300-715 · Question #378
A network administrator adds network access devices to Cisco ISE. After a security breach, the management team mandates that all network devices must comply with certain standards. All network…
The correct answer is A. network device with a port specified. When a network device uses a nondefault CoA port, the custom port number must be specified in that device's individual configuration within ISE (the network device object). ISE uses the CoA port setting per NAD to know where to send CoA requests. The correct scope is the…
Question
A network administrator adds network access devices to Cisco ISE. After a security breach, the management team mandates that all network devices must comply with certain standards. All network devices must authenticate through Cisco ISE. Some devices use nondefault CoA ports. What must be configured in Cisco ISE?
Options
- Anetwork device with a port specified
- Bnetwork access manager with a port specified
- Cnetwork device group with a port specified
- Dnetwork device profile with a port specified
How the community answered
(62 responses)- A90% (56)
- B5% (3)
- C3% (2)
- D2% (1)
Explanation
When a network device uses a nondefault CoA port, the custom port number must be specified in that device's individual configuration within ISE (the network device object). ISE uses the CoA port setting per NAD to know where to send CoA requests. The correct scope is the individual network device entry - not a group, not a profile. A network device group (Choice C) is an organizational container and has no port configuration. A network device profile (Choice D) defines device capabilities generically but the actual CoA port override must be set on the individual device. Network Access Manager (Choice B) is an endpoint supplicant component and is unrelated to NAD port configuration.
Topics
Community Discussion
No community discussion yet for this question.