300-715 · Question #51
An organization is adding nodes to their Cisco ISE deployment and has two nodes designated as primary and secondary PAN and MnT nodes. The organization also has four PSNs. An administrator is adding…
The correct answer is C. Only five PSNs are allowed to be in the Cisco ISE cube if configured this way. The problem arises because a Cisco ISE deployment with a primary and secondary PAN/MnT pair typically supports a maximum of five Policy Service Nodes (PSNs) in total, and adding two more would exceed this limit.
Question
An organization is adding nodes to their Cisco ISE deployment and has two nodes designated as primary and secondary PAN and MnT nodes. The organization also has four PSNs. An administrator is adding two more PSNs to this deployment but is having problems adding one of them. What is the problem?
Options
- AThe new nodes must be set to primary prior to being added to the deployment
- BThe current PAN is only able to track a max of four nodes
- COnly five PSNs are allowed to be in the Cisco ISE cube if configured this way.
- DOne of the new nodes must be designated as a pxGrid node
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- C92% (23)
Why each option
The problem arises because a Cisco ISE deployment with a primary and secondary PAN/MnT pair typically supports a maximum of five Policy Service Nodes (PSNs) in total, and adding two more would exceed this limit.
New nodes are typically added as standalone nodes and then registered to the deployment, not necessarily set to primary prior to being added.
The PAN's tracking capacity is not generally limited to a maximum of four nodes; the specific limitation is on the total number of PSNs allowed within a given deployment model configuration.
In a Cisco ISE deployment with two central nodes acting as both Primary/Secondary PAN and MnT, the maximum number of PSNs allowed is typically five, meaning attempting to add a sixth PSN will fail due to deployment sizing limitations.
While pxGrid nodes are part of ISE deployments for integration, there is no requirement for one of the *new* PSNs to specifically be designated as a pxGrid node to resolve an addition problem.
Concept tested: Cisco ISE Deployment Sizing and Node Limits
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ISE_admin_guide_27/b_ISE_admin_guide_27_chapter_010.html
Topics
Community Discussion
No community discussion yet for this question.