nerdexam
Cisco

300-715 · Question #285

Which two probes provide IP-to-MAC address binding information to the ARP cache in Cisco ISE? (Choose two.)

The correct answer is B. RADIUS C. DHCP. In Cisco ISE, the RADIUS and DHCP probes are essential sources that provide IP-to-MAC address binding information, which is then used to populate the internal endpoint database, similar to an ARP cache.

Profiler

Question

Which two probes provide IP-to-MAC address binding information to the ARP cache in Cisco ISE? (Choose two.)

Options

  • AHTTP
  • BRADIUS
  • CDHCP
  • DDNS
  • ENetFlow

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    89% (25)
  • D
    4% (1)

Why each option

In Cisco ISE, the RADIUS and DHCP probes are essential sources that provide IP-to-MAC address binding information, which is then used to populate the internal endpoint database, similar to an ARP cache.

AHTTP

HTTP probes are used to check device activity or gather browser information, but they do not directly provide IP-to-MAC binding information for endpoint discovery.

BRADIUSCorrect

When devices authenticate via RADIUS, the RADIUS accounting messages often contain both the client's IP and MAC addresses, which ISE processes to build and update its endpoint database.

CDHCPCorrect

DHCP snooping and DHCP request/response messages analyzed by ISE can provide direct IP-to-MAC address mappings, enriching ISE's endpoint data by passively listening for or receiving DHCP traffic.

DDNS

DNS probes resolve hostnames to IP addresses or vice versa, which is not directly related to discovering IP-to-MAC bindings for the ARP cache.

ENetFlow

NetFlow is used for traffic analysis and flow monitoring, providing insights into network conversations but not for populating the ARP cache with IP-to-MAC bindings.

Concept tested: Cisco ISE probes for endpoint IP-MAC discovery

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_3_0_chapter_0120.html

Topics

#ISE Probes#Endpoint Profiling#IP-to-MAC Binding#RADIUS

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice