A managed service is rolling out advanced wireless infrastructure to support an expanding organization with diverse device types. The implementation…

To enforce access parameters based on device category, the fundamental step in Cisco Identity Services Engine (ISE) is to configure profiling. The ISE profiling service uses various probes (e.g., DHCP, HTTP, RADIUS) to collect attributes from endpoints. These attributes are then matched against profiling policies to classify the device into a specific endpoint identity group (e.g., "Smartphones," "Windows-Workstations"). These groups, which represent device categories, are then used as conditions in authorization policy sets to enforce the required access rules. Therefore, configuring profiling is the essential action to enable device classification.

A. "Device-type groups" is not the standard ISE terminology. The correct term is "Endpoint Identity Groups," which are populated by the profiling service.

C. User ID groups are related to user identity (e.g., Active Directory groups), not the classification of the endpoint device itself.

D. "Endpoint group mapping" is too generic. The specific action is configuring the profiling policies that classify endpoints into the correct groups for policy use.

1. Cisco. (2023). Cisco Identity Services Engine Administrator Guide, Release 3.2 - Chapter: Profiling. "About Profiling". "Cisco ISE uses profiling to identify and classify endpoints that connect to the network... You can then use this information to create authorization policies."

2. Cisco. (2023). Cisco Identity Services Engine Administrator Guide, Release 3.2 - Chapter: Configure Profiling Policies. "A profiling policy is a set of rules that is used to classify endpoints into different endpoint identity groups."

3. Cisco. (2023). Cisco Identity Services Engine Administrator Guide, Release 3.2 - Chapter: Policy Sets. This chapter shows how authorization rules within a policy set use conditions, including IdentityGroup:Name, which refers to the endpoint identity groups populated by profiling.