Exam 300-715 topic 1 question 169 discussion

In Question condition EndPoints-LogicalProfile EQUALS static_list Should be Internal Endpoint Identity Group: EQUALS static_list,

Correct C Static Assignment = Logical Profiles Static "GROUP" Assignment = Identity Groups

Policy Assignment is a logical profile used by profiling. Identity Groups add the device to the local directory.

C) is correct in my opinion. The setting shown sets the Identity Group and not the Logical Profile.

Static Assignment should be checked and the Policy should be selected. The only answer that half makes any sense based on the screenshot is C

CORRECT is C) "The identity group is being assigned instead of the logical profile". 1. reason (pure logical): Both B) and C) answers are formulated as "group is being ASSIGNED", which of course means assigned to ENDPOINT, not to Authorization Policy (how could it be?). And screenshot in the question shows, that identity group really "is being assigned instead of the logical profile", which is answer C). 2. reason (eBook SISE): “Even though ENDPOINT IDENTITY GROUPS were useful in very early versions of ISE, their use for profiling has been deprecated in favor of using actual endpoint profiles or logical profiles directly in the authorization policy. ... Today, ENDPOINT IDENTITY GROUPS are used for a different purpose. They are used for a MAC Address Management (MAM) model, where you can create a STATIC LIST of MAC addresses to be authorized specifically (for example, a list of all Apple iPads that are owned by the company so they can be differentiated from personally owned iPads).”