nerdexam
Cisco

300-420 · Question #293

Which node enables Cisco ISE to share contextual information on a device with Cisco Stealthwatch?

The correct answer is C. pXGrid Controller. The Cisco pXGrid Controller node within Cisco ISE is responsible for enabling the sharing of contextual information about devices and users with other security platforms, such as Cisco Stealthwatch.

Network Services

Question

Which node enables Cisco ISE to share contextual information on a device with Cisco Stealthwatch?

Options

  • AMonitoring and Troubleshooting Node
  • BInline Posture Node
  • CpXGrid Controller
  • DPolicy Administration Node

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    92% (44)
  • D
    4% (2)

Why each option

The Cisco pXGrid Controller node within Cisco ISE is responsible for enabling the sharing of contextual information about devices and users with other security platforms, such as Cisco Stealthwatch.

AMonitoring and Troubleshooting Node

The Monitoring and Troubleshooting Node (MNT) primarily focuses on collecting and storing operational logs and monitoring data for auditing and troubleshooting within ISE, not for actively sharing contextual data with external security platforms.

BInline Posture Node

An Inline Posture Node is a specialized Policy Service Node responsible for enforcing network access and posture policies, particularly for inline traffic redirection, and does not serve as the primary mechanism for sharing contextual information with other security systems.

CpXGrid ControllerCorrect

The Cisco pXGrid (Platform Exchange Grid) Controller within ISE acts as the central point for sharing real-time contextual information, such as user and device identity, group assignments, and security posture, with integrated security products like Cisco Stealthwatch. pXGrid provides a secure, publish-subscribe framework for this bidirectional data exchange.

DPolicy Administration Node

The Policy Administration Node (PAN) handles the centralized management, configuration, and database for Cisco ISE, but it is not the functional component responsible for real-time contextual information exchange with external systems like Stealthwatch.

Concept tested: Cisco ISE pXGrid integration, contextual data sharing

Source: https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-734796.html

Topics

#Cisco ISE#pXGrid#Stealthwatch Integration#Security Context

Community Discussion

No community discussion yet for this question.

Full 300-420 Practice