nerdexam
Cisco

300-715 · Question #19

Which profiling probe collects the user-agent string?

The correct answer is C. HTTP. The HTTP profiling probe in Cisco ISE is responsible for collecting the User-Agent string from web traffic, which provides valuable information about the client's operating system and browser.

Profiler

Question

Which profiling probe collects the user-agent string?

Options

  • ADHCP
  • BAD
  • CHTTP
  • DNMAP

How the community answered

(22 responses)
  • A
    5% (1)
  • C
    91% (20)
  • D
    5% (1)

Why each option

The HTTP profiling probe in Cisco ISE is responsible for collecting the User-Agent string from web traffic, which provides valuable information about the client's operating system and browser.

ADHCP

The DHCP probe collects information from DHCP requests, such as DHCP Option 60 (Vendor Class Identifier) and Option 12 (Hostname), but not the User-Agent string.

BAD

AD (Active Directory) is an identity source for user and group information, not a profiling probe that collects device attributes like User-Agent.

CHTTPCorrect

The HTTP profiling probe specifically analyzes HTTP traffic to extract information such as the User-Agent string. The User-Agent string provides details about the client's web browser, operating system, and device type, which is crucial for accurate device profiling.

DNMAP

NMAP is a network scanner used for port scanning and OS detection, but it's not a native Cisco ISE profiling probe that passively collects User-Agent strings from ongoing traffic.

Concept tested: Cisco ISE profiling probes and attributes

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_guide_31/b_ISE_admin_guide_31_chapter_01101.html#concept_C8C35A88568B4019B86D58593F35F121

Topics

#Profiling Probes#HTTP Profiling#User-Agent String#Endpoint Attributes

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice