Exam 300-715 All Questions

View all questions & answers for the 300-715 exam

Exam 300-715 topic 1 question 169 discussion

Actual exam question from Cisco's 300-715

Question #: 169
Topic #: 1

Refer to the exhibit. An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication. Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints-LogicalProfile
EQUALS static_list. Why is this occurring?

A. The dynamic logical profile is overriding the statically assigned profile.
B. The logical profile is being statically assigned instead of the identity group.
C. The identity group is being assigned instead of the logical profile.
D. The device is changing identity groups after profiling instead of remaining static.

Show Suggested Answer

Suggested Answer: B 🗳️

by iceise at Nov. 5, 2022, 10:51 a.m.

Comments

Submit Cancel

iceise

Highly Voted 2 years, 7 months ago

Selected Answer: B

In Question condition EndPoints-LogicalProfile EQUALS static_list Should be Internal Endpoint Identity Group: EQUALS static_list,

upvoted 7 times

Cnoteone

2 years, 2 months ago

In the scenario screenshot the 'Static Assignment' is NOT checked off.

upvoted 4 times

...

Negrosu

Most Recent 1 month, 2 weeks ago

Selected Answer: C

The answer is C. You can go to context visibility on Cisco ISE and perform this test. If you select Identity Group Assigment the combo box only allows to select Identity Groups not Logical Profiles. The condition in this question is set to Logical Profile, but this is an Identity Group.

upvoted 2 times

...

Cachaman

2 months, 3 weeks ago

Selected Answer: C

Correct C Static Assignment = Logical Profiles Static "GROUP" Assignment = Identity Groups

upvoted 1 times

...

ce1997d

3 months, 2 weeks ago

Selected Answer: C

Policy Assignment is a logical profile used by profiling. Identity Groups add the device to the local directory.

upvoted 1 times

...

53f2a10

6 months, 3 weeks ago

Selected Answer: C

C) is correct in my opinion. The setting shown sets the Identity Group and not the Logical Profile.

upvoted 2 times

...

NullNull88

1 year, 3 months ago

Static Assignment should be checked and the Policy should be selected. The only answer that half makes any sense based on the screenshot is C

upvoted 2 times

...

NikoTomas

1 year, 3 months ago

CORRECT is C) "The identity group is being assigned instead of the logical profile". 1. reason (pure logical): Both B) and C) answers are formulated as "group is being ASSIGNED", which of course means assigned to ENDPOINT, not to Authorization Policy (how could it be?). And screenshot in the question shows, that identity group really "is being assigned instead of the logical profile", which is answer C). 2. reason (eBook SISE): “Even though ENDPOINT IDENTITY GROUPS were useful in very early versions of ISE, their use for profiling has been deprecated in favor of using actual endpoint profiles or logical profiles directly in the authorization policy. ... Today, ENDPOINT IDENTITY GROUPS are used for a different purpose. They are used for a MAC Address Management (MAM) model, where you can create a STATIC LIST of MAC addresses to be authorized specifically (for example, a list of all Apple iPads that are owned by the company so they can be differentiated from personally owned iPads).”

upvoted 2 times

...