300-715 Question #251: Real Exam Question with Answer & Explanation

Question

Which Cisco ISE deployment model is recommended for an enterprise that has over 50,000 concurrent active endpoints?

Options

• Alarge deployment with fully distributed nodes running all personas
• Bmedium deployment with primary and secondary PAN/MnT/pxGrid nodes with shared PSNs
• Cmedium deployment with primary and secondary PAN/MnT/pxGrid nodes with dedicated PSNs
• Dsmall deployment with one primary and one secondary node running all personas

Explanation

For an enterprise with over 50,000 concurrent active endpoints, a medium Cisco ISE deployment model with primary and secondary PAN/MnT/pxGrid nodes and dedicated PSNs is recommended. This architecture provides the necessary scalability and high availability for a large number of concurrent sessions.

Common mistakes.

• A. "Large deployment with fully distributed nodes running all personas" is vague and does not align with standard ISE sizing guidance, as running all personas on every node is often not optimal for large-scale deployments.
• B. "Medium deployment with primary and secondary PAN/MnT/pxGrid nodes with shared PSNs" would imply PSN functions are collocated with PAN/MnT, which is not ideal for 50,000+ endpoints due to performance and scalability limitations.
• D. A "small deployment with one primary and one secondary node running all personas" is suitable for up to 10,000 endpoints and would not scale to over 50,000 concurrent active endpoints due to resource contention and capacity limits.

Concept tested. Cisco ISE Deployment Models and Sizing

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_3_0_chapter_010.html#concept_B87CE1D8E7D14EDBA8499B0F6636B599

No community discussion yet for this question.