350-701 · Question #4
For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two.)
The correct answer is B. Windows service D. Windows firewall. Cisco ISE posture assessment checks endpoint compliance by evaluating specific system conditions like running services and firewall status.
Question
For which two conditions can an endpoint be checked using ISE posture assessment? (Choose two.)
Exhibit
Options
- Acomputer identity
- BWindows service
- Cuser identity
- DWindows firewall
- Edefault browser
How the community answered
(23 responses)- B96% (22)
- C4% (1)
Why each option
Cisco ISE posture assessment checks endpoint compliance by evaluating specific system conditions like running services and firewall status.
Computer identity is typically used for authentication and device classification, not for assessing an endpoint's posture compliance against security policies.
Cisco ISE posture assessment evaluates the health and compliance of an endpoint by checking various attributes, including the status of specific Windows services to ensure critical security processes are running.
User identity is used for authenticating the user accessing the network, not for evaluating the security posture or health of the endpoint itself.
Posture assessment also verifies the configuration and operational status of the Windows firewall, ensuring it adheres to defined security policies before granting network access.
The default browser setting is generally not considered a critical security posture requirement that ISE would typically assess for network access decisions.
Concept tested: ISE endpoint posture assessment conditions
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ISE_admin_guide_27/b_ISE_admin_guide_27_chapter_0100.html#reference_039943B880324838B6DA9E7D0C08D0E3
Topics
Community Discussion
No community discussion yet for this question.
