300-715 · Question #104
An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?
The correct answer is A. Profiling. Cisco ISE's Profiling service dynamically identifies network endpoints by collecting attributes and classifying them, which is crucial for protecting endpoint access.
Question
An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?
Options
- AProfiling
- BGuest access
- CClient provisioning
- DPosture
How the community answered
(33 responses)- A91% (30)
- B6% (2)
- D3% (1)
Why each option
Cisco ISE's Profiling service dynamically identifies network endpoints by collecting attributes and classifying them, which is crucial for protecting endpoint access.
The Profiling service in Cisco ISE dynamically identifies and categorizes network endpoints by collecting attributes from various probes and matching them against known profiles. This identification is crucial for applying appropriate access policies and ensuring protected endpoint access based on the device type.
Guest access provides temporary network access for visitors, but its primary role is not dynamic endpoint identification for access protection.
Client provisioning assists in deploying 802.1X supplicants and client software to endpoints, rather than dynamically identifying them.
Posture assesses an endpoint's compliance with security policies (e.g., antivirus status), which occurs *after* the endpoint is identified, not for the initial dynamic identification itself.
Concept tested: Cisco ISE Profiling Service
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_3_1/m_endpoint_profiling.html
Topics
Community Discussion
No community discussion yet for this question.