300-715 · Question #5
What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?
The correct answer is B. profiling. Profiling is the Cisco ISE service that collects information about connected devices to determine their type, vendor, and operating system, which then allows for granular policy enforcement.
Question
What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?
Options
- AMAB
- Bprofiling
- Cposture
- Dcentral web authentication
How the community answered
(54 responses)- A4% (2)
- B87% (47)
- C2% (1)
- D7% (4)
Why each option
Profiling is the Cisco ISE service that collects information about connected devices to determine their type, vendor, and operating system, which then allows for granular policy enforcement.
MAB (MAC Authentication Bypass) is an authentication method, not a service for identifying device types.
Profiling is a core Cisco ISE service designed to identify and classify devices connecting to the network by collecting various attributes (e.g., DHCP, HTTP User-Agent, NetFlow) and matching them against known profiles. This allows ISE to determine the device type, vendor, and OS, enabling context-aware policy decisions.
Posture is a service that assesses a client's security compliance (e.g., antivirus, patch level), not its basic device type.
Central Web Authentication (CWA) is an authentication flow that uses a web portal, not a service specifically for identifying device types.
Concept tested: Cisco ISE device profiling
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_guide_31/b_ISE_admin_guide_31_chapter_01101.html
Topics
Community Discussion
No community discussion yet for this question.