300-715 · Question #179
A network administrator must configure Cisco SE Personas in the company to share session information via syslog. Which Cisco ISE personas must be added to syslog receivers to accomplish this goal?
The correct answer is D. monitor. To ensure Cisco ISE shares session information via syslog, the Monitor persona must be added as a syslog receiver. The Monitor persona is responsible for collecting and storing operational data, including session information, which can then be forwarded to external syslog servers
Question
A network administrator must configure Cisco SE Personas in the company to share session information via syslog. Which Cisco ISE personas must be added to syslog receivers to accomplish this goal?
Options
- ApxGrid
- Badmin
- Cpolicy services
- Dmonitor
How the community answered
(33 responses)- B6% (2)
- C3% (1)
- D91% (30)
Why each option
To ensure Cisco ISE shares session information via syslog, the Monitor persona must be added as a syslog receiver. The Monitor persona is responsible for collecting and storing operational data, including session information, which can then be forwarded to external syslog servers.
The pxGrid persona enables contextual sharing with other security products but is not directly responsible for forwarding session information via syslog.
The Admin (PAN) persona manages the ISE deployment and policies, but it does not primarily handle the forwarding of operational session logs via syslog.
The Policy Services (PSN) persona handles authentication, authorization, and posture services for endpoints, but the aggregation and forwarding of session logs for syslog is handled by the MnT persona.
The Cisco ISE Monitor (MnT) persona is responsible for collecting, storing, and processing all operational data, including authentication, authorization, and accounting (AAA) records and session information. To share this session information via syslog, the MnT node is configured to forward these logs to external syslog receivers.
Concept tested: Cisco ISE Personas and Syslog Integration
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_0100.html
Topics
Community Discussion
No community discussion yet for this question.