300-715 · Question #140
An administrator is configuring a Cisco ISE posture agent in the client provisioning policy and needs to ensure that the posture policies that interact with clients are monitored, and end users are…
The correct answer is A. AnyConnect E. Posture Agent. In Cisco ISE client provisioning, two resources are required to enable posture enforcement: (1) AnyConnect - the endpoint client software that Cisco ISE provisions to end users' machines. It includes the ISE Posture module, which communicates posture status back to ISE. (2)…
Question
An administrator is configuring a Cisco ISE posture agent in the client provisioning policy and needs to ensure that the posture policies that interact with clients are monitored, and end users are required to comply with network usage rules. Which two resources must be added in Cisco ISE to accomplish this goal? (Choose two)
Options
- AAnyConnect
- BSupplicant
- CCisco ISE NAC
- DPEAP
- EPosture Agent
How the community answered
(14 responses)- A86% (12)
- B7% (1)
- D7% (1)
Explanation
In Cisco ISE client provisioning, two resources are required to enable posture enforcement: (1) AnyConnect - the endpoint client software that Cisco ISE provisions to end users' machines. It includes the ISE Posture module, which communicates posture status back to ISE. (2) Posture Agent - the actual posture assessment component (also called the ISE Posture/NAC Agent) that evaluates the endpoint against defined posture policies. Together, AnyConnect delivers the agent to the client, and the Posture Agent performs the compliance checks and enforces network usage rules. A Supplicant (B) handles 802.1X EAP authentication, not posture. Cisco ISE NAC (C) is not a distinct provisioning resource in this context. PEAP (D) is an authentication protocol, not a posture resource.
Topics
Community Discussion
No community discussion yet for this question.