Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 431
An engineer is implementing DHCP security mechanisms and needs the ability to add additional attributes to profiles that are created within Cisco ISE. Which action accomplishes this task?
Answer options
- A. Use DHCP option 82 to ensure that the request is from a legitimate endpoint and send the information to Cisco ISE.
- B. Define MAC-to-IP address mappings in the switch to ensure that rogue devices cannot get an IP address.
- C. Modify the DHCP relay and point the IP address to Cisco ISE.
- D. Configure DHCP snooping on the switch VLANs and trust the necessary interfaces.
Correct answer: A
Explanation
The correct answer is A, as using DHCP option 82 allows for the addition of extra attributes while ensuring the legitimacy of the endpoint requesting DHCP. Options B, C, and D enhance security but do not provide the specific capability to add attributes to profiles in Cisco ISE.