Parks visitor kiosks have no keyboard, so staff cannot enter OTP codes. How should the kiosk Access policy be built?
Select an answer to reveal the explanation.
Short Explanation
A kiosk without a keyboard cannot type a door code. Hang certificate or device methods on that policy—the machine can flash a cert, it cannot punch OTP or a RADIUS token.
Full Explanation
Access policies should only require authentication methods the device can actually perform. Certificate and other device-based methods work on a keyboardless kiosk; OTP and RADIUS token entry do not. Matching laptop MFA on a kiosk locks users out. Removing Access methods and opening an NSX segment bypasses identity controls instead of fitting them to the device.