300-715 · Question #109
An administrator is configuring posture with Cisco ISE and wants to check that specific services are present on the workstations that are attempting to access the network. What must be configured to…
The correct answer is D. Create a service posture condition using a non-OPSWAT API version. To verify the presence and running state of specific services on workstations for posture compliance in Cisco ISE, an administrator must configure a service posture condition.
Question
An administrator is configuring posture with Cisco ISE and wants to check that specific services are present on the workstations that are attempting to access the network. What must be configured to accomplish this goal?
Options
- ACreate a registry posture condition using a non-OPSWAT API version.
- BCreate an application posture condition using a OPSWAT API version.
- CCreate a compound posture condition using a OPSWAT API version.
- DCreate a service posture condition using a non-OPSWAT API version.
How the community answered
(40 responses)- A3% (1)
- B3% (1)
- C5% (2)
- D90% (36)
Why each option
To verify the presence and running state of specific services on workstations for posture compliance in Cisco ISE, an administrator must configure a service posture condition.
A registry posture condition checks for specific registry key values, not the presence or running state of services.
An application posture condition checks for installed applications, their versions, or running processes, but not specifically the state of an operating system service.
A compound posture condition combines multiple individual conditions but does not define the fundamental check for a service itself.
Creating a service posture condition is the correct method in Cisco ISE to check for the presence and running state of specific services on an endpoint, ensuring compliance before granting network access. The "non-OPSWAT API version" refers to the older, built-in Cisco AnyConnect NAC Agent's ability to check services directly.
Concept tested: Cisco ISE Posture - Service Condition
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ise_admin_guide_3_0/b_ise_admin_guide_30_chapter_0100.html#task_D102A8C16259441D91E5B5FC225F883B
Topics
Community Discussion
No community discussion yet for this question.