Exam 300-715 topic 1 question 152 discussion

it should be one shell profile to all NADs in same level ... and one command set for the one who needs restrict commands if others does not need command set (blank in policy set page) or multiple command sets if the other two rules need command set to be set.. so the answer is ; A or D . and D is the nearest correct answer

We have three user roles (three is multiple). I think C is correct. Because each user's role should have its shell profile.

D makes sense. We are going to create the same shell profile, the shell profile is where you assign the level of privilage returned to the NAD device for that user. What we can do is set a specific command set for have more control on administrator users.

C and D are both good Answer, but D is better because of the final sentence on the question "without creating too many objects using Cisco ISE", is right that could be worst configure one shell profile and multiple command set because is not scalable, if you have a lot of users might become cumbersome but if you udon't want to create many object then the best answer is D, even if in a REAL big environment the best One would be C.