISE · domain
Web Auth And Guest Services
Practise Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) Web Auth And Guest Services practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice Web Auth And Guest Services questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Web Auth And Guest Services
Web Auth And Guest Services questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common Web Auth And Guest Services exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All Web Auth And Guest Services questions (41)
Click any question to see the full explanation, or start a practice session above.
In a CWA scenario, the user is redirected to the portal, authenticates, but the session is not transitioning from the 'redirected' state to the 'authenticated' state. What is the most likely cause?
Hard2You are implementing a Guest flow that requires the user to accept an Acceptable Use Policy (AUP). Where is the AUP text configured within the Cisco ISE portal settings?
Hard3Which THREE of the following are required components to successfully implement Central Web Authentication (CWA) with a Cisco WLC?
Medium4A guest user reports they receive a certificate warning when redirected to the ISE Guest portal. What is the most common cause of this issue?
Medium5You are troubleshooting a Guest flow where the client hits the portal but cannot authenticate. You notice the MAC address is not being cached properly. Which setting in the Guest Portal configuration is responsible for enabling MAC caching?
Medium6A network administrator needs to implement self-registered guest access where the guest must provide an email address for validation. Which feature in the Guest Portal settings allows for this?
Medium7Which THREE of the following are steps involved in the guest portal sponsor approval process?
Hard8If you want a guest user to be automatically redirected to a specific webpage (e.g., company news) after a successful login, where is this configured?
Medium9Which guest portal type should you select if you want to allow users to connect to the network without any authentication, simply by clicking an 'Accept' button?
Medium10A user is authenticating via the Sponsored Guest portal. After the sponsor approves the guest, the user still cannot access the network. What is the most common reason for this if the RADIUS flow is correct?
Hard11Which portal is intended for guest users to manage their own registered devices, such as adding or removing their personal laptops?
Easy12Which THREE of the following are valid actions an administrator can take in the Sponsor Portal?
Hard13You want to customize the guest portal so that it displays the company logo and specific terms of use. Where is this configuration performed within the Cisco ISE GUI?
Medium14If a user is redirected to the Guest portal but receives a '404 Page Not Found' error, what is the most likely configuration issue?
Hard15Which TWO of the following are common reasons for a Guest portal to display an 'Internal Server Error'?
Medium16Which type of guest account is best suited for a visitor who needs access for exactly one business day and should have their account automatically deleted thereafter?
Easy17What is the purpose of the 'Guest Type' configuration in Cisco ISE?
Easy18When setting up a self-registration portal, you want to require that the guest's email address is validated before granting access. Which feature should you enable?
Medium19You are configuring Central Web Authentication (CWA) and need to ensure the client is redirected to the Cisco ISE portal. Which authorization profile configuration is mandatory to achieve this redirection?
Medium20Where do you customize the visual look and feel of the guest portal, such as logos and background colors?
Easy21When using Local Web Authentication (LWA) on a WLC, which entity performs the actual credentials check against Cisco ISE?
Hard22Which THREE of the following items are verified by ISE when a guest attempts to authenticate?
Hard23Which TWO of the following are valid ways to provide access to a guest user?
Medium24Which component is responsible for the actual redirection of the guest user's browser in a CWA flow?
Medium25You are implementing a Guest flow where you need to track the physical location of the guest. Which attribute is best used to identify the location of the request?
Hard26You are troubleshooting a scenario where guest users are not being redirected when connecting to an open SSID. The WLC reports that the client is stuck in the 'Webauth' state but the portal never loads. Which component should you verify first?
Hard27You are configuring a Guest Portal that requires sponsor approval. What does the 'Sponsor Approval' setting inside the portal configuration actually do?
Medium28In a CWA flow, what is the significance of the 'cisco-av-pair = url-redirect-acl' attribute?
Hard29Which protocol does the Cisco ISE use to inform the NAD that a guest user's session state has changed (e.g., from 'redirect' to 'authenticated')?
Easy30A Guest user is stuck in a loop and cannot access the internet after authenticating. The NAD log shows the session is bouncing between the redirect state and authorized state. What is the most likely cause?
Hard31Which TWO of the following tasks are performed within the Sponsor Portal?
Hard32A network administrator is configuring Central Web Authentication (CWA) and needs to ensure that the initial redirect is handled correctly by the switch. Which attribute must the Cisco ISE send to the network access device (NAD) to trigger the redirection?
Easy33You need to allow guest users to access specific internal resources (like a printer) while they are connected to the Guest network. How do you configure this in ISE?
Medium34When configuring an LWA portal, you notice that the HTTP traffic is not being redirected. What is a primary requirement for LWA that differs from CWA?
Medium35What is the purpose of the 'Guest Flow' setting in the Authorization Profile?
Hard36Which TWO of the following settings are available for customizing the guest portal login page?
Medium37In the context of the Guest flow, what is the purpose of the 'Guest Types' configuration?
Easy38You are reviewing the ISE logs and see that the Guest Portal authentication is failing. Where should you look to find the exact reason for the failure?
Medium39A guest user successfully authenticates at the sponsor portal but cannot access the internet. You notice the session remains in the 'Pending' state. What is the most likely cause?
Easy40Which THREE components are part of the 'Guest Access' workflow in Cisco ISE?
Easy41Which TWO of the following are mandatory components for a CWA deployment?
MediumOther domains
All SISE exam domains
Frequently asked questions
- What does the Web Auth And Guest Services domain cover on the SISE exam?
- Web Auth And Guest Services questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 41 Web Auth And Guest Services questions in the SISE question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Web Auth And Guest Services questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.