An administrator must configure Cisco ISE profiling services and the Cisco switch device sensor feature to provide user access using the AD-Join-Point and AD-Operating-System attributes from the…

Configuring an identity group for endpoints is a step in organizing endpoints after they are profiled, but it doesn't directly complete the *profiling configuration* for using specific AD attributes.

Enabling the SNMP probe is not directly required for using AD attributes, as the question specifies using attributes from the Active Directory Probe.

A profiling logical profile is essential to combine and process the information received from various probes, including the Active Directory probe. It allows for the creation of more complex profiling policies based on multiple attributes, which is necessary when using specific AD attributes like AD-Join-Point and AD-Operating-System.

Custom profiling conditions are required to specifically define how the AD-Join-Point and AD-Operating-System attributes, collected by the Active Directory probe, will be used to match and classify endpoints. This allows the custom profiling policy to accurately assign endpoints to the correct identity groups or apply specific authorization rules based on these AD attributes.

The RADIUS probe primarily gathers information from RADIUS authentication/accounting messages, not Active Directory specific attributes, making it irrelevant for this specific requirement.