Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 258

A network security administrator needs a web authentication configuration when a guest user connects to the network with a wireless connection using these steps:
• An initial MAB request is sent to the Cisco ISE node.
• Cisco ISE responds with a URL redirection authorization profile if the user's MAC address is unknown in the endpoint identity store.
• The URL redirection presents the user with an AUP acceptance page when the user attempts to go to any URL.

Which authentication must the administrator configure on Cisco ISE?

Answer options

• A. wired NAD with local WebAuth
• B. WLC with local WebAuth
• C. NAD with central WebAuth
• D. device registration WebAuth

Correct answer: D

Explanation

The correct answer is D, as device registration WebAuth is specifically designed for guest users to authenticate via a web page after they connect. The other options, while related to authentication, do not address the specific requirement for web-based AUP acceptance for guest users.