Exam 350-401 topic 1 question 250 discussion

Provided answer is correct

Identity Services Engine Cisco Identity Services Engine (ISE) is a secure network access platform enabling increased management awareness, control, and consistency for users and devices accessing an organization's network. ISE is an integral and mandatory component of SD-Access for implementing network access control policy. ISE performs policy implementation, enabling dynamic mapping of users and devices to scalable groups, and simplifying end-to-end security policy enforcement. Within ISE, users and devices are shown in a simple and flexible interface. ISE integrates with Cisco DNA Center by using Cisco Platform Exchange Grid (pxGrid) and REST APIs (Representational State Transfer Application Programming Interfaces) for endpoint event notifications and automation of policy configurations on ISE.

A is correct

it´s A

This screen is in the official Cert Guide. "Because Cisco DNA Center is integrated with AD, all names populate as the search term is being typed. As you type Grace’s name, all users whose names start with G come up, then all users whose names start with Gr, and so on. Cisco DNA Center integrates with many other tools, such as Active Directory, Identity Services Engine (ISE), ServiceNow, and Infoblox." C is incorrect, so it has be ISE.

I believe the answer is A. Question asks where did DNA get the list of devices the user is using based on the username, and the exhibit lists 3: iPad, iPhone, and PC The graph shows the statistics for the user's iPad only, which would probably be from edge node, but that's not what the question asked. Even if that was what the question was asking, not sure it would only be from the edge node.

Cisco ISE

After reading the Cisco DNA Assurance guide I'm more confused than ever because it literally could be all of them. DNA is data whore that will take telemetry streams from anything.

C is the correct answer

Client 360 is a component of Assurance. Client information is collected from ISE, see the link below. https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKSDN-2777.pdf "Cisco DNA Assurance ...Delivering Context for Network Troubleshooting Use-Case Example ... Step 1: Identity Services Engine integration provides Cisco DNA Center with the user’s information, group-policies and device information"

Answer is C not A If you look at the Graph it clearly states "Client360" which is located under "Assurance" on Cisco DNA Center Management Dashboard. Client360 pulls directly from the device where the user is connected to. Device360 is similar. Under "Assurance" there's also Dashboard, Applications, Client360, Device360 and the overall goal is to monitor the network.

A is correct

C for two reasons. 802.1x sessions are tracked on AP/Switches with "show auth session" so they know the user context data. I believe the graph shows user experience. User experience can be Wifi signal / auth issues/ timeout issues / etc. Not all of that is known by ISE as it a tacacs/radius server and gives no worries about wifi strength.

ISE delivers all this information

Identity Services Engine

some may get confused when the question asks "where does DNA get those details", and may get confused in thinking the question is referring to the analytics data etc... which is indeed from the edge device, however in this instance watch out for the key word "context" in the question. Anything that has to do with Context is ISE, no edge device provides context data, its ISE. so correct answer is A.

From the book: Those details are provided to Cisco DNA Center by the Identity Services Engine.