An administrator is adding network devices for a new medical building into Cisco ISE. These devices must be in a network device group that is identifying them as "Medical Switch" so that the…

Question

Options

• AChange the device type to Medical Switch.
• BChange the device profile to Medical Switch.
• CChange the model name to Medical Switch.
• DChange the device location to Medical Switch.

• A
  90% (19)
• B
  5% (1)
• D
  5% (1)

Explanation

Cisco ISE uses Network Device Groups (NDGs) to organize network access devices for policy purposes. NDGs have three default hierarchical attributes: Device Type, Location, and IPSEC. The 'Device Type' NDG attribute is the correct field to set when you want to classify devices by their function or role (e.g., 'Medical Switch', 'Access Switch', 'Firewall'). Once the Device Type is set to 'Medical Switch', authorization policies in ISE can match on that NDG attribute and apply specific access policies for endpoints connecting through those switches. 'Device profile' (B) refers to the profiling configuration (e.g., Cisco, HP) used for device profiling, not for group policy separation. 'Model name' (C) is a descriptive field, not an NDG attribute. 'Device location' (D) is a valid NDG type but is intended for geographic/physical organization, not functional type classification as described in this scenario.

No community discussion yet for this question.