nerdexam
Cisco

300-715 · Question #309

An engineer must organize endpoints in a Cisco ISE identity management store to improve the operational management of IP phone endpoints. The endpoints must meet these requirements: - classify…

The correct answer is B. Create an endpoint identity group for each department with the profiled parent group. To organize IP phone endpoints by department and tag them as profiled, the engineer should create specific endpoint identity groups for each department and assign the 'profiled' parent group.

Profiler

Question

An engineer must organize endpoints in a Cisco ISE identity management store to improve the operational management of IP phone endpoints. The endpoints must meet these requirements:

  • classify endpoints for finance, sales, and marketing departments
  • tag each endpoint as profiled

Which action organizes the endpoints?

Options

  • AAdd a tag for the endpoints of each department and use the identity group filter.
  • BCreate an endpoint identity group for each department with the profiled parent group.
  • CAdd a tag for the endpoints of each department and add an endpoint to profiled group.
  • DCreate an endpoint identity group for each department with the IP phone parent group.

How the community answered

(27 responses)
  • A
    19% (5)
  • B
    70% (19)
  • C
    4% (1)
  • D
    7% (2)

Why each option

To organize IP phone endpoints by department and tag them as profiled, the engineer should create specific endpoint identity groups for each department and assign the 'profiled' parent group.

AAdd a tag for the endpoints of each department and use the identity group filter.

While tags can classify, identity group filters are typically used for policy matching, not directly for endpoint organization structure.

BCreate an endpoint identity group for each department with the profiled parent group.Correct

Creating an endpoint identity group for each department (e.g., Finance_IP_Phones, Sales_IP_Phones) allows for granular classification. Setting the 'profiled' group as the parent automatically tags all endpoints within these departmental groups as having been profiled, meeting both requirements for organization and tagging.

CAdd a tag for the endpoints of each department and add an endpoint to profiled group.

Adding tags helps classification, but merely adding endpoints to an existing 'profiled' group doesn't create the departmental organizational structure.

DCreate an endpoint identity group for each department with the IP phone parent group.

Using 'IP phone' as the parent group would classify them generally as IP phones, but it would not explicitly fulfill the requirement to tag them as 'profiled'.

Concept tested: Cisco ISE Endpoint Identity Group Management

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ISE_admin_27/b_ISE_admin_27_chapter_01000.html#concept_1215B3AFDCB34FB8AE22E1A1727755D6

Topics

#Endpoint Identity Groups#Cisco ISE Profiling#Endpoint Classification#Identity Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-715 Practice