300-420 · Question #294
300-420 Question #294: Real Exam Question with Answer & Explanation
The correct answer is A: enforcing endpoint compliance with network security policies. Cisco ISE primarily functions to enforce network security policies by ensuring endpoint compliance and by providing comprehensive visibility and context about every device connecting to the network.
Question
Which two options are primary functions of Cisco ISE? (Choose two.)
Options
- Aenforcing endpoint compliance with network security policies
- Benabling WAN deployment over any type of connection
- Cautomatically enabling, disabling or reducing allocated power to certain devices
- Dproviding information about every device that touches the network
- Eproviding encryption for any type of mobile devices
- Fallocating cloud resources
Explanation
Cisco ISE primarily functions to enforce network security policies by ensuring endpoint compliance and by providing comprehensive visibility and context about every device connecting to the network.
Common mistakes.
- B. Enabling WAN deployment over various connection types is a function typically associated with SD-WAN or other specific WAN technologies, not the primary role of Cisco ISE.
- C. While ISE can influence device access, its primary role does not involve directly managing the power allocation or state of network-connected devices.
- E. Cisco ISE integrates with Mobile Device Management (MDM) solutions for posture assessment of mobile devices, but it does not directly provide encryption for these devices.
- F. Allocating cloud resources is a responsibility of cloud management platforms and orchestrators, which is outside the core functionality of a network access control system like ISE.
Concept tested. Cisco ISE core functions, NAC capabilities
Reference. https://www.cisco.com/c/en/us/products/security/identity-services-engine/what-is-ise.html
Topics
Community Discussion
No community discussion yet for this question.