SISE · domain
Web Auth And Guest Services
This domain covers Cisco ISE web authentication and guest services, including centralized web auth, sponsor and guest portals, and guest lifecycle management. You must configure redirects, customize portals, and control access for guest endpoints. Questions test protocol knowledge, portal task delegation, and authorization policy for guest traffic.
Focused practice
Practice Web Auth And Guest Services questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Web Auth And Guest Services
Be able to configure web auth and guest services in ISE: set up portals, sponsor accounts, and authorization policies. The most important thing is knowing that RADIUS CoA informs the NAD of session state changes after web authentication.
RADIUS Change of Authorization (CoA) to update NAD session state after web auth
Sponsor Portal tasks: creating guest accounts and managing guest access
Configuring authorization policies for guest access to internal resources like printers
Customizing guest portal login page settings, including logos and acceptable use policy
Watch out for
Common Web Auth And Guest Services exam traps
- ▸Confusing RADIUS CoA with SNMP or syslog for session state changes; ISE uses CoA to inform the NAD.
- ▸Assuming sponsors can configure global portal settings; sponsors only manage guest accounts and access.
- ▸Forgetting that guest access to internal resources requires specific authorization policy rules, not just portal settings.
Question index
All Web Auth And Guest Services questions (34)
Click any question to see the full explanation, or start a practice session above.
In a CWA scenario, the user is redirected to the portal, authenticates, but the session is not transitioning from the 'redirected' state to the 'authenticated' state. What is the most likely cause?
Hard2Which THREE of the following are required components to successfully implement Central Web Authentication (CWA) with a Cisco WLC?
Medium3A network administrator is deploying a guest wireless network using Cisco ISE. They want guests to authenticate through a web portal, but they do not want guests to have to create their own accounts. Instead, they want employees to pre-create guest accounts and provide credentials to visitors. Which ISE feature should the administrator configure to enable this workflow?
Medium4A guest user reports they receive a certificate warning when redirected to the ISE Guest portal. What is the most common cause of this issue?
Medium5You are troubleshooting a Guest flow where the client hits the portal but cannot authenticate. You notice the MAC address is not being cached properly. Which setting in the Guest Portal configuration is responsible for enabling MAC caching?
Medium6A network administrator needs to implement self-registered guest access where the guest must provide an email address for validation. Which feature in the Guest Portal settings allows for this?
Medium7Which THREE of the following are steps involved in the guest portal sponsor approval process?
Hard8If you want a guest user to be automatically redirected to a specific webpage (e.g., company news) after a successful login, where is this configured?
Medium9Which guest portal type should you select if you want to allow users to connect to the network without any authentication, simply by clicking an 'Accept' button?
Medium10A user is authenticating via the Sponsored Guest portal. After the sponsor approves the guest, the user still cannot access the network. What is the most common reason for this if the RADIUS flow is correct?
Hard11Which portal is intended for guest users to manage their own registered devices, such as adding or removing their personal laptops?
Easy12Which THREE of the following are valid actions an administrator can take in the Sponsor Portal?
Hard13You want to customize the guest portal so that it displays the company logo and specific terms of use. Where is this configuration performed within the Cisco ISE GUI?
Medium14If a user is redirected to the Guest portal but receives a '404 Page Not Found' error, what is the most likely configuration issue?
Hard15What is the purpose of the 'Guest Type' configuration in Cisco ISE?
Easy16When setting up a self-registration portal, you want to require that the guest's email address is validated before granting access. Which feature should you enable?
Medium17You are configuring Central Web Authentication (CWA) and need to ensure the client is redirected to the Cisco ISE portal. Which authorization profile configuration is mandatory to achieve this redirection?
Medium18A network engineer is setting up a guest portal that allows guests to self-register. The company requires that guests provide a valid email address to receive their account credentials. Which portal configuration setting must be enabled to enforce this requirement?
Easy19A guest user connects to the network and is redirected to the ISE Guest Portal. After entering valid credentials, the user is authenticated, but the browser remains on the 'Redirecting' page and never reaches the intended URL. The NAD logs show repeated MAC authentication bypass (MAB) attempts with the guest endpoint's MAC address, and the authorization result is 'Redirect'. What is the most likely cause of this issue?
Hard20Where do you customize the visual look and feel of the guest portal, such as logos and background colors?
Easy21Which THREE of the following items are verified by ISE when a guest attempts to authenticate?
Hard22Which TWO of the following are valid ways to provide access to a guest user?
Medium23Which component is responsible for the actual redirection of the guest user's browser in a CWA flow?
Medium24You are implementing a Guest flow where you need to track the physical location of the guest. Which attribute is best used to identify the location of the request?
Hard25You are configuring a Guest Portal that requires sponsor approval. What does the 'Sponsor Approval' setting inside the portal configuration actually do?
Medium26In a CWA flow, what is the significance of the 'cisco-av-pair = url-redirect-acl' attribute?
Hard27Which protocol does the Cisco ISE use to inform the NAD that a guest user's session state has changed (e.g., from 'redirect' to 'authenticated')?
Easy28Which TWO of the following tasks are performed within the Sponsor Portal?
Hard29You need to allow guest users to access specific internal resources (like a printer) while they are connected to the Guest network. How do you configure this in ISE?
Medium30What is the purpose of the 'Guest Flow' setting in the Authorization Profile?
Hard31Which TWO of the following settings are available for customizing the guest portal login page?
Medium32In the context of the Guest flow, what is the purpose of the 'Guest Types' configuration?
Easy33You are reviewing the ISE logs and see that the Guest Portal authentication is failing. Where should you look to find the exact reason for the failure?
Medium34A security engineer is configuring a Cisco ISE guest portal for a conference. Attendees must be able to create their own accounts but must first receive a one-time code via SMS to validate their phone number. The SMS gateway has already been integrated with ISE. Which guest portal flow should the engineer select to meet this requirement?
MediumOther domains
All SISE exam domains
Frequently asked questions
- What does the Web Auth And Guest Services domain cover on the SISE exam?
- Be able to configure web auth and guest services in ISE: set up portals, sponsor accounts, and authorization policies. The most important thing is knowing that RADIUS CoA informs the NAD of session state changes after web authentication.
- How many questions are in this domain?
- This page lists all 34 Web Auth And Guest Services questions in the SISE question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Web Auth And Guest Services questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.