300-715 Question #104: Real Exam Question with Answer & Explanation

The correct answer is A: Profiling. Cisco ISE's Profiling service dynamically identifies network endpoints by collecting attributes and classifying them, which is crucial for protecting endpoint access.

Profiler

Question

An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

Options

AProfiling
BGuest access
CClient provisioning
DPosture

Explanation

Cisco ISE's Profiling service dynamically identifies network endpoints by collecting attributes and classifying them, which is crucial for protecting endpoint access.

Common mistakes.

B. Guest access provides temporary network access for visitors, but its primary role is not dynamic endpoint identification for access protection.
C. Client provisioning assists in deploying 802.1X supplicants and client software to endpoints, rather than dynamically identifying them.
D. Posture assesses an endpoint's compliance with security policies (e.g., antivirus status), which occurs after the endpoint is identified, not for the initial dynamic identification itself.

Concept tested. Cisco ISE Profiling Service

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_3_1/m_endpoint_profiling.html

Topics

#Cisco ISE#Endpoint Profiling#Network Security#Device Identification

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice Browse All 300-715 Questions