A Cisco ISE administrator must restrict specific endpoints from accessing the network while in closed mode. The requirement is to have Cisco ISE centrally store...

A Cisco ISE administrator must restrict specific endpoints from accessing the network while in closed mode. The requirement is to have Cisco ISE centrally store the endpoints to restrict access from.What must be done to accomplish this task?

A. Create a profiling policy for each endpoint with the cdpCacheDeviceId attribute. B. Create a logical profile for each device's profile policy and block that via authorization policies. C. Add each MAC address manually to a blocklist identity group and create a policy denying access. D. Add each IP address to a policy denying access.