300-715 Question #397: Real Exam Question with Answer & Explanation

Question

An administrator must provide network access to legacy Windows endpoints with a specific device type and operating system version using Cisco ISE profiler services. The ISE profiler services and access switches must be configured to identify endpoints using the dhcp-class- identifier and parameters-request-list attributes from the DHCP traffic. These configurations were performed: - enabled the DHCP probe in Cisco ISE - configured the Cisco ISE PSN interface to receive DHCP packets - configured the attributes in custom profiling conditions - configured a custom profiling policy - configured an authorization rule with permit access Which action completes the configuration?

Options

• AConfigure the Cisco ISE PSN interface to receive SPAN DHCP traffic.
• BConfigure the switches to send copies of the DHCP traffic to the Cisco ISE PSN.
• CEnable the DHCP SPAN probe in Cisco ISE primary server.
• DConfigure the switches to relay DHCP packets to the Cisco ISE PSN.

Explanation

{"question_number": 3, "correct_answer": "B", "explanation": "The ISE DHCP probe works by receiving DHCP traffic that is forwarded from access switches. With the DHCP probe enabled and the ISE PSN interface configured to receive DHCP packets, the final missing step is on the switch side: the switches must be configured to send copies of DHCP traffic to the ISE PSN IP address (typically using the ip helper-address command pointing to the ISE PSN). This causes the switch to forward DHCP broadcast packets to ISE, allowing the profiler to inspect attributes like dhcp-class-identifier and parameter-request-list. Option A/C describe the DHCP SPAN probe (a separate probe type requiring SPAN mirroring), which was not the probe enabled. Option D (relay) is a close distractor, but 'relay' implies replacing the destination, while 'helper-address' sends a copy - ISE receives the copy while the DHCP server still handles the original request.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.