300-715 · Question #128
There are several devices on a network that are considered critical and need to be placed into the ISE database and a policy used for them. The organization does not want to use profiling. What must…
The correct answer is A. Enter the MAC address in the correct Endpoint Identity Group. When an organization wants to manually classify critical devices in Cisco ISE without using profiling, the administrator must manually enter each device's MAC address into the appropriate Endpoint Identity Group (EIG). ISE uses MAC addresses as the primary identifier for…
Question
There are several devices on a network that are considered critical and need to be placed into the ISE database and a policy used for them. The organization does not want to use profiling. What must be done to accomplish this goal?
Options
- AEnter the MAC address in the correct Endpoint Identity Group.
- BEnter the MAC address in the correct Logical Profile.
- CEnter the IP address in the correct Logical Profile.
- DEnter the IP address in the correct Endpoint Identity Group.
How the community answered
(52 responses)- A94% (49)
- B2% (1)
- C4% (2)
Explanation
When an organization wants to manually classify critical devices in Cisco ISE without using profiling, the administrator must manually enter each device's MAC address into the appropriate Endpoint Identity Group (EIG). ISE uses MAC addresses as the primary identifier for endpoints. Logical Profiles are constructs used within profiling policies to group profiled endpoint types together - they are not used for manual endpoint placement. IP addresses are not used to identify endpoints in ISE endpoint groups because they can change, whereas MAC addresses provide stable hardware-level identification. By placing MAC addresses directly into the correct EIG, authorization policies can reference that group and enforce the desired network access without requiring dynamic profiling.
Topics
Community Discussion
No community discussion yet for this question.