Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 111

An administrator configures new authorization policies within Cisco ISE and has difficulty profiling the devices. Attributes for the new Cisco IP phones that are profiled based on the RADIUS authentication are seen; however, the attributes for CDP or DHCP are not. What should the administrator do to address this issue?

Answer options

• A. Configure a service template within the switch to standardize the port configurations so that the correct information is sent to Cisco ISE.
• B. Configure the ip dhcp snooping trust command on the DHCP interfaces to get the information to Cisco ISE.
• C. Configure the authentication port-control auto feature within Cisco ISE to identify the devices that are trying to connect.
• D. Configure the device sensor feature within the switch to send the appropriate protocol information.

Correct answer: D

Explanation

The correct answer is D because enabling the device sensor feature allows the switch to gather and send detailed protocol information, which is necessary for proper device profiling. Option A does not directly address the issue of profiling, while option B only pertains to DHCP and may not resolve the CDP profiling issue. Option C is related to authentication but does not help with profiling the specific devices correctly.