Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 168

A network administrator is setting up wireless guest access and has been unsuccessful in testing client access. The endpoint is able to connect to the SSID but is unable to gain access to the guest network through the guest portal.
What must be done to identify the problem?

Answer options

• A. Use traceroute to ensure connectivity.
• B. Use context visibility to verify posture status.
• C. Use the identity group to validate the authorization rules.
• D. Use the endpoint ID to execute a session trace.

Correct answer: D

Explanation

Using the endpoint ID to execute a session trace is the best way to identify where the connectivity issue lies in the guest access process. Traceroute (A) is helpful for general connectivity checks but may not pinpoint authorization issues. Context visibility (B) assists with posture status, which is not the primary concern here. Validating authorization rules with the identity group (C) may help, but it does not directly trace the session to uncover where the problem is occurring.