Exam 300-715 topic 1 question 264 discussion

Answer is C according to AI.

Option D is wrong because system-defined exceptions are pre-configured or built-in exception rules that come with the system - they are not customizable by administrators. When we need to assign a specific medical device to a static profiling policy, we need the ability to create and customize our own exception rule. This requires user-defined exception actions (option A), not system-defined ones.

Look at Procedure 82 Configure a Custom (User-Defined) Exception Action In this procedure, an Exception Action is configured for a medical device to assign it to a static Profiling Policy once the specified conditions are matched. The example device is a Masimo SET Pulse Oximeter, a patient monitor that measures the oxygen levels in the blood. The profile used in this example was taken from the Cisco ISE Medical NAC Profile Library available on Cisco.com. Access to new and updated Profiling Policies is covered later in this guide. https://community.cisco.com/t5/security-knowledge-base/ise-profiling-design-guide/ta-p/3739456

Tom1417 has right, it's the A

A: is correct User-defined Exception Actions are appropriate for statically assigning endpoints to a preferred policy assignment once a specific condition is met and optionally for preventing a CoA being sent on policy assignment. An example use case would be a critical network device such as a process control endpoint in a manufacturing facility, or a networked medical device in a healthcare facility. In these examples, the administrator may want to statically assign the endpoint to a policy. A static assignment through exception can prevent the risk that spurious profile data reverts and endpoint’s profile and affects its network connectivity. https://community.cisco.com/t5/security-knowledge-base/ise-profiling-design-guide/ta-p/3739456

According to the Cisco Identity Services Engine Administrator Guide, the settings group that must be configured to assign a medical device to a static profiling policy is - system-defined exceptions actions. System-defined exceptions actions are used to assign endpoints to a specific profiling policy based on their MAC address or network device. This allows administrators to override the default profiling behavior for certain endpoints or devices