nerdexam
Cisco

300-715 · Question #189

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be…

The correct answer is A. PSN. In a Cisco ISE distributed deployment, the Policy Services Node (PSN) is responsible for handling network access, including the collection of endpoint attributes using various network probes.

Architecture and Deployment

Question

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?

Options

  • APSN
  • Bprimary PAN
  • CpxGrid
  • DMnT

How the community answered

(32 responses)
  • A
    91% (29)
  • C
    6% (2)
  • D
    3% (1)

Why each option

In a Cisco ISE distributed deployment, the Policy Services Node (PSN) is responsible for handling network access, including the collection of endpoint attributes using various network probes.

APSNCorrect

The Policy Services Node (PSN) in Cisco ISE is responsible for providing network access, posture, guest, and profiler services. Network probes and endpoint profiling capabilities, which involve collecting attributes from endpoints, are functions performed by the PSN.

Bprimary PAN

The Primary Policy Administration Node (PAN) manages and configures the entire ISE deployment and stores the central database, but it does not directly perform endpoint attribute collection via network probes.

CpxGrid

The pxGrid persona enables contextual sharing with other security products but does not directly handle the collection of endpoint attributes via network probes.

DMnT

The Monitor (MnT) persona collects and stores operational data, but the active collection of endpoint attributes through probes is a function of the PSN.

Concept tested: Cisco ISE PSN Role - Endpoint Profiling

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_0100.html

Topics

#Cisco ISE#Distributed Deployment#PSN#Endpoint Profiling

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice