MENU
An engineer must use Cisco ISE to provide network access to endpoints that cannot support 802.1X. The endpoint MAC addresses must be allowlisted by configuring an endpoint identity group. These configurations were performed:
Configured an identity group named allowlist
Configured the endpoints to use the MAC address of incompatible 802.1X devices
Added the endpoints to the allowlist identity group
Configured an authentication policy for MAB users
What must be configured?
Suggested Answer: C
Get Premium 300-715 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
VE
Venita
6 months ago
C is definitely the right answer. It matches the requirements perfectly.
WI
Winfred
6 months ago
I feel like C is the best choice. It directly relates to access control.
SH
Shawnda
6 months ago
I'm leaning towards A. Authorization profile seems crucial too.
SH
Sherell
7 months ago
Agreed, C makes sense. It aligns with the allowlist.
AZ
Azalee
7 months ago
Sounds too easy, are we sure this will work?
LA
Lavonna
7 months ago
I didn’t know you could use MAC addresses like that!
TI
Tiara
7 months ago
Wait, why not B)? Isn’t that also important?
SH
Sherell
7 months ago
Totally agree, authorization profile is key here!
ST
Stefany
8 months ago
Wait, so we're not supposed to just give the endpoints a blank check and let them do whatever they want? Dang, there goes my plan for the day.
LO
Lore
8 months ago
I'm just glad they didn't ask about the "Cisco Certified Sandwich Artist" certification. That one's a real head-scratcher!
TA
Talia
8 months ago
I'm going with B. We need an authentication profile that has the PermitAccess permission and matches the allowlist identity group.
CH
Christoper
8 months ago
D is the way to go. We need to create a logical profile that matches the allowlist identity group based on the configured policy.
CA
Catina
9 months ago
Option A seems like the right choice to me. We need to configure an authorization profile that allows access for the devices in the allowlist identity group.
ED
Eden
9 months ago
I think option C is the correct answer. The question mentions configuring an authentication policy for MAB users, so we need to create an authorization policy that matches the allowlist identity group and has the PermitAccess permission.
DE
Delpha
9 months ago
I’m leaning towards option C because it specifically mentions the authorization policy, which seems crucial for granting access.
KA
Kattie
9 months ago
I feel like the authorization policy is the key here, but I’m not confident if it’s C or D. I should have reviewed those last-minute!
BR
Brandee
9 months ago
I remember practicing a similar question where we had to configure an authorization profile. It might be option A, but I could be mixing it up with something else.
AN
An
9 months ago
I'm a little unsure here. The question mentions configuring Cisco ISE, so I'm wondering if option D about a logical profile might be the way to go. That could be the piece that ties everything together based on the configured policy. But I'm not 100% confident on that.
GR
Gregoria
10 months ago
Okay, let me think this through. We've got the endpoints configured to use MAC addresses, and we've added them to an allowlist identity group. So I think the key is to set up an authorization policy that recognizes that allowlist group and grants the necessary permissions. Option C sounds like the best fit to me.
AM
Amira
10 months ago
Hmm, this is tricky. I'm leaning towards option C - an authorization policy that has the PermitAccess permission and matches the allowlist identity group. That seems to align with the requirements of allowing network access for the endpoints in the allowlist group.
DE
Dean
10 months ago
I think it's C. Authorization policy is key here.
CA
Casey
10 months ago
I think we need to set up an authorization policy that allows access for the endpoints in the allowlist group. That sounds right, but I'm not completely sure.
CR
Cruz
10 months ago
A) is the right choice for MAB users.
LO
Louvenia
11 months ago
A could work, but C feels more specific for this scenario.
WI
Willetta
11 months ago
I'm a bit confused here. The question mentions configuring an authentication policy for MAB users, so I'm not sure if we need to focus on the authentication or authorization side. Maybe option B about an authentication profile would be the right approach?
CA
Cathrine
11 months ago
I think we need to configure an authorization profile that has the PermitAccess permission and matches the allowlist identity group. The question is asking what must be configured, and option A seems to directly address that.
MY
Myra
5 months ago
Definitely, without it, they won't get access.
SA
Sang
6 months ago
Authorization profile is crucial for MAB users.
TH
Thaddeus
6 months ago
Yeah, it directly addresses the requirement for access.
IS
Isabella
6 months ago
I agree, option A seems to be the right choice.
MA
Marla
11 months ago
Good catch! Option A is the way to go.