300-715 Question #189: Real Exam Question with Answer & Explanation

Question

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?

Options

• APSN
• Bprimary PAN
• CpxGrid
• DMnT

Explanation

In a Cisco ISE distributed deployment, the Policy Services Node (PSN) is responsible for handling network access, including the collection of endpoint attributes using various network probes.

Common mistakes.

• B. The Primary Policy Administration Node (PAN) manages and configures the entire ISE deployment and stores the central database, but it does not directly perform endpoint attribute collection via network probes.
• C. The pxGrid persona enables contextual sharing with other security products but does not directly handle the collection of endpoint attributes via network probes.
• D. The Monitor (MnT) persona collects and stores operational data, but the active collection of endpoint attributes through probes is a function of the PSN.

Concept tested. Cisco ISE PSN Role - Endpoint Profiling

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_0100.html

No community discussion yet for this question.