Courseiva

SISE · domain

Web Auth And Guest Services

This domain covers Cisco ISE web authentication and guest services, including centralized web auth, sponsor and guest portals, and guest lifecycle management. You must configure redirects, customize portals, and control access for guest endpoints. Questions test protocol knowledge, portal task delegation, and authorization policy for guest traffic.

34 questions6 easy17 medium11 hard

Focused practice

Practice Web Auth And Guest Services questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Web Auth And Guest Services

Be able to configure web auth and guest services in ISE: set up portals, sponsor accounts, and authorization policies. The most important thing is knowing that RADIUS CoA informs the NAD of session state changes after web authentication.

RADIUS Change of Authorization (CoA) to update NAD session state after web auth

Sponsor Portal tasks: creating guest accounts and managing guest access

Configuring authorization policies for guest access to internal resources like printers

Customizing guest portal login page settings, including logos and acceptable use policy

Watch out for

Common Web Auth And Guest Services exam traps

  • ▸Confusing RADIUS CoA with SNMP or syslog for session state changes; ISE uses CoA to inform the NAD.
  • ▸Assuming sponsors can configure global portal settings; sponsors only manage guest accounts and access.
  • ▸Forgetting that guest access to internal resources requires specific authorization policy rules, not just portal settings.

Question index

All Web Auth And Guest Services questions (34)

Click any question to see the full explanation, or start a practice session above.

1

In a CWA scenario, the user is redirected to the portal, authenticates, but the session is not transitioning from the 'redirected' state to the 'authenticated' state. What is the most likely cause?

Hard
2

Which THREE of the following are required components to successfully implement Central Web Authentication (CWA) with a Cisco WLC?

Medium
3

A network administrator is deploying a guest wireless network using Cisco ISE. They want guests to authenticate through a web portal, but they do not want guests to have to create their own accounts. Instead, they want employees to pre-create guest accounts and provide credentials to visitors. Which ISE feature should the administrator configure to enable this workflow?

Medium
4

A guest user reports they receive a certificate warning when redirected to the ISE Guest portal. What is the most common cause of this issue?

Medium
5

You are troubleshooting a Guest flow where the client hits the portal but cannot authenticate. You notice the MAC address is not being cached properly. Which setting in the Guest Portal configuration is responsible for enabling MAC caching?

Medium
6

A network administrator needs to implement self-registered guest access where the guest must provide an email address for validation. Which feature in the Guest Portal settings allows for this?

Medium
7

Which THREE of the following are steps involved in the guest portal sponsor approval process?

Hard
8

If you want a guest user to be automatically redirected to a specific webpage (e.g., company news) after a successful login, where is this configured?

Medium
9

Which guest portal type should you select if you want to allow users to connect to the network without any authentication, simply by clicking an 'Accept' button?

Medium
10

A user is authenticating via the Sponsored Guest portal. After the sponsor approves the guest, the user still cannot access the network. What is the most common reason for this if the RADIUS flow is correct?

Hard
11

Which portal is intended for guest users to manage their own registered devices, such as adding or removing their personal laptops?

Easy
12

Which THREE of the following are valid actions an administrator can take in the Sponsor Portal?

Hard
13

You want to customize the guest portal so that it displays the company logo and specific terms of use. Where is this configuration performed within the Cisco ISE GUI?

Medium
14

If a user is redirected to the Guest portal but receives a '404 Page Not Found' error, what is the most likely configuration issue?

Hard
15

What is the purpose of the 'Guest Type' configuration in Cisco ISE?

Easy
16

When setting up a self-registration portal, you want to require that the guest's email address is validated before granting access. Which feature should you enable?

Medium
17

You are configuring Central Web Authentication (CWA) and need to ensure the client is redirected to the Cisco ISE portal. Which authorization profile configuration is mandatory to achieve this redirection?

Medium
18

A network engineer is setting up a guest portal that allows guests to self-register. The company requires that guests provide a valid email address to receive their account credentials. Which portal configuration setting must be enabled to enforce this requirement?

Easy
19

A guest user connects to the network and is redirected to the ISE Guest Portal. After entering valid credentials, the user is authenticated, but the browser remains on the 'Redirecting' page and never reaches the intended URL. The NAD logs show repeated MAC authentication bypass (MAB) attempts with the guest endpoint's MAC address, and the authorization result is 'Redirect'. What is the most likely cause of this issue?

Hard
20

Where do you customize the visual look and feel of the guest portal, such as logos and background colors?

Easy
21

Which THREE of the following items are verified by ISE when a guest attempts to authenticate?

Hard
22

Which TWO of the following are valid ways to provide access to a guest user?

Medium
23

Which component is responsible for the actual redirection of the guest user's browser in a CWA flow?

Medium
24

You are implementing a Guest flow where you need to track the physical location of the guest. Which attribute is best used to identify the location of the request?

Hard
25

You are configuring a Guest Portal that requires sponsor approval. What does the 'Sponsor Approval' setting inside the portal configuration actually do?

Medium
26

In a CWA flow, what is the significance of the 'cisco-av-pair = url-redirect-acl' attribute?

Hard
27

Which protocol does the Cisco ISE use to inform the NAD that a guest user's session state has changed (e.g., from 'redirect' to 'authenticated')?

Easy
28

Which TWO of the following tasks are performed within the Sponsor Portal?

Hard
29

You need to allow guest users to access specific internal resources (like a printer) while they are connected to the Guest network. How do you configure this in ISE?

Medium
30

What is the purpose of the 'Guest Flow' setting in the Authorization Profile?

Hard
31

Which TWO of the following settings are available for customizing the guest portal login page?

Medium
32

In the context of the Guest flow, what is the purpose of the 'Guest Types' configuration?

Easy
33

You are reviewing the ISE logs and see that the Guest Portal authentication is failing. Where should you look to find the exact reason for the failure?

Medium
34

A security engineer is configuring a Cisco ISE guest portal for a conference. Attendees must be able to create their own accounts but must first receive a one-time code via SMS to validate their phone number. The SMS gateway has already been integrated with ISE. Which guest portal flow should the engineer select to meet this requirement?

Medium

Frequently asked questions

What does the Web Auth And Guest Services domain cover on the SISE exam?
Be able to configure web auth and guest services in ISE: set up portals, sponsor accounts, and authorization policies. The most important thing is knowing that RADIUS CoA informs the NAD of session state changes after web authentication.
How many questions are in this domain?
This page lists all 34 Web Auth And Guest Services questions in the SISE question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Web Auth And Guest Services questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) Web Auth And Guest Services Practice Questions