4.5 Guest Lifecycle Management Using Cisco ISE and Cisco WLC CCIE-SECURITY Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company wants to allow employees to sponsor guests for Wi-Fi access. They want the sponsor to receive an email when the guest account is created, and the guest to receive an email with the credentials. Which ISE feature should be used?

   • ASponsor portal with email notifications for both sponsor and guest.
   • BSelf-registration portal with email verification.
   • CSponsor portal but with no notifications configured.
   • DGuest portal with SMS notifications only.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company wants to ensure that guest accounts are automatically deactivated at the end of the business day. They have set the account validity to expire at 5 PM. What else should be configured to ensure the account is removed from the system?

   • AUse a script to delete accounts at 5 PM.
   • BEnable the automatic cleanup option in ISE to delete expired accounts.
   • CSet the account to 'never expire' and manually delete at the end of the day.
   • DConfigure the WLC to disconnect users at 5 PM.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A hospital wants to allow visiting doctors to get temporary Wi-Fi access. The IT department wants a workflow where a staff member (sponsor) creates the guest account, and the guest receives an email with the credentials. The account should be valid for 8 hours. Which configuration should be used?

   • ASelf-registration portal with email verification
   • BSponsored guest portal with sponsor approval and email notification
   • CGuest portal with social login and no sponsor
   • DSponsor portal with SMS notification only
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A hotel is deploying a guest Wi-Fi SSID. They want guests to authenticate via a web portal, and after authentication, guests should be placed in a VLAN that only allows internet access (no local network access). The WLC is integrated with Cisco ISE. What must be configured on the WLC and ISE to achieve this?

   • AConfigure the WLAN for WebAuth and RADIUS authentication to ISE, and in ISE authorization policy, assign the guest VLAN and an ACL that permits only internet traffic.
   • BConfigure the WLAN for MAC filtering only, and in ISE, assign the guest VLAN.
   • CConfigure the WLAN for WebAuth but do not configure RADIUS; guests will get the guest VLAN automatically.
   • DConfigure the WLAN for open authentication and use a local VLAN on the WLC.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has a guest Wi-Fi network where accounts expire after 2 hours. The security team wants to ensure that expired guest accounts are automatically removed from the system to reduce clutter and security risk. What should be configured in Cisco ISE?

   • ASet the guest account validity to 'never expire' and rely on session timeout.
   • BEnable the 'Enable expiry' option and set the 'Cleanup' option to automatically delete expired guest accounts.
   • CConfigure the WLC to disconnect guests after 2 hours, but do not change ISE settings.
   • DManually delete expired accounts every week using the ISE admin interface.
   Reveal Solution Discussion Select an answer first