In a Cisco SD-Access solution, what is the role of the Identity Services Engine?

Question

Options

• AIt is leveraged for dynamic endpoint to group mapping and policy definition.
• BIt provides GUI management and abstraction via apps that share context.
• Cit is used to analyze endpoint to app flows and monitor fabric status.
• DIt manages the LISP EID database.

• A
  88% (22)
• B
  8% (2)
• D
  4% (1)

Explanation

Cisco SD-Access and Identity Services Engine (ISE)

In a Cisco SD-Access solution, ISE acts as the policy and identity engine, dynamically mapping endpoints to Scalable Group Tags (SGTs) and defining group-based access control policies - this is its core function within the SD-Access fabric. Option B describes Cisco DNA Center (DNAC), which serves as the GUI-based management and orchestration platform using applications to share network context. Option C describes Cisco DNA Assurance (also part of DNA Center), which analyzes traffic flows and monitors fabric health. Option D refers to the LISP Map Server/Resolver function handled by the control plane node within the fabric infrastructure, not ISE.

Memory Tip: Think of ISE as the "Who are you and what can you do?" engine - it handles Identity (who the endpoint is) and policy (what access they get). The name itself gives it away: Identity Services Engine = Identity + Policy.

No community discussion yet for this question.