300-420 · Question #300
Which two statements are true regarding Cisco ISE? (Choose two.)
The correct answer is B. ISE can provide data about when a specific device connected to the network. C. ISE plays a critical role in SD-Access.. Cisco ISE collects detailed connection data for devices and plays a fundamental role in SD-Access for policy enforcement and network segmentation.
Question
Which two statements are true regarding Cisco ISE? (Choose two.)
Options
- AWithout integration with any other product ISE can track the actual physical location of a wireless
- BISE can provide data about when a specific device connected to the network.
- CISE plays a critical role in SD-Access.
- DThe major business outcomes of ISE are enhanced user experience and secure VLAN
- EAn ISE deployment requires only a Cisco Access Control System appliance.
How the community answered
(21 responses)- B90% (19)
- D5% (1)
- E5% (1)
Why each option
Cisco ISE collects detailed connection data for devices and plays a fundamental role in SD-Access for policy enforcement and network segmentation.
ISE typically requires integration with other systems like wireless LAN controllers (WLCs) and location services to accurately track the physical location of wireless devices, it cannot do this standalone.
Cisco ISE functions as a centralized policy enforcement platform that records and correlates contextual data, including when specific devices connect to the network, providing comprehensive visibility and reporting.
In Cisco SD-Access, ISE is the policy engine responsible for assigning Scalable Group Tags (SGTs) to users and devices, enabling micro-segmentation and consistent policy application across the fabric.
While ISE enhances user experience and secures network access, 'secure VLAN' is a specific and limited outcome; ISE's major business outcomes are broader, including compliance, threat containment, and secure network access control.
An ISE deployment requires Cisco ISE appliances or virtual machines, not a Cisco Access Control System (ACS) appliance, which is an older, distinct product for network access control.
Concept tested: Cisco ISE capabilities and integration
Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/index.html
Topics
Community Discussion
No community discussion yet for this question.