Exam 300-715 topic 1 question 17 discussion

Actual exam question from Cisco's 300-715

Question #: 17
Topic #: 1

A network administrator changed a Cisco ISE deployment from pilot to production and noticed that the JVM memory utilization increased significantly. The administrator suspects this is due to replication between the nodes.
What must be configured to minimize performance degradation?

A. Enable the endpoint attribute filter.
B. Review the profiling policies for any misconfiguration.
C. Ensure that Cisco ISE is updated with the latest profiler feed update.
D. Change the reauthentication interval.

Show Suggested Answer

Suggested Answer: A 🗳️

by YmerG at Feb. 1, 2023, 2:20 p.m.

Comments

Submit Cancel

NikoTomas

8 months, 2 weeks ago

Correct is A) - Endpoint Attribute Filtering SISE ebook, page 444: “ISE Profiler can and does collect a lot of data about endpoints. It stores all that data and REPLICATES the data to the other ISE nodes in the deployment. To minimize the REPLICATION TRAFFIC, ISE offers the ENDPOINT ATTRIBUTE FILTER setting... When this filtering is enabled, Profiler builds a whitelist of attributes that are used in the existing Profiler policies. In other words, Profiler examines every policy that is enabled and creates a list of attributes that are needed for those policies. Only those attributes are collected and stored in the endpoint database.

upvoted 1 times

...

denverfly

1 year, 4 months ago

Selected Answer: B

Review the profiling policies for any misconfiguration. When a Cisco ISE deployment is changed from pilot to production, the profiling policies may not be configured correctly. This can cause the JVM memory utilization to increase significantly. To minimize performance degradation, the administrator must review the profiling policies and make sure that they are configured correctly.

upvoted 1 times

NikoTomas

8 months, 2 weeks ago

INCORRECT. Profiling policies (answer B) has nothing to do with storage and replication of tons of collected endpoint attributes. The profiling policy just takes some of the attributes (for ex. vendor, etc...) but many of the attributes remain uselessly stored in the memory. SISE ebook - page 444 --- "You can reduce the number of persistence events and replication events by reducing the number of endpoint attributes that do not change frequently at the collection point. Enabling the ENDPOINT ATTRIBUTE FILTER will have the Cisco ISE profiler only to keep allowed attributes and discard all other attributes. " https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_cisco_ise_endpoint_profiling_policies.html#concept_486C9767E3CD4D448F8CE6CBBA0A6C93

upvoted 1 times

...

THEODORABLE

1 year, 5 months ago

Selected Answer: A

A is correct-- as per documentation https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_cisco_ise_endpoint_profiling_policies.html#ID48

upvoted 2 times

...

tliz

1 year, 9 months ago

Selected Answer: A

Enable Endpoint Attribute Filter ISE > Administration > Settings > Profiling > Profiler Configuration Check Endpoint Attribute Filter https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_cisco_ise_endpoint_profiling_policies.html#ID481

upvoted 2 times

...

YmerG

1 year, 9 months ago

Selected Answer: A

The answer seems to be correct according to the provided link, note the following statement: "Enabling the EndPoint Attribute Filter will have the Cisco ISE profiler only to keep significant attributes and discard all other attributes. Significant attributes are those used by the Cisco ISE system or those used specifically in a endpoint profiling policy or rule."

upvoted 2 times

...

Exam 300-715 All Questions

View all questions & answers for the 300-715 exam

Exam 300-715 topic 1 question 17 discussion

Comments

NikoTomas

denverfly

NikoTomas

THEODORABLE

tliz

YmerG

SY0-701