An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?
Name of the different persona on the OCG:
Policy administration node
Monitoring and Troublwshooting node
Policy Service node
We know that the PSN will run and responsible for the probe, there is no primary policy administrator node.
correct answer is A
A
Policy Service Nodes in Cluster
Cisco ISE uses Policy Service node group as a cluster that allows to exchange endpoint attributes when two or more nodes in the cluster collect attributes for the same endpoint. We recommend to create clusters for all Policy Service nodes that reside behind a load balancer.
Procedure 1 Configure Global Profiling Settings from the Policy Administration Node
Step 1 Access the ISE administrative interface of the primary Policy Administration node (PAN) using a supported web browser and your admin credentials: https://<ISE_PAN_FQDN_or_IP>
Look at Step 2.
To Verify RADIUS Probe Data
Step 1 Authenticate a new endpoint to the network.
Step 2 Go to the ISE Policy Administration node and navigate to Work Centers > Profiler > Endpoint Classification.
Step 3 Find and select the MAC address of the newly connected endpoint to display the attributes captured by the RADIUS probe.
there is not such a thing called "primary policy administrator". but the question is related to where the configuration is done and that is done in the "primary administration node PAN", but who is configured and where the probes come from is from the "policy service nodes" as someone said below, the typical cisco question
The question says "need to configure" which I guess it means where to configure probes so in my opinion the answer is C.
p.s. Again typical Cisco question
The question is asking for configuring the probes. You cannot configure from a Policy Service Node. All configuration is done via the Policy Admin Node (PAN). C is the correct answer
The profiling service which implements the network probes run on the PSN but the probes are configured from the PAN. Answer should be C
See: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html#ID1738
correct A
Configuring Profiler Policies [Cisco Identity Services Engine] - Cisco Systems
The profiler service collects attributes of endpoints from the network devices and the network, classifies endpoints in a specific group according to their profiles, and stores endpoints with their matched profiles in the Cisco ISE database.
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
robcamac
Highly Voted 3 years, 2 months agoSeawanderer
Highly Voted 2 years, 2 months ago327c7c8
Most Recent 1 week, 6 days agoNullNull88
4 months, 3 weeks agommzain
5 months, 1 week agoYouki82
9 months, 3 weeks agoGladly
11 months agofaridh
11 months agoAncash08
1 year agorhylos
1 year, 1 month agotheripper666
1 year, 3 months agoTHEODORABLE
1 year, 2 months agomatan24
1 year, 3 months agoYmerG
1 year, 5 months agogetafix
2 years agothetaken
2 years, 8 months agoNicknamefor3
3 years, 1 month agoMrCalifornia
3 years, 3 months ago