5.3 Describe Endpoint Posture Assessment Solutions to Ensure Endpoint Security 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a common remediation action for a non-compliant endpoint?

   • AIgnoring the non-compliance and allowing access
   • BRedirecting the endpoint to a quarantine network
   • CPermanently blocking the endpoint from ever accessing the network
   • DGranting the endpoint full network access to encourage compliance
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A user's laptop fails posture assessment because the host firewall is off. The posture policy is configured to require the firewall to be enabled. The user is placed in a remediation network. What is the expected user experience to become compliant?

   • AISE automatically enables the firewall on the endpoint
   • BThe user is granted full access after a waiting period
   • CThe user must reboot the laptop to clear the posture failure
   • DThe user must manually enable the firewall and then re-run the posture assessment
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does endpoint posture assessment enhance VPN security?

   • AIt monitors VPN traffic for malware after the connection is established
   • BIt encrypts the VPN traffic with stronger algorithms
   • CIt ensures that only compliant endpoints can establish a VPN connection
   • DIt speeds up the VPN connection by compressing data
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which Cisco technology is commonly used as an agent for endpoint posture assessment?

   • ACisco Umbrella
   • BCisco Catalyst Switch
   • CCisco AnyConnect
   • DCisco Firepower Threat Defense (FTD)
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An endpoint is assessed by ISE and found to have an outdated operating system. The posture policy is set to 'Mandatory' for this condition. What is the immediate enforcement action taken by ISE?

   • AThe endpoint is disconnected from the network immediately
   • BThe endpoint is allowed access but logged for auditing
   • CThe endpoint is placed in a quarantine network with limited access
   • DThe endpoint is granted full access with a warning message
   Reveal Solution Discussion Select an answer first