Cisco ISE Guest Portal Types for Wireless Access
Short answer
B Sponsored Guest Access requires username and password authentication while preventing guests from creating their own accounts.
Question
A network engineer must create a guest portal for wireless guests on Cisco ISE. The guest users must not be able to create accounts; however, the portal should require a username and password to connect. Which portal type must be created in Cisco ISE to meet the requirements?
Key Takeaways
The question tests knowledge of ISE guest portal distinctions, specifically the trap of confusing Self-Registered portals (where guests create accounts) with Sponsored portals (where sponsors approve access but do not necessarily grant self-registration rights).
This page analyzes the requirements for a Cisco ISE guest portal that mandates username and password authentication while restricting account creation capabilities. It establishes that Sponsored Guest Access is the correct configuration to enforce these specific security and administrative constraints.
Common mistake: Candidates often select Hotspot Guest Access because it is designed for simple wireless connectivity; however, they overlook the critical requirement for username/password authentication, which Hotspot portals typically bypass in favor of Acceptable Use Policy (AUP) acceptance.
Expert Analysis
Why the Answer Is Correct
Sponsored Guest Access allows network administrators or designated sponsors to create guest accounts on behalf of users. In this model, the guest receives credentials (username and password) from the sponsor and uses them to authenticate. Crucially, the guest does not have the ability to self-register or create their own accounts, satisfying the requirement that "guest users must not be able to create accounts" while still enforcing credential-based authentication.Why the Other Options Are Wrong
Self Registered Guest Access (Option C) allows end-users to create their own accounts by providing basic information, which directly violates the constraint that guests cannot create accounts. Hotspot Guest Access (Option D) is intended for open access scenarios where users typically accept an AUP without entering a username and password. Custom Guest Portal (Option A) is a template customization option rather than a functional access type defined by its registration workflow.Community Comment Notes
Community consensus strongly supports Option B. One commenter noted, "Hotspot Guest Access: Typically requires no authentication or only an AUP acceptance... B is correct." Another user highlighted their initial confusion, stating, "I confused Sponsored guest access with Self-registered guest access with sponsor approval," reinforcing that the key differentiator is who creates the account.Exam Strategy
When analyzing guest portal questions, first determine if the user can self-register. If self-registration is prohibited, eliminate Self-Registered options. Next, check for authentication requirements; if credentials are required, eliminate Hotspot/Open options.
Frequently Asked Questions
Why is Self Registered Guest Access incorrect here?
Self-Registered portals allow guests to create their own accounts via email verification, violating the requirement that guests cannot create accounts.
Does Hotspot Guest Access support username/password login?
No, Hotspot Guest Access typically relies on Acceptable Use Policy (AUP) acceptance without requiring specific user credentials.
Community Votes
80% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 4 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded.
From public community threads 4
-
4004aa3 👍 2 Answered BB is correct: https://community.cisco.com/t5/security-knowledge-base/ise-guest-access-prescriptive-deployment-guide/ta-p/3640475#toc-hId-1504079750
-
one_1996 👍 1 Answered BHotspot Guest Access: Typically requires no authentication or only an AUP acceptance. It doesn't require username/password credentials for access. B is correct
-
one_1996 👍 1 Answered Dn the sponsored guest portal guests can create an account but only after the sponsor has accepted in my opinion the D hotspot is correct
-
one_1996 👍 1 Answered BI confused Sponsored guest access with Self-registered guest access with sponsor approval B is correct
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.