nerdexam
Cisco

300-715 · Question #330

Which nodes are supported in a distributed Cisco ISE deployment?

The correct answer is A. Policy Service nodes for session failover. In a distributed Cisco ISE deployment, Policy Service Nodes (PSNs) are supported for session failover. This ensures high availability and continuous service for authentication, authorization, and accounting (AAA) requests.

Architecture and Deployment

Question

Which nodes are supported in a distributed Cisco ISE deployment?

Options

  • APolicy Service nodes for session failover
  • BAdministration nodes for session failover
  • CMonitoring nodes for PxGrid services
  • DPolicy Service nodes for automatic failover

How the community answered

(40 responses)
  • A
    88% (35)
  • B
    3% (1)
  • C
    8% (3)
  • D
    3% (1)

Why each option

In a distributed Cisco ISE deployment, Policy Service Nodes (PSNs) are supported for session failover. This ensures high availability and continuous service for authentication, authorization, and accounting (AAA) requests.

APolicy Service nodes for session failoverCorrect

In a distributed Cisco ISE deployment, Policy Service Nodes (PSNs) are responsible for handling authentication, authorization, and accounting (AAA) services. They are typically deployed in pairs or groups to provide high availability and support session failover, ensuring that AAA services remain continuously available even if one PSN becomes unavailable.

BAdministration nodes for session failover

Administration nodes provide management services and support failover for administrative functions, not for 'session failover' of user/device AAA sessions, which is handled by PSNs.

CMonitoring nodes for PxGrid services

Monitoring nodes primarily collect and store operational and logging data. While PxGrid services can run on various nodes, 'Monitoring nodes for PxGrid services' is not their core function related to distributed deployment high availability like session failover.

DPolicy Service nodes for automatic failover

While Policy Service nodes do provide automatic failover, option A 'Policy Service nodes for session failover' is a more specific and accurate description of the high availability mechanism they offer for ongoing user/device sessions.

Concept tested: Cisco ISE distributed deployment node functions

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/install_guide/b_ise_InstallationGuide31/m_distributed_deployment_31.html

Topics

#ISE Deployment#Node Roles#High Availability#Policy Service Node

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice