700-765 · Question #113
Which feature of ISE has the capability to encounter a device new on the market, and correctly profile it to onboard it quickly and easily?
The correct answer is D. Device profiling. Cisco ISE Device Profiling uses network probes to automatically identify and classify endpoints - including brand-new or unknown devices - enabling rapid, policy-driven onboarding.
Question
Which feature of ISE has the capability to encounter a device new on the market, and correctly profile it to onboard it quickly and easily?
Options
- ACentralized policy management
- BPlatform exchange grid
- CContext-aware access
- DDevice profiling
How the community answered
(49 responses)- A2% (1)
- B2% (1)
- C8% (4)
- D88% (43)
Why each option
Cisco ISE Device Profiling uses network probes to automatically identify and classify endpoints - including brand-new or unknown devices - enabling rapid, policy-driven onboarding.
Centralized policy management is a general ISE capability for administering policies from a single console, but it does not perform the active identification and classification of unknown or new devices.
Platform Exchange Grid (pxGrid) is used to share contextual security information between Cisco and third-party products, not to detect and profile newly encountered endpoint devices.
Context-aware access leverages existing device context to enforce dynamic access decisions, but it depends on profiling having already occurred rather than performing the initial device identification itself.
Device Profiling in ISE collects endpoint attributes through probes such as DHCP, RADIUS, HTTP, SNMP, and NetFlow, then matches them against a continuously updated profiling policy library maintained by Cisco. This allows ISE to correctly classify even newly released devices it has never seen before and automatically apply the appropriate access policy, eliminating the need for manual configuration to onboard them.
Concept tested: Cisco ISE device profiling for automatic endpoint onboarding
Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/index.html
Topics
Community Discussion
No community discussion yet for this question.