300-715 · Question #126
An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need…
The correct answer is B. policy service. When pushing supplicant profiles to workstations for testing without a deployment server, the traffic originates from the Cisco ISE Policy Service Node persona.
Question
An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need to be opened. From which Cisco ISE persona should this traffic be originating?
Options
- Amonitoring
- Bpolicy service
- Cadministration
- Dauthentication
How the community answered
(23 responses)- B96% (22)
- C4% (1)
Why each option
When pushing supplicant profiles to workstations for testing without a deployment server, the traffic originates from the Cisco ISE Policy Service Node persona.
The Monitoring persona collects, stores, and presents logs, alarms, and reports, but it does not originate traffic for pushing supplicant profiles.
In a Cisco ISE deployment, the Policy Service Node (PSN) is responsible for handling all network access requests, including authentication, authorization, and accounting (AAA) services. When supplicant profiles are pushed to workstations for onboarding or client provisioning, the PSN serves the necessary files and configurations, thus originating this traffic.
The Administration persona is used for configuring ISE policies and system settings, but it does not directly handle endpoint traffic for supplicant profile distribution.
While authentication is a service provided by the PSN, 'authentication' is a service, not a persona that originates profile pushing traffic.
Concept tested: Cisco ISE persona roles - Policy Service Node
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_010.html#concept_F7AEF5299691461A9C4C66C935706240
Topics
Community Discussion
No community discussion yet for this question.