300-715 · Question #382
An administrator must provide wired network access to unidentified Cisco devices that fail 802.1X authentication. Cisco ISE profiling services must be configured to gather Cisco Discovery Protocol…
The correct answer is D. SNMP Query probe in Cisco ISE. The scenario already has switches configured to accept SNMP queries from ISE, with CDP and LLDP enabled. What is missing is enabling the SNMP Query probe on the ISE side. The SNMP Query probe causes ISE to actively poll the network switches using SNMP GET requests, retrieving…
Question
An administrator must provide wired network access to unidentified Cisco devices that fail 802.1X authentication. Cisco ISE profiling services must be configured to gather Cisco Discovery Protocol and LLDP endpoint information from a Cisco switch. These configurations were performed:
- configured switches to accept SNMP queries from Cisco ISE
- enabled Cisco Discovery Protocol and LLDP on the switches
- added the switch as a NAD to Cisco ISE
What must be enabled to complete the configuration?
Options
- ASNMP traps on the switch
- BSNMP Trap probe in Cisco ISE
- CSNMP MIBs in Cisco ISE
- DSNMP Query probe in Cisco ISE
How the community answered
(34 responses)- A3% (1)
- B9% (3)
- C18% (6)
- D71% (24)
Explanation
The scenario already has switches configured to accept SNMP queries from ISE, with CDP and LLDP enabled. What is missing is enabling the SNMP Query probe on the ISE side. The SNMP Query probe causes ISE to actively poll the network switches using SNMP GET requests, retrieving the switch's CDP and LLDP neighbor tables. From those tables, ISE extracts endpoint attributes (device platform, capabilities, IP, etc.) to profile unidentified devices. Choice A (SNMP traps on the switch) and Choice B (SNMP Trap probe in ISE) relate to the passive SNMP Trap probe, where switches push unsolicited notifications to ISE - this is a different mechanism and not what the configured SNMP query infrastructure supports. Choice C (SNMP MIBs in ISE) is not a configurable ISE setting; ISE has built-in MIB support.
Topics
Community Discussion
No community discussion yet for this question.