300-715 · Question #36
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
The correct answer is B. unknown. Cisco ISE profiling continuously attempts to classify endpoints into named identity groups (e.g., 'Apple-iPhone', 'Windows-Workstation', 'Cisco-IP-Phone'). When an endpoint cannot be matched to any profiling policy - due to insufficient collected attributes or a truly…
Question
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
Options
- AEndpoint
- Bunknown
- Cblacklist
- Dwhite list
- Eprofiled
How the community answered
(21 responses)- B86% (18)
- D5% (1)
- E10% (2)
Explanation
Cisco ISE profiling continuously attempts to classify endpoints into named identity groups (e.g., 'Apple-iPhone', 'Windows-Workstation', 'Cisco-IP-Phone'). When an endpoint cannot be matched to any profiling policy - due to insufficient collected attributes or a truly unrecognized device type - it is automatically placed in the 'Unknown' endpoint identity group. This is the default catch-all group for unclassified endpoints. 'Profiled' contains all endpoints that have been successfully matched to a profile. 'Blacklist' and 'whitelist' are policy-driven manual assignments, not defaults for unmatched endpoints.
Topics
Community Discussion
No community discussion yet for this question.