Question

A retail company uses Cisco ISE to manage guest access. The reception staff must be able to create guest accounts for visitors, but they should only be allowed to create accounts that expire the same business day, and they must not be permitted to create bulk or random accounts. A separate IT team already creates the guest types and portals. Which ISE configuration element must the administrator adjust to enforce these specific restrictions on what reception staff can do in the Sponsor portal?

Accepted Answer

The Sponsor Group settings, which control the permissions, allowed guest types, and account duration limits for members

Answer

The Guest Portal settings, which define the login page and self-registration fields presented to guests

Answer

The Authentication Policy, which determines which identity store validates the sponsor's credentials

Answer

The Endpoint Purge policy, which removes stale guest device records after a defined interval