Exam 300-715 topic 1 question 204 discussion

Actual exam question from Cisco's 300-715

Question #: 204
Topic #: 1

An engineer needs to configure a Cisco ISE server to issue a CoA for endpoints already authenticated to access the network. The CoA option must be enforced on a session, even if there are multiple active sessions on a port. What must be configured to accomplish this task?

A. the Reauth CoA option in the Cisco ISE system profiling settings enabled
B. an endpoint profiling policy with the No CoA option enabled
C. an endpoint profiling policy with the Port Bounce CoA option enabled
D. the Port Bounce CoA option in the Cisco ISE system profiling settings enabled

Show Suggested Answer

Suggested Answer: A 🗳️

by JimboOh at March 12, 2023, 3:09 p.m.

Comments

Submit Cancel

NullNull88

10 months, 2 weeks ago

No need to bounce the port

upvoted 2 times

...

JimboOh

1 year, 10 months ago

I think A. "The profiler service issues a CoA with the Reauth option even though you have configured CoA with the Port Bounce option when you have multiple active sessions on a single port. This function potentially avoids disconnecting other sessions as might occur with the Port Bounce option." https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_prof_pol.html

upvoted 4 times

...