300-715 · Question #200
An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed. The logical profile Printers must be used in the authorization rule and…
The correct answer is C. Add the new profiling policy to the logical profile Printers. To ensure a new profiling policy for a printer type missing from the profiler feed is used by an authorization rule that references the 'Printers' logical profile, the new policy must be added to that logical profile.
Question
An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed. The logical profile Printers must be used in the authorization rule and the rule must be hit. What must be done to ensure that this configuration will be successful?
Options
- ACreate a new logical profile for the new printer policy
- BEnable the EndPoints:EndPointPolicy condition in the authorization policy.
- CAdd the new profiling policy to the logical profile Printers.
- DModify the profiler conditions to ensure that it goes into the correct logical profile
How the community answered
(39 responses)- A15% (6)
- B8% (3)
- C72% (28)
- D5% (2)
Why each option
To ensure a new profiling policy for a printer type missing from the profiler feed is used by an authorization rule that references the 'Printers' logical profile, the new policy must be added to that logical profile.
Creating a new logical profile would not allow the existing authorization rule that refers to the 'Printers' logical profile to be hit.
Enabling a condition like EndPoints:EndPointPolicy in an authorization policy is a configuration step for the rule itself, not for associating a profiling policy with a logical profile.
In Cisco ISE, logical profiles act as containers for multiple individual profiling policies. To ensure that an authorization rule matching on the 'Printers' logical profile is triggered by a new specific printer type, the newly created profiling policy for that printer must be associated with the existing 'Printers' logical profile.
Modifying profiler conditions helps classify devices into a specific profiling policy, but it doesn't link that specific profiling policy to an overarching logical profile for authorization rules.
Concept tested: Cisco ISE profiling policies and logical profiles
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_3_0_chapter_0100.html
Topics
Community Discussion
No community discussion yet for this question.