300-715 Question #259: Real Exam Question with Answer & Explanation

Question

An organization is using Cisco ISE to provide AAA services to non-Cisco switches with IP phones connected. An engineer needs to use Profiling Services to authorize network access for IP phones that do not support 802.1X. What must be configured to accomplish this goal?

Options

• ADHCP
• BSNMPTRAP
• CSNMPQUERY
• DRADIUS

Explanation

{"question_number": 1, "question": "An organization is using Cisco ISE to provide AAA services to non-Cisco switches with IP phones connected. An engineer needs to use Profiling Services to authorize network access for IP phones that do not support 802.1X. What must be configured to accomplish this goal?", "correct_answer": "A", "explanation": "When IP phones do not support 802.1X, Cisco ISE must rely on other methods to identify and profile them. DHCP profiling is the key mechanism here. When a device sends a DHCP request to obtain an IP address, that request contains vendor-specific attributes (such as Option 55 - Parameter Request List, Option 12 - Hostname, and vendor class identifiers) that ISE can use to fingerprint and classify the device type. The ISE DHCP probe captures these packets and uses the attributes to match the device against known profiles (e.g., Cisco IP Phone). Once profiled, ISE can apply the appropriate authorization policy to grant network access without requiring 802.1X. SNMP (B, C) is used to query switches for endpoint data already collected, and RADIUS (D) is the authentication protocol itself-neither serves as the profiling data source for non-802.1X capable devices the way DHCP does.", "generated_by": "claude-sonnet", "llm_judge_score": 3}

No community discussion yet for this question.