Free Cisco 300-715 SISE Actual Exam Questions - Question 5 Discussion
speakers that require access to the intercom system. This traffic needs to be identified if the ToS bit is
set to 5 and the destination IP address is the intercom system. What must be configured to
accomplish this goal?
It’s A, NMAP actively probes and can detect ToS bits and IP destinations for profiling.
A imo—NMAP can actively scan and profile devices based on specific traffic attributes like ToS bits and destination IP, which might help identify those IP speakers for correct authorization.
Option B seems right since NetFlow captures traffic details like ToS bits and destination IPs, which is exactly what’s needed to identify the intercom system traffic here.
It’s D because RADIUS is the protocol that actually ties user or device authentication and authorization together with profiling info. While NetFlow collects flow data, it doesn’t directly authorize access based on ToS bits or destination IP. Cisco ISE uses RADIUS to enforce policies after profiling detects the device type or traffic characteristics. So even if you profile with NetFlow, the actual access control decision happens through RADIUS. This fits how Cisco ISE manages device profiling and network access control end-to-end.
Makes sense to me to pick B since NetFlow monitors detailed traffic info like ToS and IP addresses, which fits the requirement here. Will V.
Sounds like NetFlow is the only one that tracks ToS bits and destination IP well, so B.
A imo, NMAP can actively scan and profile devices like IP speakers by their characteristics.
B, NetFlow tracks traffic details like ToS and IP addresses.