6.1 Configure Client Profiling on WLC and ISE 300-430 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An administrator is troubleshooting why a specific Windows laptop is not being profiled correctly in ISE. The laptop is connected via a Cisco 9800 WLC. The admin sees the endpoint in ISE but it is listed as 'Unknown'. Which step should be taken first?

   • AReboot the laptop
   • BCheck if the RADIUS accounting packets are being received by ISE
   • CDisable the Windows firewall
   • DChange the laptop's MAC address
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   A client is not being profiled correctly in ISE. What is a common first step to troubleshoot this issue?

   • AReboot the access point
   • BChange the client's SSID
   • CDisable the client's firewall
   • DVerify that the appropriate profiling probes are enabled and receiving data
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A university has Cisco WLCs and ISE. They want to use ISE profiling to assign different access policies to student laptops and faculty iPads on the same SSID. The WLC is already sending RADIUS accounting to ISE. What additional WLC configuration is required to allow ISE to enforce the profiling-based policy?

   • ASet the WLAN to use MAC filtering.
   • BEnable DHCP Required on the WLAN.
   • CEnable AAA Override on the WLAN.
   • DConfigure the WLC to use local profiling policies.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An ISE administrator is creating a custom profiling policy for a new type of VoIP phone. The phone sends DHCP requests with a vendor class identifier of 'Cisco-SIPPhone' and uses a specific HTTP user-agent when accessing the network. Which condition should be used in the profiling policy to reliably match this device?

   • AMatch on both the DHCP vendor class identifier and the HTTP user-agent.
   • BMatch on the HTTP user-agent only.
   • CMatch on the DHCP vendor class identifier only.
   • DMatch on either the DHCP vendor class identifier or the HTTP user-agent.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An ISE administrator wants to create a custom profiling policy for a specific VoIP phone model. The phone sends DHCP vendor class and HTTP user-agent. Which condition should the policy use to uniquely identify this model?

   • AMatch on RADIUS NAS-Port-Type
   • BMatch on MAC OUI for the phone vendor
   • CMatch on HTTP user-agent containing 'Mozilla'
   • DMatch on DHCP vendor class containing the phone model string
   Reveal Solution Discussion Select an answer first