nerdexam
Cisco

300-715 · Question #221

An engineer is configuring posture assessment for their network access control and needs to use an agent that supports using service conditions as conditions for the assessment. The agent should be…

The correct answer is A. The engineer is using the "Anyconnect" posture agent but should be using the "Stealth. The posture agent is visible when it should run in the background because the engineer is likely using a standard AnyConnect posture agent instead of a specific 'Stealth' agent variant designed for invisible background operation.

Endpoint Compliance

Question

An engineer is configuring posture assessment for their network access control and needs to use an agent that supports using service conditions as conditions for the assessment. The agent should be run as a background process to avoid user interruption but when it is run, the user can see it. What is the problem?

Options

  • AThe engineer is using the "Anyconnect" posture agent but should be using the "Stealth
  • BThe posture module was deployed using the headend instead of installing it with SCCM
  • CThe user was in need of remediation so the agent appeared m the notifications
  • DThe proper permissions were not given to the temporal agent to conduct the assessment

How the community answered

(28 responses)
  • A
    89% (25)
  • B
    4% (1)
  • C
    7% (2)

Why each option

The posture agent is visible when it should run in the background because the engineer is likely using a standard AnyConnect posture agent instead of a specific 'Stealth' agent variant designed for invisible background operation.

AThe engineer is using the "Anyconnect" posture agent but should be using the "StealthCorrect

To ensure the posture agent runs as a background process without any user interface or interruption, a 'Stealth' mode or specific agent type for invisible operation should be used. If the user can see the agent, it indicates that the deployed AnyConnect posture agent is running in a visible mode rather than the desired stealth configuration.

BThe posture module was deployed using the headend instead of installing it with SCCM

The method of deploying the posture module (headend vs. SCCM) affects installation and updates, not the runtime visibility of the agent itself.

CThe user was in need of remediation so the agent appeared m the notifications
DThe proper permissions were not given to the temporal agent to conduct the assessment

Concept tested: Cisco AnyConnect Posture Module types/modes

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ISE_admin_guide_27/b_ISE_admin_guide_27_chapter_010.html#concept_4CE0D359480C4F77B340B3454B642C7F

Topics

#Posture Assessment#AnyConnect Posture Module#Stealth Module#Agent Visibility

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-715 Practice