300-420 · Question #302
Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)
The correct answer is C. Software-defined segmentation D. Software-defined access. Software-defined segmentation and Software-defined Access (SD-Access) are the most complex Cisco ISE use cases due to their extensive architectural changes and policy integration requirements.
Question
Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)
Options
- AAsset visibility
- BDevice management
- CSoftware-defined segmentation
- DSoftware-defined access
- EGuest and wireless access
How the community answered
(26 responses)- A12% (3)
- B8% (2)
- C58% (15)
- E23% (6)
Why each option
Software-defined segmentation and Software-defined Access (SD-Access) are the most complex Cisco ISE use cases due to their extensive architectural changes and policy integration requirements.
Asset visibility is a foundational feature of ISE, involving data collection and reporting, which is generally less complex to implement than advanced policy enforcement or new network architectures.
Device management, such as using TACACS+ for network device administration via ISE, is a common and relatively straightforward ISE use case to deploy.
Software-defined segmentation, often implemented using Scalable Group Tags (SGTs) with ISE, involves complex policy matrix planning, widespread network device integration, and rigorous testing across the infrastructure.
Cisco SD-Access is a comprehensive architectural solution that leverages ISE for identity and policy enforcement across a fabric-based network, entailing significant design, deployment, and operational complexity.
Guest and wireless access, though involving captive portals and specific policies, are mature and well-documented ISE use cases that are typically less complex than large-scale segmentation or SD-Access deployments.
Concept tested: Cisco ISE use case complexity
Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/index.html
Topics
Community Discussion
No community discussion yet for this question.