When setting up a custom endpoint identity group for printers, what is the best practice for assigning devices to that group?
A Profiling Policy applies matching rules to discovered endpoints and places them into the correct identity group automatically, removing manual assignment errors. This satisfies the best-practise requirement for scalable, consistent printer onboarding in Cisco ISE.
Why this answer
The best practice for assigning devices to a custom endpoint identity group is to use a Profiling Policy. Profiling policies automatically classify endpoints based on collected attributes (e.g., DHCP, HTTP, SNMP) and assign them to the appropriate identity group. This ensures dynamic and scalable management, reducing manual effort and errors.
Exam trap
The trap here is thinking that manual or CSV-based methods are acceptable for large-scale deployments. Candidates might choose manual addition because it seems straightforward, but the best practice is automation through profiling policies.
How to eliminate wrong answers
Option A is wrong because manually adding every printer MAC address is not scalable and prone to error, especially in large networks. Option C is wrong because importing a CSV file periodically is a manual process that does not automatically adapt to changes and can become outdated. Option D is wrong because using an Authorization Policy to bypass profiling does not assign devices to the group; it simply skips profiling, which defeats the purpose of classification.