350-701 Question #742: Real Exam Question with Answer & Explanation

The correct answer is B. posture service. The Cisco ISE posture service is responsible for assessing the security state and compliance of endpoints connecting to the network against corporate security policies.

Submitted by suresh_in· Mar 30, 2026

Question

Which Cisco ISE service checks the state of all the endpoints connecting to a network for compliance with corporate security policies?

Options

AThreat Centric NAC service
Bposture service
CCisco TrustSec
Dcompliance module

Explanation

The Cisco ISE posture service is responsible for assessing the security state and compliance of endpoints connecting to the network against corporate security policies.

Common mistakes.

A. Threat Centric NAC (TC-NAC) integrates ISE with threat intelligence to dynamically adapt access policies based on identified threats, but the core function of checking an endpoint's state for compliance is the posture service's role.
C. Cisco TrustSec is a framework that uses Security Group Tags (SGTs) for role-based access control and network segmentation, not for checking the internal security posture of individual endpoints.
D. 'Compliance module' is a general term; the specific, named service within Cisco ISE that performs endpoint compliance checks is the posture service.

Concept tested. Cisco ISE posture assessment

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_0100.html

Topics

#Cisco ISE#Endpoint compliance#Posture service

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice