Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

1. A. endpoint marked as lost in My Devices Portal
2. B. addition of endpoint to My Devices Portal
3. C. endpoint profile transition from Apple-Device to Apple-iPhone
4. D. endpoint profile transition from Unknown to Windows 10-Workstation
5. E. updating of endpoint dACL.

Correct Answer: CD

A Cisco ISE administrator must restrict specific endpoints from accessing the network while in closed mode. The requirement is to have Cisco ISE centrally store the endpoints to restrict access from. What must be done to accomplish this task''

1. A. Add each MAC address manually to a blocklist identity group and create a policy denying access
2. B. Create a logical profile for each device's profile policy and block that via authorization policies.
3. C. Create a profiling policy for each endpoint with the cdpCacheDeviceld attribute.
4. D. Add each IP address to a policy denying access.

Correct Answer: B

A laptop was stolen and a network engineer added it to the block list endpoint identity group What must be done on a new Cisco ISE deployment to redirect the laptop and restrict access?

1. A. Select DenyAccess within the authorization policy.
2. B. Ensure that access to port 8443 is allowed within the ACL.
3. C. Ensure that access to port 8444 is allowed within the ACL.
4. D. Select DROP under If Auth fail within the authentication policy.

Correct Answer: C
https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide

Which portal is used to customize the settings for a user to log in and download the compliance module?

1. A. Client Profiling
2. B. Client Endpoint
3. C. Client Provisioning
4. D. Client Guest

Correct Answer: C

An administrator is trying to collect metadata information about the traffic going across the network to gam added visibility into the hosts. This Information will be used to create profiling policies for devices us mg Cisco ISE so that network access policies can be used What must be done to accomplish this task?

1. A. Configure the RADIUS profiling probe within Cisco ISE
2. B. Configure NetFlow to be sent to me Cisco ISE appliance.
3. C. Configure SNMP to be used with the Cisco ISE appliance
4. D. Configure the DHCP probe within Cisco ISE

Correct Answer: D