5.3 Describe Endpoint Posture Assessment Solutions to Ensure Endpoint Security 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security administrator is configuring posture assessment for a mixed environment of Windows and Linux endpoints. The posture policy must check for the presence of a specific file on both OS types. Which ISE posture condition type should be used?

   • AApplication condition
   • BRegistry condition
   • CFile condition
   • DService condition
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company deploys Cisco AnyConnect with posture assessment for remote workers. The security team notices that some endpoints are reported as non-compliant because the posture agent cannot read the antivirus version. The endpoints are macOS devices with a third-party AV product. What is the most likely cause of this issue?

   • AThe posture policy does not have a macOS-specific compliance module for that AV product
   • BThe endpoints are not joined to the Active Directory domain
   • CThe endpoints are using a different DNS server than the corporate DNS
   • DThe AnyConnect VPN tunnel is not established before posture runs
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A global company uses ISE for posture assessment. They have offices in multiple countries with different data privacy regulations. The security team wants to ensure that posture data collected from endpoints in the EU is processed and stored within the EU. What is the most important consideration?

   • ADeploy an ISE node in the EU and configure it as the posture server for EU endpoints
   • BUse a single ISE deployment in the US and route all posture data there
   • CUse agentless posture for EU endpoints to avoid data collection
   • DDisable posture assessment for EU endpoints
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A university uses ISE for wired NAC. During peak registration periods, many students connect their laptops simultaneously. The security team notices that posture assessment is causing significant delays in network access. They need to reduce the time to access while still enforcing posture for known devices. What is the most effective approach?

   • AIncrease the posture assessment timeout to allow more time for scans
   • BDisable posture assessment for all devices during peak hours
   • CUse a more aggressive posture scan that checks fewer attributes
   • DEnable posture assessment only for new or unknown devices and skip it for previously compliant devices
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A financial firm uses ISE for both wired and wireless NAC. They are planning to deploy posture assessment for all endpoints. The compliance team requires that endpoints be checked for antivirus status and disk encryption. However, the firm also has a bring-your-own-device (BYOD) policy that allows personal smartphones and tablets to connect to the guest Wi-Fi. The security team wants to enforce posture on corporate devices but not on BYOD devices. What is the most effective way to achieve this?

   • ACreate separate ISE authorization policies for corporate and BYOD device groups
   • BApply posture assessment to all devices and block non-compliant BYOD devices
   • CUse the same posture policy for all devices but only log non-compliance
   • DDisable posture assessment for all wireless networks
   Reveal Solution Discussion Select an answer first