300-715 · Question #124
When setting up profiling in an environment using Cisco ISE for network access control, an organization must use non-proprietary protocols for collecting the information at layer 2. Which two probes…
The correct answer is B. SNMP query probe D. RADIUS probe. The two probes that meet all three criteria (non-proprietary, Layer 2 data, no SPAN required) are: (B) SNMP query probe - ISE actively queries network switches using standard SNMP (non-proprietary, RFC-based) to retrieve MAC address tables and CDP/LLDP neighbor information…
Question
When setting up profiling in an environment using Cisco ISE for network access control, an organization must use non-proprietary protocols for collecting the information at layer 2. Which two probes will provide this information without forwarding SPAN packets to Cisco ISE? (Choose two.)
Options
- ADHCP SPAN probe
- BSNMP query probe
- CNetFlow probe
- DRADIUS probe
- EDNS probe
How the community answered
(40 responses)- A8% (3)
- B85% (34)
- C5% (2)
- E3% (1)
Explanation
The two probes that meet all three criteria (non-proprietary, Layer 2 data, no SPAN required) are: (B) SNMP query probe - ISE actively queries network switches using standard SNMP (non-proprietary, RFC-based) to retrieve MAC address tables and CDP/LLDP neighbor information, collecting Layer 2 endpoint data without any SPAN configuration. (D) RADIUS probe - ISE passively collects endpoint attributes embedded in RADIUS authentication and accounting messages (non-proprietary, RFC 2865/2866), including MAC addresses (Layer 2 identifiers), without requiring SPAN. The DHCP SPAN probe is excluded because it requires mirrored DHCP traffic via SPAN. NetFlow is Cisco-proprietary and operates at Layer 3. The DNS probe is non-proprietary but operates at Layer 3/7 and does not provide Layer 2 information.
Topics
Community Discussion
No community discussion yet for this question.