300-715 Question #159: Real Exam Question with Answer & Explanation

Question

A network administrator must use Cisco ISE to check whether endpoints have the correct version of antivirus installed. Which action must be taken to allow this capability?

Options

• AConfigure a native supplicant profile to be used for checking the antivirus version
• BConfigure Cisco ISE to push the HostScan package to the endpoints to check for the antivirus
• CCreate a Cisco AnyConnect Network Visibility Module configuration profile to send the antivirus
• DCreate a Cisco AnyConnect configuration within Cisco ISE for the Compliance Module and

Explanation

{"question_number": 4, "question": "A network administrator must use Cisco ISE to check whether endpoints have the correct version of antivirus installed. Which action must be taken to allow this capability?", "correct_answer": "D", "explanation": "Creating a Cisco AnyConnect configuration within Cisco ISE for the Compliance Module is required. The Compliance Module (formerly HostScan for AnyConnect VPN) is the component that performs posture assessments - including checking for specific antivirus vendors and version requirements. Within Cisco ISE, you configure an AnyConnect posture profile that includes the Compliance Module settings, which ISE then distributes to endpoints. This allows ISE to evaluate whether the correct antivirus version is installed before granting network access.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.