If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

What gives Cisco ISE an option to scan endpoints for vulnerabilities?

A company is attempting to improve their BYOD policies and restrict access based on certain criteri a. The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?

What is the minimum certainty factor when creating a profiler policy?

Refer to the exhibit.
An engineer is configuring Cisco ISE for guest services They would like to have any unregistered guests redirected to the guest portal for authentication then have a CoA provide them with full access to the network that is segmented via firewalls Why is the given configuration failing to accomplish this goal?