ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 300-715 All Questions

View all questions & answers for the 300-715 exam
Go to Exam

Exam 300-715 topic 1 question 59 discussion

Actual exam question from Cisco's 300-715
Question #: 59
Topic #: 1
[All 300-715 Questions]

When creating a policy within Cisco ISE for network access control, the administrator wants to allow different access restrictions based upon the wireless SSID to which the device is connecting.
Which policy condition must be used in order to accomplish this?

  • A. Network Access NetworkDeviceName CONTAINS <SSID Name>
  • B. DEVICE Device Type CONTAINS <SSID Name>
  • C. Airespace Airespace-Wlan-Id CONTAINS <SSID Name>
  • D. Radius Called-Station-ID CONTAINS <SSID Name>
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by IlPerdan0 at Dec. 14, 2022, 9:49 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
trollollol747
11 months, 4 weeks ago
Guess it's Radius Called-Station ID CONTAINS, because they need you to set the SSID NAME. If you use the Airespace-Wlan-ID, then you need to set the ID of the SSID, not the SSID Name.
upvoted 2 times
...
Leogxn
1 year ago
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115734-ise-policies-ssid-00.html Both Airespace-Wlan-Id and Called-Station-ID will do the job?
upvoted 1 times
...
denverfly
1 year, 1 month ago
Selected Answer: C
The correct answer is - Airespace Airespace-Wlan-Id CONTAINS <SSID Name>. The Airespace-Wlan-Id is a RADIUS attribute that contains the name of the wireless SSID to which the device is connecting. By using the Airespace-Wlan-Id condition in a policy, the administrator can allow different access restrictions based upon the SSID to which the device is connecting. The other options are incorrect: Network Access NetworkDeviceName: The Network Access NetworkDeviceName attribute contains the name of the network device to which the device is connecting. This attribute cannot be used to determine the SSID to which the device is connecting. DEVICE Device Type: The DEVICE Device Type attribute contains the type of device that is connecting to the network. This attribute cannot be used to determine the SSID to which the device is connecting. Radius Called-Station-ID: The Radius Called-Station-ID attribute contains the MAC address of the device that is connecting to the network. This attribute cannot be used to determine the SSID to which the device is connecting.
upvoted 1 times
MORTND
1 year ago
the wlan ID option only allows for a number that equals to the WLAN number on the WLC called station ID "can" contain the SSID if configured from the wlc calling station ID is where you got confused, this is the MAC address of the endpoint see https://rscciew.wordpress.com/2014/11/29/calling-called-station-id/
upvoted 2 times
...
...
THEODORABLE
1 year, 2 months ago
Selected Answer: D
D is correct--The WLC can be configured to send the SSID name in the RADIUS Called-Station-ID attribute, which in turn can be used as a condition on ISE.
upvoted 2 times
...
IlPerdan0
1 year, 7 months ago
Selected Answer: D
Correct. Radius Called-Station-ID is the SSID name
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel