300-715 · Question #168
An engineer is implementing network access control using Cisco ISE and needs to separate the traffic based on the network device ID and use the IOS device sensor capability. Which probe must be used…
The correct answer is D. RADIUS probe. The RADIUS probe is the correct choice because Cisco IOS devices running the Device Sensor feature collect endpoint attribute data (via CDP, LLDP, DHCP, and HTTP) and forward that data to Cisco ISE embedded within RADIUS accounting messages. This allows ISE to receive rich…
Question
An engineer is implementing network access control using Cisco ISE and needs to separate the traffic based on the network device ID and use the IOS device sensor capability. Which probe must be used to accomplish this task?
Options
- AHTTP probe
- BNetFlow probe
- Cnetwork scan probe
- DRADIUS probe
How the community answered
(35 responses)- A3% (1)
- C3% (1)
- D94% (33)
Explanation
The RADIUS probe is the correct choice because Cisco IOS devices running the Device Sensor feature collect endpoint attribute data (via CDP, LLDP, DHCP, and HTTP) and forward that data to Cisco ISE embedded within RADIUS accounting messages. This allows ISE to receive rich endpoint profiling information keyed to the network device ID (NAS-ID) without deploying additional probes. The RADIUS probe in ISE is specifically designed to parse these accounting messages and extract Device Sensor data. HTTP, NetFlow, and network scan probes do not leverage the IOS Device Sensor capability or carry network device ID context in the same way.
Topics
Community Discussion
No community discussion yet for this question.