Exam 300-715 topic 1 question 286 discussion

I take that back, correct answer D, below why. Self registration and sponsored portal use ---> Central web authentication (C is correct) Hotspot uses Device registration WebAuth (D is correct). The Key here is "URL redirection presents an AUP" ---> Hotspot The Hotspot Guest portal is an alternative Guest portal that allows you to provide network access without requiring guests to have usernames and passwords and alleviates the need to manage guest accounts. Instead, Cisco ISE works together with the network access device (NAD) and Device Registration Web Authentication (Device Registration WebAuth) to grant network access directly to the guest devices. https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ise_admin_3_1/b_ISE_admin_31_guest.html

Correct C Step 5. Select the Web Redirection checkbox and choose Centralized Web Auth from the first dropdown. In the ACL text box, type ACL-WEBAUTH-REDIRECT. You are using a default WebAuth portal, so ensure that Sponsored Guest Portal (default) is selected from the Value dropdown. https://www.ciscopress.com/articles/article.asp?p=3100059&seqNum=3

D. Device registration WebAuth → This method is used for device onboarding, not for guest authentication.

Device Registration WebAuth: In this scenario, the guest user connects to the network with a wireless connection. An initial MAC authentication bypass (MAB) request is sent to the Cisco ISE node. If the user MAC address is not in the endpoint identity store, Cisco ISE responds with a URL redirection authorization profile. The URL redirection presents the user with an AUP acceptance page when the user attempts to go to any URL.