An engineer is configuring sponsored guest access and needs to limit each sponsored guest to a maximum of two devices. There are other guest services in production that rely on the default guest types. How should this configuration change be made without disrupting the other guest services currently offering three or more guest devices per user?

In Cisco Identity Services Engine (ISE), a "Guest Type" is a configuration profile that defines the specific access privileges and restrictions for a category of guest users. This includes the account duration, time-of-day access, and critically, the maximum number of devices a guest user can register. To meet the requirement of limiting sponsored guests to two devices without affecting other guest services that use different limits, the correct approach is to create a new, distinct guest type. This new guest type would be configured with a "Maximum devices" setting of two and then associated with the specific sponsored guest portal or sponsor group.

A. An ISE identity group is used for classification and policy enforcement, but it does not have a direct setting to limit the number of registered devices for a guest user.
C. Using LDAP is an authentication method. It defines how a user authenticates but does not control post-authentication attributes like the number of allowed devices.
D. A sponsor group defines the permissions for sponsors (i.e., who can create guest accounts and which guest types they can assign), but the device limit is not configured within the sponsor group itself. The sponsor group uses a pre-configured guest type.

1. Cisco Identity Services Engine Administrator Guide, Release 3.1, "Guest Types" section: "You can configure guest types to define the various levels of access that you want to provide for different types of guest users... Maximum devices: Enter the maximum number of devices that a guest can register." This confirms that the device limit is a direct attribute of the Guest Type.

2. Cisco Identity Services Engine Administrator Guide, Release 3.1, "Sponsor Groups" section: "You can configure sponsor groups to define the permissions for various sponsors... Guest type: Choose the guest types that sponsors who belong to this group can use to create guest accounts." This shows that a Sponsor Group selects from available Guest Types, reinforcing that the Guest Type is where the device limit is fundamentally defined.