300-715 · Question #121
An engineer is designing a new distributed deployment for Cisco ISE in the network and is considering failover options for the admin nodes. There is a need to ensure that an admin node is available…
The correct answer is A. one primary admin and one secondary admin node in the deployment. To ensure continuous availability of an admin node for policy configuration in a Cisco ISE distributed deployment, both a primary and a secondary admin node must be configured.
Question
An engineer is designing a new distributed deployment for Cisco ISE in the network and is considering failover options for the admin nodes. There is a need to ensure that an admin node is available for configuration of policies at all times. What is the requirement to enable this feature?
Options
- Aone primary admin and one secondary admin node in the deployment
- Bone policy services node and one secondary admin node
- Cone policy services node and one monitoring and troubleshooting node
- Done primary admin node and one monitoring and troubleshooting node
How the community answered
(60 responses)- A87% (52)
- B8% (5)
- C2% (1)
- D3% (2)
Why each option
To ensure continuous availability of an admin node for policy configuration in a Cisco ISE distributed deployment, both a primary and a secondary admin node must be configured.
A Cisco ISE distributed deployment requires a primary Administration Node and a secondary Administration Node to provide high availability for configuration and monitoring services. If the primary admin node fails, the secondary node can be promoted to primary, ensuring that policy configuration capabilities remain accessible without interruption.
A Policy Service Node handles authentication and authorization, not admin configuration, so pairing it with a secondary admin node does not provide full admin redundancy.
A Policy Service Node handles authentication and authorization, and a Monitoring and Troubleshooting Node collects logs and reports; neither provides high availability for admin configuration.
While a primary admin node is necessary, a Monitoring and Troubleshooting Node does not provide redundancy for administration services; its role is data collection and reporting.
Concept tested: Cisco ISE admin node high availability
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_010.html#concept_CE41C1A528FB48FE9E97F10696350AE3
Topics
Community Discussion
No community discussion yet for this question.