300-715 · Question #62
Which statement is not correct about the Cisco ISE Monitoring node?
The correct answer is C. The local collector agent process runs only the Inline Posture node. The statement that the local collector agent process runs only on the Inline Posture node is incorrect; local collector agents run on all Cisco ISE Policy Service Nodes (PSNs) to collect and forward log data.
Question
Which statement is not correct about the Cisco ISE Monitoring node?
Options
- AThe local collector agent collects logs locally from itself and from any NAD that is configured to
- BCisco ISE supports distributed log collection across all nodes to optimize local data collection,
- CThe local collector agent process runs only the Inline Posture node.
- DThe local collector buffers transport the collected data to designated Cisco ISE Monitoring nodes
How the community answered
(50 responses)- A8% (4)
- B4% (2)
- C86% (43)
- D2% (1)
Why each option
The statement that the local collector agent process runs only on the Inline Posture node is incorrect; local collector agents run on all Cisco ISE Policy Service Nodes (PSNs) to collect and forward log data.
The local collector agent does collect logs locally from its host node and from NADs configured to send data to that node, making this statement correct.
Cisco ISE does support distributed log collection, where each Policy Service Node collects local data and forwards it to Monitoring nodes, which optimizes data collection and processing.
The statement is incorrect because the local collector agent process runs on all Policy Service Nodes (PSNs), not exclusively on Inline Posture nodes. Its purpose is to collect log data from the PSN itself and any Network Access Devices (NADs) communicating with it, then buffer and forward that data to designated Monitoring nodes.
The local collector buffers are indeed responsible for temporarily storing collected data before it is transported to the central Cisco ISE Monitoring nodes for storage and analysis, making this statement correct.
Concept tested: Cisco ISE Monitoring node and log collection architecture
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ise_admin_31/b_ise_admin_31_chapter_010.html
Topics
Community Discussion
No community discussion yet for this question.