Cisco Updated 300-715 Exam Questions and Answers by gianna

The Policy Service persona must be enabled because the Policy Service Node processes authentication, authorization, and accounting requests, including TACACS+ requests handled by the Device Administration service. When a network administrator signs in to a router, switch, firewall, or wireless controller, the network device forwards the TACACS+ request to an ISE node on which Device Administration is enabled. That node evaluates the applicable device-administration policy set, identity source, command set, and TACACS+ shell profile. The Administration persona provides the management interface and maintains deployment-wide configuration but does not independently process endpoint or device-administration authentication requests. The Monitoring persona collects operational data, logs, reports, and troubleshooting information. The pxGrid persona publishes and exchanges contextual information with integrated security platforms. Therefore, the Device Admin service must operate on a Policy Service Node.