Exam 300-715 All Questions

View all questions & answers for the 300-715 exam

Exam 300-715 topic 1 question 195 discussion

Actual exam question from Cisco's 300-715

Question #: 195
Topic #: 1

An organization is using Cisco ISE to provide AAA services to non-Cisco switches with IP phones connected. An engineer needs to use Profiling Services to authorize network access for IP phones that do not support 802.1X. What must be configured to accomplish this goal?

A. DHCP
B. SNMPTRAP
C. SNMPQUERY
D. RADIUS

Show Suggested Answer

Suggested Answer: C 🗳️

by Frankie_Boy at Feb. 6, 2023, 7:40 p.m.

Comments

Submit Cancel

factmrojas

1 year ago

Selected Answer: A

Cisco ISE can use several probes for device profiling, but DHCP is commonly used for IP phones because: DHCP: When an IP phone connects to the network, it typically requests an IP address via DHCP. The DHCP request contains various attributes that Cisco ISE can use to identify and profile the device. This information includes details like the MAC address and specific DHCP options that can indicate the type of device.

upvoted 1 times

...

NikoTomas

1 year, 5 months ago

Correct answer: A - DHCP --- Incorrect answers: o RADIUS (accounting) – sends Cisco Device Sensor data to ISE but question is about Non-Cisco SWs. o SNMP – to use it for Profiling when Phone is connected, we would need both (B) SNMPTRAP and (C) SNMPQUERY enabled at the same time, but only 1 answer is correct (see explanation in the comment below)

upvoted 2 times

NikoTomas

1 year, 5 months ago

SISE ebook: “SNMP is used to query NADs that do not support Cisco’s Device Sensor. After you enable the SNMPQUERY probe, ISE polls all the SNMP-enabled NADs at the configured polling interval.” “The SNMPTRAP probe receives from the configured NAD(s) information that supports MAC notification, linkup, linkdown, and informs. The purpose of this probe is twofold: It is used to trigger the SNMPQUERY probe, and it is used as a toggle switch to allow the SNMPQUERY probe to reactively query a NAD instead of waiting for the periodic polling interval. Therefore, you must also enable the SNMPQUERY probe in order for SNMPTRAP to be functional. The SNMPTRAP probe receives information from a specific NAD(s) when the MAC address table changes or when the link state changes on a switch port. In order to make this feature functional, you must configure the NAD to send SNMP traps or inform.”

upvoted 2 times

...

XBfoundX

1 year, 8 months ago

I really don't know if it is SNMP Query or DHCP one. here there is a question about the DHCP probe not working and asking about the sensor feature. https://community.cisco.com/t5/network-access-control/dhcp-profiling-probe-not-working/td-p/4149653 The only poin that I have not get is that if the sensor feature for DHCP is mandatory or not. If it is then you just configure snmp between the PSN nodes and the NAD devices and you are done. The snmp probe will actually get LLDP/CDP information and some more about the device. You can get also useful informations with DHCP too, but if the sensor feature is mandatory and you do not have a Cisco switch you are not able to do so I think.

upvoted 2 times

...

IETF1

1 year, 8 months ago

A. DHCP IP helper is enough to give ISE all details it needs for type of device.

upvoted 3 times

...

Leogxn

2 years ago

Selected Answer: C

https://community.cisco.com/t5/network-access-control/do-i-really-need-the-snmp-query-probe/m-p/3833680/highlight/true#M39935 Looks like the C is a better anwser

upvoted 1 times

...

ElCobra90

2 years ago

Both A and C are correct, usually for that purpose i saw in production environment using DHCP probes so il will go with A

upvoted 1 times

...

ahdanz32

2 years ago

A. DHCP

upvoted 1 times

...

redpassion

2 years, 1 month ago

Selected Answer: A

DHCP Probes Collect DHCP request attributes from endpoints and IP helper.Generally used for third-party NADs

upvoted 3 times

...

johndelorien

2 years, 2 months ago

Selected Answer: C

To authorize network access for IP phones that do not support 802.1X using Profiling Services in Cisco ISE, the engineer must configure SNMPQUERY. SNMPQUERY is a method used by Cisco ISE to gather information about network devices through SNMP (Simple Network Management Protocol) queries. Profiling Services in Cisco ISE can utilize SNMPQUERY to gather information from IP phones that do not support 802.1X. This information can then be used to identify and authorize network access for these devices. Therefore, the correct option to accomplish this goal is C. SNMPQUERY.

upvoted 3 times

NikoTomas

1 year, 5 months ago

Wrong! To use SNMP for Profiling when Phone is connected, we would need both (B) SNMPTRAP and (C) SNMPQUERY enabled at the same time, but only 1 answer is correct ------------------- SISE ebook: “SNMP is used to query NADs that do not support Cisco’s Device Sensor. After you enable the SNMPQUERY probe, ISE polls all the SNMP-enabled NADs at the configured polling interval.” “The SNMPTRAP probe receives from the configured NAD(s) information that supports MAC notification, linkup, linkdown, and informs. The purpose of this probe is twofold: It is used to trigger the SNMPQUERY probe, and it is used as a toggle switch to allow the SNMPQUERY probe to reactively query a NAD instead of waiting for the periodic polling interval. Therefore, you must also enable the SNMPQUERY probe in order for SNMPTRAP to be functional. The SNMPTRAP probe receives information from a specific NAD(s) when the MAC address table changes or when the link state changes on a switch port. In order to make this feature functional, you must configure the NAD to send SNMP traps or inform.”

upvoted 1 times

...

Frankie_Boy

2 years, 5 months ago

A. DHCP is correct

upvoted 1 times

JimboOh

2 years, 4 months ago

I think so too

upvoted 1 times

...