Question

A hospital's security team is deploying Cisco ISE and wants a way to automatically discover and classify the thousands of unmanaged devices connecting to the network—medical infusion pumps, IP cameras, and printers—without requiring any agent or supplicant on the endpoints. Which ISE capability best delivers this outcome, and what is its primary benefit?

Accepted Answer

Profiling, which uses probes to collect endpoint attributes and dynamically classify devices so policy can be applied based on device type

Answer

Posture assessment, which verifies that each endpoint meets security requirements before granting full network access

Answer

MAC Authentication Bypass, which grants access to any device whose MAC address is present, providing visibility through static entries

Answer

Guest services, which redirects unknown devices to a web portal for self-registration and identity capture