300-710 SNCF Integration Practice Question
An engineer is troubleshooting a Cisco ISE and Secure Firewall pxGrid integration. The administrator notices that user group memberships are not populating correctly on the FTD, even though IP-to-user mappings are visible. What is the most likely reason user group information is missing?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ISE is not configured to include user group attributes in pxGrid publication feeds, or the FMC requires direct LDAP/AD integration to resolve user group hierarchies.
While pxGrid shares IP-to-user mappings, user group attribute resolution often relies on Active Directory integration or LDAP directory configurations mapped within ISE or synchronized via Active Directory Agent / ISE Active Directory attribute retrieval. If ISE is not configured to publish user group attributes over pxGrid or if the FMC lacks AD LDAP integration to resolve the groups, group-based rules will fail.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
ISE is not configured to include user group attributes in pxGrid publication feeds, or the FMC requires direct LDAP/AD integration to resolve user group hierarchies.
Why this is correct
pxGrid passes identity mappings, but complete group membership resolution often requires ISE attribute publishing settings or supplementary AD integration on the FMC.
- ✗
The FMC eStreamer service is blocking group attribute propagation.
Why it's wrong here
eStreamer is for SIEM event streaming, not ISE pxGrid attribute propagation.
- ✗
User groups can only be resolved via RADIUS accounting attributes, making pxGrid fundamentally incompatible with user group filtering.
Why it's wrong here
pxGrid fully supports user identity and group context when properly configured.
- ✗
The FTD Snort engine must be configured with a local flat file containing all user group names.
Why it's wrong here
FTD does not use local flat files for Active Directory group resolution.
Visual reference
About these practice questions
This 300-710 SNCF question is part of Courseiva's 478-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This 300-710 SNCF practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-710 SNCF exam.