What type of access does a guest portal typically provide in Cisco ISE?

A guest portal in Cisco Identity Services Engine (ISE) is designed specifically to facilitate controlled and secure access for guests who require temporary internet connectivity. The primary purpose of such portals is to allow guests to connect to the network without exposing sensitive internal resources.

Providing restricted internet access only means that guests can access general web content, such as browsing the internet or accessing web-based applications, while preventing access to corporate applications, internal servers, and sensitive data. This setup helps organizations maintain security by ensuring that guests cannot inadvertently or maliciously access resources that could compromise the network or the integrity of corporate data.

The other options imply levels of access that are inappropriate for a guest environment. Full access to internal resources and access to all corporate applications would grant guests capabilities that could pose a risk to the organization's security and data integrity. Unrestricted access to all network resources would completely undermine the control intended with a guest portal, potentially allowing guests to view and interact with sensitive information and systems. Thus, the answer emphasizing restricted internet access is the most accurate reflection of guest access within Cisco ISE.