A network security administrator needs a web authentication configuration when a guest user connects to the network with a wireless connection using…

Central Web Authentication (CWA) is a feature that allows the network access device (NAD) to

redirect the web traffic of a guest user to a web portal hosted by Cisco ISE1. The NAD acts as a proxy

between the guest user and the ISE node, and performs the authentication and authorization based

on the RADIUS attributes returned by ISE1. To configure CWA on ISE, the administrator must create

an authorization profile that contains the URL redirection attribute and assign it to the guest user1.

The other options are not correct because they do not use CWA. Device registration WebAuth is a

feature that allows users to register their devices on ISE before they can access the network2. WLC

with local WebAuth is a feature that allows the wireless LAN controller (WLC) to host the web portal

and authenticate the guest user locally3. Wired NAD with local WebAuth is a feature that allows the

switch to host the web portal and authenticate the guest user locally