Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 246

An administrator must configure Cisco ISE profiling services and the Cisco switch device sensor feature to provide user access using the AD-Join-Point and AD-Operating-System attributes from the Active Directory Probe. These configurations were performed:

• configured all the required Cisco Wireless LAN Controller configurations
• enabled Active Directory probes
• configured a custom profiling policy
• joined Cisco ISE to Active Directory
• configured the authorization rule with full access permission

Which two actions complete the configuration? (Choose two.)

Answer options

• A. Configure an identity group for endpoints.
• B. Enable the SNMP probe.
• C. Configure a profiling logical profile.
• D. Configure custom profiling conditions.
• E. Enable the RADIUS probe.

Correct answer: D, E

Explanation

The correct actions to complete the configuration are D and E. Configuring custom profiling conditions (D) allows for more specific profiling rules, while enabling the RADIUS probe (E) is essential for authenticating users via RADIUS, which is crucial for access control. The other options, while useful, do not directly finalize the necessary steps for the profiling services to function as intended.