Exam 300-430 topic 1 question 139 discussion

D is false, because Policy groups Not a specific ISE configuration object for 802.1X handling; possibly confused with SXP/SGT groups or network device groups.

Policy sets: These allow you to define different authentication and authorization policies based on conditions such as the type of network (wired or wireless). You can create separate policy sets for wired and wireless clients, each with its own authentication and authorization rules. Policy groups: These are used to group authentication and authorization policies together. You can create separate policy groups for wired and wireless clients, ensuring that each type of client is processed according to its specific requirements.

The question is "different types of clients authentication must be separated". To accomplish different auth you must configure different policy, so D is the best answer along with B.

Sorry .. Disregard device profile since we're not talking about NADs. I guess policy results includes Authz and Authx results. I'll go B and E also.

Id say A and B A. device profiles >> ie Network Access Device profiles. You Can create one for wired and one for wireless B. policy sets - FUndamental requirement C. separate networks - Irrelevent and controlled by AAA D. policy groups - No such thing. Identity groups, yes. E. policy results - No such thing. Authorization Results is what is needed.

The two configuration items that can separate different types of client authentication in a Cisco ISE deployment are policy sets and policy groups. Policy sets define a set of rules and policies that are applied to a particular set of network devices, users, or groups. With policy sets, different types of devices can be configured with different types of authentication policies. Policy groups, on the other hand, allow different types of policies to be applied to different user groups or devices. This allows for more granular control over the network access policies applied to different groups of users or devices. The correct answers are B. policy sets and D. policy groups.

B and E

B and E would be a better answer as the overall policy for wired and wireless will be different, as will the authorization result within each policy.