300-715 · Question #9
What gives Cisco ISE an option to scan endpoints for vulnerabilities?
The correct answer is D. authorization profile. In Cisco ISE, the authorization profile defines what happens after a device is successfully authenticated - it controls network access permissions, VLAN assignments, ACLs, and additional posture actions. Vulnerability assessment scanning is triggered via the authorization…
Question
What gives Cisco ISE an option to scan endpoints for vulnerabilities?
Options
- Aauthorization policy
- Bauthentication policy
- Cauthentication profile
- Dauthorization profile
How the community answered
(23 responses)- A4% (1)
- C4% (1)
- D91% (21)
Explanation
In Cisco ISE, the authorization profile defines what happens after a device is successfully authenticated - it controls network access permissions, VLAN assignments, ACLs, and additional posture actions. Vulnerability assessment scanning is triggered via the authorization profile, which can redirect an endpoint to a vulnerability scanner or invoke an assessment as part of the post-authentication enforcement action. Authentication policies and profiles control HOW identity is verified, not WHAT happens after verification, so they don't include vulnerability scan options.
Topics
Community Discussion
No community discussion yet for this question.