nerdexam
Cisco

300-715 · Question #121

An engineer is designing a new distributed deployment for Cisco ISE in the network and is considering failover options for the admin nodes. There is a need to ensure that an admin node is available…

The correct answer is A. one primary admin and one secondary admin node in the deployment. To ensure continuous availability of an admin node for policy configuration in a Cisco ISE distributed deployment, both a primary and a secondary admin node must be configured.

Architecture and Deployment

Question

An engineer is designing a new distributed deployment for Cisco ISE in the network and is considering failover options for the admin nodes. There is a need to ensure that an admin node is available for configuration of policies at all times. What is the requirement to enable this feature?

Options

  • Aone primary admin and one secondary admin node in the deployment
  • Bone policy services node and one secondary admin node
  • Cone policy services node and one monitoring and troubleshooting node
  • Done primary admin node and one monitoring and troubleshooting node

How the community answered

(60 responses)
  • A
    87% (52)
  • B
    8% (5)
  • C
    2% (1)
  • D
    3% (2)

Why each option

To ensure continuous availability of an admin node for policy configuration in a Cisco ISE distributed deployment, both a primary and a secondary admin node must be configured.

Aone primary admin and one secondary admin node in the deploymentCorrect

A Cisco ISE distributed deployment requires a primary Administration Node and a secondary Administration Node to provide high availability for configuration and monitoring services. If the primary admin node fails, the secondary node can be promoted to primary, ensuring that policy configuration capabilities remain accessible without interruption.

Bone policy services node and one secondary admin node

A Policy Service Node handles authentication and authorization, not admin configuration, so pairing it with a secondary admin node does not provide full admin redundancy.

Cone policy services node and one monitoring and troubleshooting node

A Policy Service Node handles authentication and authorization, and a Monitoring and Troubleshooting Node collects logs and reports; neither provides high availability for admin configuration.

Done primary admin node and one monitoring and troubleshooting node

While a primary admin node is necessary, a Monitoring and Troubleshooting Node does not provide redundancy for administration services; its role is data collection and reporting.

Concept tested: Cisco ISE admin node high availability

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_010.html#concept_CE41C1A528FB48FE9E97F10696350AE3

Topics

#Cisco ISE#Admin Node Failover#Distributed Deployment#High Availability

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice