Exam 300-715 topic 1 question 297 discussion

Actual exam question from Cisco's 300-715

Question #: 297
Topic #: 1

An administrator must configure Cisco ISE profiling services and the Cisco switch device sensor feature to provide user access using the AD-Join-Point and AD-Operating-System attributes from the Active Directory Probe. These configurations were performed:

• configured all the required Cisco Wireless LAN Controller configurations
• enabled Active Directory probes
• configured a custom profiling policy
• joined Cisco ISE to Active Directory
• configured the authorization rule with full access permission

Which two actions complete the configuration? (Choose two.)

A. Configure an identity group for endpoints.
B. Enable the SNMP probe.
C. Configure a profiling logical profile.
D. Configure custom profiling conditions.
E. Enable the RADIUS probe.

Show Suggested Answer

Suggested Answer: DE 🗳️

by ZoneHacker at July 5, 2024, 12:42 p.m.

Comments

Submit Cancel

TiberiuszSun

6 months, 2 weeks ago

Selected Answer: DE

The lookup to AD is based on the computer name of the endpoint. Therefore, ISE must first learn the hostname of the endpoint before it can check for the presence of the endpoint in AD and fetch its attributes. The hostname is typically learned from the following profile attributes and probes: Hostname (DHCP probe) FQDN (DNS probe) User-Name (RADIUS probe - Machine Authentication)

upvoted 2 times

...

ZoneHacker

10 months ago

Selected Answer: DE

For me it's more the answer D & E

upvoted 1 times

...

Exam 300-715 All Questions

View all questions & answers for the 300-715 exam

Exam 300-715 topic 1 question 297 discussion

Comments

TiberiuszSun

ZoneHacker

SY0-701