* Answer A is for: Group-Based Access Control
* Answer C is for IP-Based Access Control Policies
Question: Which devices does Cisco Center configure when deploying an "IP-based access control policy"?
ASWER IS CREARLY C
"...make sure that you have integrated Cisco ISE with Cisco DNA Center. However, Cisco ISE is NOT mandatory if you are adding groups within the Policy > IP Based Access Control > IP Network Groups window while creating a new IP-based access control policy."
A
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-3-2/user_guide/b_cisco_dna_center_ug_2_3_2/m_configure-ip-based-access-control-policies.pdf
sorry cisco but i dont have $80k for checking it myself by buying DNA center deployment :) i came here just to check answer. not covered in OCG of course.
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-3-1-0/user_guide/b_cisco_dna_center_ug_1_3_1_0/b_cisco_dna_center_ug_1_3_1_0_chapter_01011.html
As suggested in previous posts.
The answer is C.
Sites to which a policy is applied. If you configure a wired policy, the policy is applied to all wired devices in the site scope. Likewise, if you configure a wireless policy for a selected service set identifier (SSID), the policy is applied to all of the wireless devices with the SSID defined in the scope.
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-1-2/user_guide/b_cisco_dna_center_ug_2_1_2/b_cisco_dna_center_ug_2_1_1_chapter_01100.html#concept_zvk_yg4_p3b
As per the CCNP: ENCOR: 30-401 CCNP Enterprise: .... Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) official practice exam.
IP-Based Access Control Policies
An IP-based access control policy controls the traffic going into and coming out of a Cisco device in the same way that an Access Control List (ACL) does. As with an ACL, an IP-based access control policy contains lists of permit and deny conditions that are applied to traffic flows based on various criteria, including protocol type, source IP address, destination IP address, or destination port number.
IP-based access control policies can be used to filter traffic for various purposes, including security, monitoring, route selection, and network address translation
Looks like C, from the guide - Editing an IP network group on the Policy > IP Based Access Control window is possible without Cisco ISE. But the creation of IP network groups from the IP Based Access Control window requires Cisco ISE.
Answer is C as rggod points out directly from the DNAC Guide:
Workflow to Configure an IP-Based Access Control Policy
Before you begin
To create IP network groups from the Policy > IP Based Access Control > IP Network Groups window, make sure that you have integrated Cisco ISE with Cisco DNA Center. However, Cisco ISE is not mandatory if you are adding groups within the Policy > IP Based Access Control > IP Network Groups window while creating a new IP-based access control policy.
This section is not available anymore. Please use the main Exam Page.350-401 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
juliok33p
Highly Voted 3 years, 7 months agokeinokinene
Highly Voted 4 years, 1 month agorggod
3 years, 6 months agodoron1122
2 years agoDoopfenel
Most Recent 1 month, 1 week ago[Removed]
5 months ago[Removed]
4 months, 3 weeks agoihateciscoreally
1 year, 2 months agoChiaretta
1 year, 6 months agoHungarianDish_111
1 year, 6 months agoDreket
2 years, 3 months agoJared28
2 years, 4 months agoJared28
2 years, 3 months agoAngelPAlonso
2 years, 5 months agorlilewis
2 years, 5 months agodanny_f
2 years, 5 months agobara_ken
2 years, 5 months agoHugh_Jazz
3 years agokthekillerc
3 years, 1 month agoBigMomma4752
3 years, 7 months agosamirhasanov18
3 years, 10 months ago