Exam 300-715 topic 1 question 100 discussion

B: profiling CCNP-Security-Identity-Management-SISE-300-715-Official-Cert-Guide - Chapter 6: Cisco Identity Services Engine Architecture - Page 107 Cisco ISE also provides a number of advanced functions. Profiling, which is natively integrated in Cisco ISE, can dynamically identify endpoints.

I would go for B, but this is a very poorly worded question. "dynamically identify the network endpoints" - (Profiling) and "ensure that endpoint access is protected." - (Posturing)

I go for B: In the question is asking identity dynamicaly an endpoint but is also saying "ensure that endpoint access is protected" I was also thinkig about posturing but, posturing is ensuring that the client is compliant or that the endpoint is protected, posture is not doing access protection to that endpoint. By access I think about getting access to the network so we are talking about credentials. and so after a series of mental wanking and cursing about how ridiculous the question was I chose B

imo is posture, because i think profiling not able to identify the endpoint for security element, therefore not able to protect the endpoint (profiling able to limited endpoint access with quarantine to certain vlan)

The answer is profiling. The profiling service in Cisco ISE dynamically identifies network endpoints and collects information about them, such as their IP address, MAC address, operating system, and applications. This information is then used to create a profile for each endpoint. The profile is used by Cisco ISE to make decisions about how to authenticate, authorize, and account for the endpoint. The profiling service can be used to protect endpoint access in a variety of ways. For example, the profiling service can be used to: Block access to the network for endpoints that are not known or that are not compliant with security policies. Restrict access to the network for endpoints that are running unapproved applications. Monitor the behavior of endpoints on the network and take action if an endpoint is behaving in a suspicious manner.

Answer C. Posture is a service in Cisco Identity Services Engine (Cisco ISE) that allows you to check the compliance, also known as posture, of endpoints, before allowing them to connect to your network.

The question also asks...'and ensure that endpoint access is protected.' To me this would indicate Posturing. Answer must be C.

After several thoughts, I think the provided answer is correct. The keyword here is "dynamically identify". CMIIW

I think it should be D