nerdexam
Cisco

700-765 · Question #126

Which two loT environment layers are protected by ISE? (Choose two )

The correct answer is C. Internet/Cloud E. Things. Cisco ISE enforces policy and provides visibility for IoT deployments by protecting the Things layer (end devices) and the Internet/Cloud connectivity layer.

Cisco Security Product Solutions

Question

Which two loT environment layers are protected by ISE? (Choose two )

Options

  • AAccess Points
  • BEndpoints
  • CInternet/Cloud
  • DControl Layer
  • EThings

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    75% (24)
  • D
    16% (5)

Why each option

Cisco ISE enforces policy and provides visibility for IoT deployments by protecting the Things layer (end devices) and the Internet/Cloud connectivity layer.

AAccess Points

Access Points are network infrastructure components managed by wireless controllers; ISE authenticates users and devices through APs but does not treat APs themselves as an IoT layer it protects.

BEndpoints

While ISE does manage traditional endpoints, in the IoT layered model context this answer is not among the two designated IoT layers that ISE specifically targets in this framework.

CInternet/CloudCorrect

ISE can enforce segmentation and access policies for traffic destined to or originating from the Internet and Cloud, ensuring that IoT devices are not granted unrestricted outbound access and that cloud-bound communications are policy-compliant.

DControl Layer

The Control Layer, which includes industrial control systems and SCADA, requires specialized OT security tools; ISE does not natively protect this industrial control plane layer in the IoT model.

EThingsCorrect

ISE profiles and classifies IoT Things - the physical sensors and connected devices - using device profiling, then applies appropriate access control policies to restrict what those devices can reach on the network.

Concept tested: Cisco ISE protection of IoT device and cloud layers

Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/iot-security.html

Topics

#ISE#IoT security#network access control#identity services

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice