Cisco ISE Guest WLAN Access Configuration

350-701 By islever Editorial Last updated

Short answer

A Configure ISE and the WLC for guest redirection and services using a self-registered portal.

Question

An engineer is configuring guest WLAN access using Cisco ISE and the Cisco WLC. Which action temporarily gives guest endpoints access dynamically while maintaining visibility into who or what connecting?
  1. Configure ISE and the WLC for quest redirection and services using a self-registered portal. Correct Answer
  2. Modify the WLC configuration to allow any endpoint to access an internet-only VLAN.
  3. Configure ISE and the WLC for guest redirection and services using a hotspot portal.
  4. Modify the WLC configuration to require local WLC logins for the authentication prompts.

Key Takeaways

The exam tests the distinction between different guest portal types in Cisco ISE, specifically highlighting why self-registration provides both dynamic access and visibility compared to other methods.

This question evaluates the correct method for dynamically provisioning guest access while maintaining visibility using Cisco ISE and WLC. The analysis confirms that a self-registered portal is the standard solution for this requirement.

Common mistake: Candidates often select 'hotspot portal' (Option C) because it implies open access, failing to recognize that self-registration is required for the specific 'visibility into who or what' constraint.

Expert Analysis

Why the Answer Is Correct

A self-registered guest portal allows guests to create their own credentials (username/password) without administrator intervention, which satisfies the 'dynamically' part of the prompt. Because each user creates an account, the system maintains full visibility into exactly who is connecting, satisfying the second requirement. This is the industry-standard approach for managed guest access.

Why the Other Options Are Wrong

Option B bypasses authentication entirely, resulting in zero visibility. Option D requires local WLC logins, which are not scalable and lack the centralized visibility of ISE. Option C (Hotspot Portal) typically allows anonymous access via social login or no login, which fails the strict 'visibility into who' requirement implied by the context of controlled guest access.

Community Comment Notes

Community consensus strongly favors Option A, with users noting that 'Guest portal is A ISE and central web auth'. One commenter provided a direct link to Cisco documentation confirming 'ISE Self-Registered Guest Portal' configuration as the authoritative reference.

Official Reference

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216330-ise-self-registered-guest-portal-configu.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

When configuring guest access, always match the 'visibility' requirement to the portal type. If you need to know who is connected, choose Self-Registration. If you need speed/anonymity, choose Hotspot/Social Login.

Frequently Asked Questions

Why is a hotspot portal not the best choice here?

Hotspot portals often allow anonymous or social-media-only login, which limits detailed visibility into specific individual identities compared to self-registration.

Does self-registration scale better than manual creation?

Yes, self-registration allows guests to create their own accounts dynamically, reducing administrative overhead while maintaining unique identity tracking.

More 350-701 FAQ →

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. devildog 👍 2 Answered A
    self-registered portal appears to be the most accurate answer
  2. luismg 👍 2 Answered A
    Guest portal is A ISE and central web auth
  3. dfb0b7d 👍 1 Answered A
    https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216330-ise-self-registered-guest-portal-configu.html
  4. aa4a63c 👍 1 Answered A
    A is Correct

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

What Is a Feature of an Endpoint Detection and Response Solution?

S-grade

Which Two Methods Belong in an AAA Authentication Method List?

S-grade

Preventing Unauthorized DHCP Servers on Cisco Switches

S-grade

What Is Considered a Cloud Data Breach in Cisco 350-701?

S-grade

← Back to 350-701 Study Guide