350-701 · Question #584
What does Cisco ISE use to collect endpoint attributes that are used in profiling?
The correct answer is A. probes. Cisco ISE utilizes various probes to gather detailed attribute information about connected endpoints, which is then used for accurate profiling and policy enforcement.
Question
What does Cisco ISE use to collect endpoint attributes that are used in profiling?
Options
- Aprobes
- Bposture assessment
- CCisco AnyConnect Secure Mobility Client
- DCisco pxGrid
How the community answered
(23 responses)- A87% (20)
- B9% (2)
- D4% (1)
Why each option
Cisco ISE utilizes various probes to gather detailed attribute information about connected endpoints, which is then used for accurate profiling and policy enforcement.
Cisco ISE uses built-in and configurable probes (e.g., DHCP, HTTP, DNS, SNMP, NMAP) to collect a wide range of attributes from endpoints as they connect to the network, which are then analyzed to determine the endpoint's type and assign it to a profile.
Posture assessment evaluates an endpoint's compliance with security policies (e.g., antivirus status), but it relies on collected attributes and agents, rather than being the collection mechanism itself.
The Cisco AnyConnect Secure Mobility Client is a VPN client that can also act as a posture agent, but it is one *source* of attributes rather than the general *mechanism* (probes) ISE uses for collection.
Cisco pxGrid (Platform Exchange Grid) is an integration framework that allows ISE to share context-aware information with other security products, not a mechanism for endpoint attribute collection.
Concept tested: Cisco ISE endpoint profiling probes
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_0110.html
Topics
Community Discussion
No community discussion yet for this question.