nerdexam
Cisco

300-420 · Question #302

Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)

The correct answer is C. Software-defined segmentation D. Software-defined access. Software-defined segmentation and Software-defined Access (SD-Access) are the most complex Cisco ISE use cases due to their extensive architectural changes and policy integration requirements.

Advanced Enterprise Campus Networks

Question

Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)

Options

  • AAsset visibility
  • BDevice management
  • CSoftware-defined segmentation
  • DSoftware-defined access
  • EGuest and wireless access

How the community answered

(26 responses)
  • A
    12% (3)
  • B
    8% (2)
  • C
    58% (15)
  • E
    23% (6)

Why each option

Software-defined segmentation and Software-defined Access (SD-Access) are the most complex Cisco ISE use cases due to their extensive architectural changes and policy integration requirements.

AAsset visibility

Asset visibility is a foundational feature of ISE, involving data collection and reporting, which is generally less complex to implement than advanced policy enforcement or new network architectures.

BDevice management

Device management, such as using TACACS+ for network device administration via ISE, is a common and relatively straightforward ISE use case to deploy.

CSoftware-defined segmentationCorrect

Software-defined segmentation, often implemented using Scalable Group Tags (SGTs) with ISE, involves complex policy matrix planning, widespread network device integration, and rigorous testing across the infrastructure.

DSoftware-defined accessCorrect

Cisco SD-Access is a comprehensive architectural solution that leverages ISE for identity and policy enforcement across a fabric-based network, entailing significant design, deployment, and operational complexity.

EGuest and wireless access

Guest and wireless access, though involving captive portals and specific policies, are mature and well-documented ISE use cases that are typically less complex than large-scale segmentation or SD-Access deployments.

Concept tested: Cisco ISE use case complexity

Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/index.html

Topics

#Cisco ISE#Network Access Control#Software-Defined Access#Network Segmentation

Community Discussion

No community discussion yet for this question.

Full 300-420 Practice