Cisco Exam 300-715 Topic 7 Question 80 Discussion

Actual exam question for Cisco's 300-715 exam

Question #: 80
Topic #: 7

A network security administrator needs a web authentication configuration when a guest user connects to the network with a wireless connection using these steps:

. An initial MAB request is sent to the Cisco ISE node.

. Cisco ISE responds with a URL redirection authorization profile if the user's MAC address is unknown in the endpoint identity store.

. The URL redirection presents the user with an AUP acceptance page when the user attempts to go to any URL.

Which authentication must the administrator configure on Cisco ISE?

Adevice registration WebAuth

BWLC with local WebAuth

Cwired NAD with local WebAuth

DNAD with central WebAuth

Show Suggested Answer

Suggested Answer: D

Central Web Authentication (CWA) is a feature that allows the network access device (NAD) to redirect the web traffic of a guest user to a web portal hosted by Cisco ISE1. The NAD acts as a proxy between the guest user and the ISE node, and performs the authentication and authorization based on the RADIUS attributes returned by ISE1. To configure CWA on ISE, the administrator must create an authorization profile that contains the URL redirection attribute and assign it to the guest user1. The other options are not correct because they do not use CWA. Device registration WebAuth is a feature that allows users to register their devices on ISE before they can access the network2. WLC with local WebAuth is a feature that allows the wireless LAN controller (WLC) to host the web portal and authenticate the guest user locally3. Wired NAD with local WebAuth is a feature that allows the switch to host the web portal and authenticate the guest user locally

by Deonna at Jan 28, 2024, 09:49 PM

Limited Time Offer

25%

Off

Get Premium 300-715 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Luisa

8 months ago

Totally, the central WebAuth makes the most sense here. Although, I have to say, the wording of these questions can be a real head-scratcher sometimes. Just when you think you've got it figured out, they throw in a curveball!

upvoted 0 times

...

8 months ago

Hmm, this question seems to be testing our understanding of the different web authentication configurations in Cisco ISE. I think the answer is D) NAD with central WebAuth, as the scenario describes the user being redirected to a URL where they can accept an AUP, which is a typical behavior of a central WebAuth setup.

upvoted 0 times

...