nerdexam
Cisco

300-715 · Question #374

An administrator must configure Cisco ISE to send CoA requests to a Cisco switch using SNMP. These configurations were performed: - enabled SNMP on the switch - added the switch to Cisco ISE…

The correct answer is C. Configure the switch SNMP settings of the NAD E. Select the CoA type as SNMP in the network device profile. To send SNMP-based CoA requests, two configurations are required. Choice C (configure the switch SNMP settings on the NAD) is needed so ISE knows the SNMP community string, version, and credentials to use when communicating with that specific switch. Choice E (select CoA type…

Policy Enforcement

Question

An administrator must configure Cisco ISE to send CoA requests to a Cisco switch using SNMP. These configurations were performed:

  • enabled SNMP on the switch
  • added the switch to Cisco ISE
  • configured a network device profile
  • configured the NAD port detection method
  • configured the operation to be performed on the switch port
  • configured an authorization profile

Which two configurations must be performed to send the CoA requests? (Choose two.)

Options

  • AConfigure a network device group
  • BConfigure the SNMP server in Cisco ISE.
  • CConfigure the switch SNMP settings of the NAD
  • DConfigure SNMP authentication in Cisco ISE
  • ESelect the CoA type as SNMP in the network device profile.

How the community answered

(53 responses)
  • A
    9% (5)
  • B
    4% (2)
  • C
    81% (43)
  • D
    6% (3)

Explanation

To send SNMP-based CoA requests, two configurations are required. Choice C (configure the switch SNMP settings on the NAD) is needed so ISE knows the SNMP community string, version, and credentials to use when communicating with that specific switch. Choice E (select CoA type as SNMP in the network device profile) tells ISE that this device class uses SNMP as its CoA mechanism rather than RADIUS CoA. Choice A (network device group) is an organizational construct and does not affect CoA delivery. Choice B is incorrect because ISE acts as the SNMP manager (querier), not as an SNMP server. Choice D (SNMP authentication in ISE) is part of what is configured in the NAD's SNMP settings (covered by C), not a separate step.

Topics

#Cisco ISE#Change of Authorization (CoA)#SNMP#Network Access Device (NAD)

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice