300-715 Question #151: Real Exam Question with Answer & Explanation

Question

An organization is implementing Cisco ISE posture services and must ensure that a host-based firewall is in place on every Windows and Mac computer that attempts to access the network. They have multiple vendors' firewall applications for their devices, so the engineers creating the policies are unable to use a specific application check in order to validate the posture for this. What should be done to enable this type of posture check?

Options

• AUse the file registry condition to ensure that the firewal is installed and running appropriately.
• BUse a compound condition to look for the Windows or Mac native firewall applications.
• CEnable the default firewall condition to check for any vendor firewall application.
• DEnable the default application condition to identify the applications installed and validade the

Explanation

{"question_number": 7, "correct_answer": "C", "explanation": "Cisco ISE posture services include a built-in 'Default Firewall' condition (also called the 'Any Firewall' condition) that checks whether any host-based firewall-regardless of vendor-is installed and active on a Windows or Mac endpoint. This is specifically designed for environments with heterogeneous firewall software, where requiring a check for a specific application would fail for endpoints using a different vendor's product. Using this default condition avoids the need to enumerate every possible firewall application and provides a vendor-agnostic compliance check for all endpoints.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.