An engineer is configuring a new Cisco ISE node. The Device Admin service must run on this node to handle authentication requests for network device access via TACACS+. Which persona must be enabled…

The pxGrid persona provides a platform for integration with other security products, not direct TACACS+ authentication processing.

The Administration persona provides the web-based user interface and manages ISE configuration, but does not process authentication requests.

The Policy Service persona is responsible for evaluating authentication and authorization policies, including those for network device administration (TACACS+). When the Device Admin service is enabled on an ISE node, it primarily uses the Policy Service persona to process authentication and authorization requests from network devices.

The Monitoring persona collects and stores logs and provides reporting, but it does not evaluate policies or process live authentication requests.