Free Practice Questions for Cisco 300-715 Exam

The Policy Service persona must be enabled because the Policy Service Node processes authentication, authorization, and accounting requests, including TACACS+ requests handled by the Device Administration service. When a network administrator signs in to a router, switch, firewall, or wireless controller, the network device forwards the TACACS+ request to an ISE node on which Device Administration is enabled. That node evaluates the applicable device-administration policy set, identity source, command set, and TACACS+ shell profile. The Administration persona provides the management interface and maintains deployment-wide configuration but does not independently process endpoint or device-administration authentication requests. The Monitoring persona collects operational data, logs, reports, and troubleshooting information. The pxGrid persona publishes and exchanges contextual information with integrated security platforms. Therefore, the Device Admin service must operate on a Policy Service Node.

The pxGrid persona provides the context-sharing framework required for Cisco ISE to exchange security information with other Cisco and supported third-party platforms. Through pxGrid, integrated products can publish or subscribe to contextual data such as user identities, endpoint details, session information, security group tags, and applicable security policies. This enables firewalls, threat-detection systems, management platforms, and other security tools to make access-control or investigation decisions using identity and TrustSec context obtained from ISE. SXP is a protocol for propagating IP-to-SGT mappings between TrustSec-capable or TrustSec-aware devices; it is not an ISE node persona and does not provide general policy-object sharing. The Policy Service persona evaluates authentication and authorization requests. Identity Mapping is a contextual function rather than the integration persona required to provide scalable, bidirectional information sharing with multiple security products.

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html

The persona or personas of a node determine the services provided by a node. An ISE node can assume any or all of the following personas: Administration, Policy Service, and Monitoring. The menu options that are available through the administrative user interface are dependent on the role and personas that an ISE node assumes. See Cisco ISE Nodes and Available Menu Options for more information.

https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_010000.html