300-715 · Question #189
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be…
The correct answer is A. PSN. In a Cisco ISE distributed deployment, the Policy Services Node (PSN) is responsible for handling network access, including the collection of endpoint attributes using various network probes.
Question
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?
Options
- APSN
- Bprimary PAN
- CpxGrid
- DMnT
How the community answered
(32 responses)- A91% (29)
- C6% (2)
- D3% (1)
Why each option
In a Cisco ISE distributed deployment, the Policy Services Node (PSN) is responsible for handling network access, including the collection of endpoint attributes using various network probes.
The Policy Services Node (PSN) in Cisco ISE is responsible for providing network access, posture, guest, and profiler services. Network probes and endpoint profiling capabilities, which involve collecting attributes from endpoints, are functions performed by the PSN.
The Primary Policy Administration Node (PAN) manages and configures the entire ISE deployment and stores the central database, but it does not directly perform endpoint attribute collection via network probes.
The pxGrid persona enables contextual sharing with other security products but does not directly handle the collection of endpoint attributes via network probes.
The Monitor (MnT) persona collects and stores operational data, but the active collection of endpoint attributes through probes is a function of the PSN.
Concept tested: Cisco ISE PSN Role - Endpoint Profiling
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_0100.html
Topics
Community Discussion
No community discussion yet for this question.