4.10 Endpoint Profiling Using Cisco ISE and Cisco Network Infrastructure Including Device Sensor CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of endpoint identity groups in ISE?

   • ATo group endpoints for easier management and policy assignment
   • BTo store endpoint credentials
   • CTo provide DNS resolution for endpoints
   • DTo assign IP addresses to endpoints
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An endpoint is not being profiled correctly in ISE. Which of the following is a common cause?

   • AThe device sensor is not enabled on the network device
   • BThe endpoint is using a static IP address
   • CThe endpoint is connected to a router instead of a switch
   • DThe endpoint's MAC address is not registered in ISE
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When troubleshooting endpoint profiling, where can you check if ISE has received device sensor data?

   • AIn the network device's syslog
   • BIn the endpoint's DHCP server logs
   • CIn the ISE system logs
   • DIn the ISE RADIUS accounting logs
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In the endpoint profiling workflow, what typically happens after an endpoint is profiled?

   • AThe endpoint is disconnected from the network
   • BThe endpoint's MAC address is changed
   • CThe endpoint is immediately quarantined
   • DThe endpoint is assigned to an identity group and policies are applied
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which probe is commonly used to collect the DHCP option 55 (parameter request list) from endpoints for profiling?

   • ADNS probe
   • BRADIUS probe
   • CDHCP probe
   • DHTTP probe
   Reveal Solution Discussion Select an answer first