350-701 · Question #742
Which Cisco ISE service checks the state of all the endpoints connecting to a network for compliance with corporate security policies?
The correct answer is B. posture service. The Cisco ISE posture service is responsible for assessing the security state and compliance of endpoints connecting to the network against corporate security policies.
Question
Which Cisco ISE service checks the state of all the endpoints connecting to a network for compliance with corporate security policies?
Options
- AThreat Centric NAC service
- Bposture service
- CCisco TrustSec
- Dcompliance module
How the community answered
(45 responses)- A4% (2)
- B93% (42)
- C2% (1)
Why each option
The Cisco ISE posture service is responsible for assessing the security state and compliance of endpoints connecting to the network against corporate security policies.
Threat Centric NAC (TC-NAC) integrates ISE with threat intelligence to dynamically adapt access policies based on identified threats, but the core function of checking an endpoint's *state* for *compliance* is the posture service's role.
The posture service within Cisco Identity Services Engine (ISE) specifically evaluates endpoints for compliance with predefined corporate security policies, checking attributes like OS patch levels, antivirus status, or installed applications before granting appropriate network access.
Cisco TrustSec is a framework that uses Security Group Tags (SGTs) for role-based access control and network segmentation, not for checking the internal security posture of individual endpoints.
'Compliance module' is a general term; the specific, named service within Cisco ISE that performs endpoint compliance checks is the posture service.
Concept tested: Cisco ISE posture assessment
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_0100.html
Topics
Community Discussion
No community discussion yet for this question.