Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 340

An administrator is configuring a new profiling policy within Cisco ISE. The organization has several endpoints that are the same device type, and all have the same Block ID in their MAC address. The profiler does not currently have a profiling policy created to categorize these endpoints, therefore a custom profiling policy must be created.
Which condition must the administrator use in order to properly profile an ACME AI Connector endpoint for network access with MAC address 01:41:14:65:50:AB?

Answer options

• A. CDP_cdpCacheDeviceID_CONTAINS_<MAC ADDRESS>
• B. MAC_MACAddress_CONTAINS_<MAC ADDRESS>
• C. Radius_Called_Station-ID_STARTSWITH_<MAC ADDRESS>
• D. MAC_OUI_STARTSWITH_<MAC ADDRESS>

Correct answer: D

Explanation

The correct answer is D because using MAC_OUI_STARTSWITH_<MAC ADDRESS> allows the profiling policy to match the Organizationally Unique Identifier (OUI) part of the MAC address, which is crucial for identifying the device type. The other options either look for a specific device ID or attempt to match the entire MAC address, which may not be effective in this situation since the Block ID is the same for multiple devices.