An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?
Name of the different persona on the OCG:
Policy administration node
Monitoring and Troublwshooting node
Policy Service node
We know that the PSN will run and responsible for the probe, there is no primary policy administrator node.
correct answer is A
A
Policy Service Nodes in Cluster
Cisco ISE uses Policy Service node group as a cluster that allows to exchange endpoint attributes when two or more nodes in the cluster collect attributes for the same endpoint. We recommend to create clusters for all Policy Service nodes that reside behind a load balancer.
Procedure 1 Configure Global Profiling Settings from the Policy Administration Node
Step 1 Access the ISE administrative interface of the primary Policy Administration node (PAN) using a supported web browser and your admin credentials: https://<ISE_PAN_FQDN_or_IP>
Look at Step 2.
To Verify RADIUS Probe Data
Step 1 Authenticate a new endpoint to the network.
Step 2 Go to the ISE Policy Administration node and navigate to Work Centers > Profiler > Endpoint Classification.
Step 3 Find and select the MAC address of the newly connected endpoint to display the attributes captured by the RADIUS probe.
there is not such a thing called "primary policy administrator". but the question is related to where the configuration is done and that is done in the "primary administration node PAN", but who is configured and where the probes come from is from the "policy service nodes" as someone said below, the typical cisco question
The question says "need to configure" which I guess it means where to configure probes so in my opinion the answer is C.
p.s. Again typical Cisco question
The question is asking for configuring the probes. You cannot configure from a Policy Service Node. All configuration is done via the Policy Admin Node (PAN). C is the correct answer
The profiling service which implements the network probes run on the PSN but the probes are configured from the PAN. Answer should be C
See: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html#ID1738
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
robcamac
Highly Voted 3 years, 5 months agoSeawanderer
Highly Voted 2 years, 5 months agoCachaman
Most Recent 5 days, 13 hours ago327c7c8
2 months, 2 weeks agoNullNull88
6 months, 4 weeks agommzain
7 months, 2 weeks agoYouki82
12 months agoGladly
1 year, 1 month agofaridh
1 year, 1 month agoAncash08
1 year, 3 months agorhylos
1 year, 4 months agotheripper666
1 year, 5 months agoTHEODORABLE
1 year, 4 months agomatan24
1 year, 5 months agoYmerG
1 year, 7 months agogetafix
2 years, 3 months agothetaken
2 years, 10 months agoNicknamefor3
3 years, 3 months ago