nerdexam
Cisco

300-715 · Question #182

An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints. Which action accomplishes this task for VPN…

The correct answer is A. Create a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE. To automatically deploy the Cisco AnyConnect compliance module for VPN users, an engineer must create a Cisco AnyConnect configuration and a Client Provisioning policy within Cisco ISE.

Endpoint Compliance

Question

An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints. Which action accomplishes this task for VPN users?

Options

  • ACreate a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE.
  • BConfigure the compliance module to be downloaded from within the posture policy.
  • CPush the compliance module from Cisco FTD prior to attempting posture.
  • DUse a compound posture condition to check for the compliance module and download if needed.

How the community answered

(26 responses)
  • A
    73% (19)
  • B
    8% (2)
  • C
    4% (1)
  • D
    15% (4)

Why each option

To automatically deploy the Cisco AnyConnect compliance module for VPN users, an engineer must create a Cisco AnyConnect configuration and a Client Provisioning policy within Cisco ISE.

ACreate a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE.Correct

For VPN users, Cisco ISE leverages Cisco AnyConnect to deploy the compliance module (e.g., AnyConnect Posture Module). A Client Provisioning policy in ISE is used to instruct endpoints to download and install the AnyConnect client, including its various modules, which enables the posture service.

BConfigure the compliance module to be downloaded from within the posture policy.

While posture policies define compliance requirements, they do not directly handle the automatic download and installation of the compliance module itself; client provisioning handles the initial deployment.

CPush the compliance module from Cisco FTD prior to attempting posture.

Cisco FTD (Firepower Threat Defense) manages VPN connectivity but is not primarily responsible for pushing the Cisco ISE compliance module; that is handled by ISE's client provisioning.

DUse a compound posture condition to check for the compliance module and download if needed.

A compound posture condition checks for compliance status but does not initiate the download and installation of the compliance module itself; client provisioning is responsible for that.

Concept tested: Cisco ISE Client Provisioning for AnyConnect Posture

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_01010.html

Topics

#Cisco ISE#Posture Services#Client Provisioning#AnyConnect VPN

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-715 Practice