300-715 Question #113: Real Exam Question with Answer & Explanation

The correct answer is A: static group assignment. To restrict access based on location where subnets are organized by building, the IP address attribute should be utilized in Cisco ISE policies.

BYOD

Question

A company is attempting to improve their BYOD policies and restrict access based on certain criteria. The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?

Options

Astatic group assignment
BIP address
Cdevice registration status
DMAC address

Explanation

To restrict access based on location where subnets are organized by building, the IP address attribute should be utilized in Cisco ISE policies.

Common mistakes.

A. Static group assignment is a method for grouping devices or users but does not inherently provide location information based on network topology.
C. Device registration status indicates whether a device is registered with ISE but does not provide details about its current network location.
D. A MAC address uniquely identifies a device but does not inherently provide information about its current network location without additional mapping to the network infrastructure.

Concept tested. Cisco ISE Policy - Location-based Access Control

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ise_admin_guide_3_0/b_ise_admin_guide_30_chapter_0100.html

Topics

#BYOD policies#Location-based access#Access control#Identity groups

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice Browse All 300-715 Questions