Cisco ISE Central Web Authentication requires separate authorization results for the pre-authentication and post-authentication stages. Initially, an unknown or unauthenticated guest must receive an authorization profile containing the web-redirection parameters that direct the browser to the self-registered guest portal. This requirement is satisfied by option B. After the guest successfully registers and authenticates, Cisco ISE must return another authorization profile that grants the permitted network access, typically internet-only access through an appropriate VLAN, downloadable ACL, or access control policy. This requirement is satisfied by option A. The sponsor portal is used by sponsors to create or manage guest accounts and is not the destination for self-registering guests. Authentication profiles are not the Cisco ISE policy-result objects used to implement portal redirection or grant network access. Those functions are implemented through authorization profiles and authorization policy rules.