A regional hospital has 36 label printers whose MAC addresses are already recorded. A printer authorization rule must match a Medical Printers endpoint identity group, and that membership must hold even if a new profiling sensor later changes each printer's profile. Which ISE setting keeps each printer in the Medical Printers endpoint identity group when profiling runs again?
Select an answer to reveal the explanation.
Short Explanation
You write the membership on the endpoint record itself, so it sticks to the printer rather than to a detection result. Turn on Static Group Assignment and profiling may still rewrite the profile, but it cannot move the group. It's like a name tag sewn into a jacket: the label on the outside changes, the tag stays put.
Full Explanation
Static Group Assignment on the endpoint record is the setting that makes the Medical Printers identity-group membership persist when profiling runs again. The recorded MAC addresses let the hospital locate and assign the 36 endpoint records, while the static setting prevents a later profiling result from moving them to another identity group. A profiler policy that assigns the group based on DHCP fingerprints is a standard way to classify endpoints automatically, but it relies on profiling results; a new sensor or changed profile can lead to a different classification and group assignment, so it does not guarantee the required membership. Bulk-importing the MAC addresses into the group is an efficient way to populate endpoint records, but leaving Static Group Assignment off means profiling may still change their group membership. A MAC-based authorization rule with a dedicated authorization profile can control access for known printers, but it does not place them in, or preserve their membership in, the required endpoint identity group. Exam caveat: distinguish endpoint identity groups from authorization profiles and security group tags; assigning an access result or tag is not the same as fixing identity-group membership. Practical check: select a test printer, enable Static Group Assignment on its endpoint record, trigger or wait for profiling to run, and verify that the endpoint remains in Medical Printers and that the intended authorization rule still matches.