nerdexam
Cisco

300-715 · Question #345

A network engineer must configure a policy rule to check the endpoint. The policy must ensure disk encryption is enabled and the appropriate antivirus software version is installed. Which…

The correct answer is B. compound posture condition. To check multiple endpoint health requirements like disk encryption and antivirus status simultaneously in a policy rule, a compound posture condition must be applied.

Endpoint Compliance

Question

A network engineer must configure a policy rule to check the endpoint. The policy must ensure disk encryption is enabled and the appropriate antivirus software version is installed. Which configuration must the engineer apply to the rule?

Options

  • Adictionary compound condition
  • Bcompound posture condition
  • Csimple posture condition
  • Ddictionary simple condition

How the community answered

(33 responses)
  • A
    15% (5)
  • B
    76% (25)
  • C
    6% (2)
  • D
    3% (1)

Why each option

To check multiple endpoint health requirements like disk encryption and antivirus status simultaneously in a policy rule, a compound posture condition must be applied.

Adictionary compound condition

A dictionary compound condition refers to combining multiple attributes from a dictionary, but "posture" conditions are a specific type of condition for endpoint health.

Bcompound posture conditionCorrect

A compound posture condition in Cisco ISE allows combining multiple simple posture conditions (e.g., disk encryption enabled AND antivirus software installed) with logical operators to create a comprehensive compliance requirement for an endpoint.

Csimple posture condition

A simple posture condition checks only one specific aspect of endpoint health, not multiple conditions simultaneously.

Ddictionary simple condition

A dictionary simple condition checks a single attribute from a dictionary, which is too general and doesn't specifically refer to combining multiple endpoint health checks.

Concept tested: Cisco ISE compound posture conditions

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html

Topics

#Endpoint Compliance#Posture Assessment#Cisco ISE Policy#Compound Conditions

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice