350-701 · Question #470
Which feature within Cisco ISE verifies the compliance of an endpoint before providing access to the network?
The correct answer is A. Posture. Cisco ISE's Posture feature is responsible for evaluating the compliance of an endpoint against defined policies before granting network access.
Question
Which feature within Cisco ISE verifies the compliance of an endpoint before providing access to the network?
Options
- APosture
- BProfiling
- CpxGrid
- DMAB
How the community answered
(35 responses)- A89% (31)
- B3% (1)
- C3% (1)
- D6% (2)
Why each option
Cisco ISE's Posture feature is responsible for evaluating the compliance of an endpoint against defined policies before granting network access.
Cisco ISE's Posture service assesses the compliance of an endpoint by checking its attributes, such as operating system patches, antivirus status, and other security settings, against predefined policies. Based on this compliance check, ISE determines whether to grant, restrict, or deny network access to the endpoint.
Profiling in Cisco ISE identifies and categorizes endpoints based on their network traffic and attributes, but it does not verify their security compliance.
pxGrid (Platform Exchange Grid) is a Cisco technology for sharing contextual information between various security products, not for performing endpoint compliance checks.
MAB (MAC Authentication Bypass) allows devices without 802.1X supplicants to authenticate using their MAC address, not to verify endpoint compliance.
Concept tested: Cisco ISE endpoint posture assessment
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_0110.html
Topics
Community Discussion
No community discussion yet for this question.