Exam 300-715 topic 1 question 156 discussion

Actual exam question from Cisco's 300-715

Question #: 156
Topic #: 1

An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode. When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco ISE, but the devices do not change their access due to the new profile. What is the problem?

A. The default profiler configuration is set to No CoA for the reauthentication setting.
B. In closed mode, profiling does not work unless CDP is enabled.
C. The profiler feed is not downloading new information, so the profiler is inactive.
D. The profiling probes are not able to collect enough information to change the device profile.

Show Suggested Answer

Suggested Answer: A 🗳️

by denverfly at May 29, 2023, 3:01 p.m.

Comments

Submit Cancel

denverfly

6 months, 1 week ago

Selected Answer: A

The correct answer is: A. The default profiler configuration is set to No CoA for the reauthentication setting. When the profiler is set to No CoA, it will not send a Change of Authorization (CoA) request to the network device when the endpoint's profile changes. This means that the endpoint will not be granted access to the network based on its new profile. To fix this problem, the administrator needs to change the profiler configuration to send a CoA request when the endpoint's profile changes. This can be done by going to the Profiling tab in the Cisco ISE GUI and selecting the Reauthentication setting. The administrator then needs to select the Send CoA option. Once this is done, the endpoints will be granted access to the network based on their new profile.

upvoted 4 times

...