350-401 Question #166: Real Exam Question with Answer & Explanation

Question

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

Options

• Aall devices integrating with ISE
• Bselected individual devices
• Call devices in selected sites
• Dall wired devices

Explanation

Cisco DNA Center IP-Based Access Control Policy Deployment

When deploying an IP-based access control policy in Cisco DNA Center, the configuration is applied to all devices within the selected sites, making option C correct. DNA Center uses a site-based deployment model, meaning policies are pushed to every network device (routers, switches, wireless controllers) within the sites you designate during policy deployment.

Why the distractors are wrong:

• Option A is incorrect because not all ISE-integrated devices are automatically targeted - site selection is still required, and IP-based access control doesn't require ISE integration.
• Option B is incorrect because DNA Center's access control deployment is site-centric, not individually device-centric - you select sites, not cherry-pick individual devices.
• Option D is incorrect because the policy applies to all devices in selected sites (including wireless infrastructure), not exclusively wired devices.

🧠 Memory Tip: Think of DNA Center as a "site manager" - it thinks in terms of locations/sites, not individual boxes. When you push a policy, you're painting an entire site, not spotting individual devices.

No community discussion yet for this question.