nerdexam
Cisco

300-715 · Question #104

An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

The correct answer is A. Profiling. Cisco ISE's Profiling service dynamically identifies network endpoints by collecting attributes and classifying them, which is crucial for protecting endpoint access.

Profiler

Question

An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

Options

  • AProfiling
  • BGuest access
  • CClient provisioning
  • DPosture

How the community answered

(33 responses)
  • A
    91% (30)
  • B
    6% (2)
  • D
    3% (1)

Why each option

Cisco ISE's Profiling service dynamically identifies network endpoints by collecting attributes and classifying them, which is crucial for protecting endpoint access.

AProfilingCorrect

The Profiling service in Cisco ISE dynamically identifies and categorizes network endpoints by collecting attributes from various probes and matching them against known profiles. This identification is crucial for applying appropriate access policies and ensuring protected endpoint access based on the device type.

BGuest access

Guest access provides temporary network access for visitors, but its primary role is not dynamic endpoint identification for access protection.

CClient provisioning

Client provisioning assists in deploying 802.1X supplicants and client software to endpoints, rather than dynamically identifying them.

DPosture

Posture assesses an endpoint's compliance with security policies (e.g., antivirus status), which occurs *after* the endpoint is identified, not for the initial dynamic identification itself.

Concept tested: Cisco ISE Profiling Service

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_3_1/m_endpoint_profiling.html

Topics

#Cisco ISE#Endpoint Profiling#Network Security#Device Identification

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice