nerdexam
Cisco

300-715 · Question #126

An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need…

The correct answer is B. policy service. When pushing supplicant profiles to workstations for testing without a deployment server, the traffic originates from the Cisco ISE Policy Service Node persona.

Policy Enforcement

Question

An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need to be opened. From which Cisco ISE persona should this traffic be originating?

Options

  • Amonitoring
  • Bpolicy service
  • Cadministration
  • Dauthentication

How the community answered

(23 responses)
  • B
    96% (22)
  • C
    4% (1)

Why each option

When pushing supplicant profiles to workstations for testing without a deployment server, the traffic originates from the Cisco ISE Policy Service Node persona.

Amonitoring

The Monitoring persona collects, stores, and presents logs, alarms, and reports, but it does not originate traffic for pushing supplicant profiles.

Bpolicy serviceCorrect

In a Cisco ISE deployment, the Policy Service Node (PSN) is responsible for handling all network access requests, including authentication, authorization, and accounting (AAA) services. When supplicant profiles are pushed to workstations for onboarding or client provisioning, the PSN serves the necessary files and configurations, thus originating this traffic.

Cadministration

The Administration persona is used for configuring ISE policies and system settings, but it does not directly handle endpoint traffic for supplicant profile distribution.

Dauthentication

While authentication is a service provided by the PSN, 'authentication' is a service, not a persona that originates profile pushing traffic.

Concept tested: Cisco ISE persona roles - Policy Service Node

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_010.html#concept_F7AEF5299691461A9C4C66C935706240

Topics

#Cisco ISE personas#Policy Service Node (PSN)#Supplicant profiles#Client provisioning

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice