300-715 · Question #152
An organization wants to split their Cisco ISE deployment to separate the device administration functionalities from the mam deployment. For this to work, the administrator must deregister any nodes…
The correct answer is B. One of the nodes is the Primary PAN. In a Cisco ISE distributed deployment, the 'Deregister' button for a node is grayed out when that node is the Primary Policy Administration Node (Primary PAN). The Primary PAN is the authoritative configuration node for the entire deployment and cannot be deregistered while it…
Question
An organization wants to split their Cisco ISE deployment to separate the device administration functionalities from the mam deployment. For this to work, the administrator must deregister any nodes that will become a part of the new deployment, but the button for this option is grayed out. Which configuration is causing this behavior?
Options
- AOne of the nodes is an active PSN.
- BOne of the nodes is the Primary PAN
- CAll of the nodes participate in the PAN auto failover.
- DAll of the nodes are actively being synched.
How the community answered
(58 responses)- A12% (7)
- B78% (45)
- C7% (4)
- D3% (2)
Explanation
In a Cisco ISE distributed deployment, the 'Deregister' button for a node is grayed out when that node is the Primary Policy Administration Node (Primary PAN). The Primary PAN is the authoritative configuration node for the entire deployment and cannot be deregistered while it holds that role. To deregister it, the administrator would first need to promote another PAN to Primary (triggering a failover/role swap), after which the former Primary PAN can then be deregistered and moved to a new deployment. Other nodes (PSNs, MnTs, pxGrid) can typically be deregistered without this restriction.
Topics
Community Discussion
No community discussion yet for this question.