300-715 Question #262: Real Exam Question with Answer & Explanation

Question

An engineer configured posture assessment for their network access control with the goal of using an agent that supports using service conditions for the assessment. The agent should run as a background process to avoid user interruption, but the user can see it when it is run. What is the problem?

Options

• AThe selected posture agent does not support the engineer's goal.
• BThe posture module was deployed using the headend instead of installing it with SCCM.
• CThe proper permissions were not given to the temporal agent to conduct the assessment.
• DThe user required remediation so the agent appeared in the notifications.

Explanation

The posture agent chosen by the engineer does not support the requirement of running silently in the background, as the user can visibly see it operating.

Common mistakes.

• B. The deployment method (headend vs. SCCM) primarily affects how the agent is installed, not its runtime visibility or ability to run silently.
• C. While permissions are important, a temporal agent lacking permissions would likely fail to run or assess, not necessarily run visibly when it's meant to be silent.
• D. Even if remediation is required, a properly configured silent agent would typically handle remediation without a visible pop-up, or the pop-up would be a notification rather than the agent itself being visible, unless specifically configured to alert the user.

Concept tested. Cisco ISE posture agent types and silent operation

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_011.html#concept_098934C7C2244F75BC12224BA1D5C92C

No community discussion yet for this question.