300-715 · Question #285
Which two probes provide IP-to-MAC address binding information to the ARP cache in Cisco ISE? (Choose two.)
The correct answer is B. RADIUS C. DHCP. In Cisco ISE, the RADIUS and DHCP probes are essential sources that provide IP-to-MAC address binding information, which is then used to populate the internal endpoint database, similar to an ARP cache.
Question
Which two probes provide IP-to-MAC address binding information to the ARP cache in Cisco ISE? (Choose two.)
Options
- AHTTP
- BRADIUS
- CDHCP
- DDNS
- ENetFlow
How the community answered
(28 responses)- A7% (2)
- B89% (25)
- D4% (1)
Why each option
In Cisco ISE, the RADIUS and DHCP probes are essential sources that provide IP-to-MAC address binding information, which is then used to populate the internal endpoint database, similar to an ARP cache.
HTTP probes are used to check device activity or gather browser information, but they do not directly provide IP-to-MAC binding information for endpoint discovery.
When devices authenticate via RADIUS, the RADIUS accounting messages often contain both the client's IP and MAC addresses, which ISE processes to build and update its endpoint database.
DHCP snooping and DHCP request/response messages analyzed by ISE can provide direct IP-to-MAC address mappings, enriching ISE's endpoint data by passively listening for or receiving DHCP traffic.
DNS probes resolve hostnames to IP addresses or vice versa, which is not directly related to discovering IP-to-MAC bindings for the ARP cache.
NetFlow is used for traffic analysis and flow monitoring, providing insights into network conversations but not for populating the ARP cache with IP-to-MAC bindings.
Concept tested: Cisco ISE probes for endpoint IP-MAC discovery
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_3_0_chapter_0120.html
Topics
Community Discussion
No community discussion yet for this question.