A company wants to enforce that all Windows endpoints have a specific registry key set and that the antivirus is running. They have created a posture policy that includes these checks. However, they notice that some endpoints are marked as compliant even though the antivirus is not running. What is the most likely cause?

The posture condition for the antivirus is not configured correctly or is not included in the posture policy.

The endpoints are running a different version of Windows that is not supported by the posture agent.

The network access profile is not assigned to the posture policy.

The posture agent is not installed on those endpoints.

An administrator is configuring Cisco ISE to deploy the AnyConnect posture agent to Windows endpoints. They want to ensure that the agent is automatically updated when a new version is available. What should the administrator configure?

Create a posture condition that checks for the latest agent version.

Configure the agent profile in client provisioning to allow automatic updates.

Use the ISE admin portal to manually push the agent to all endpoints.

Set up a remediation action to download and install the new agent.

A company has two groups of users: employees and contractors. They want to apply different posture requirements: employees must have antivirus and the latest patches, while contractors only need antivirus. How should the administrator configure Cisco ISE to achieve this?

Configure a remediation action that only applies to contractors.

Create two separate posture policies, each with its own conditions, and assign them based on user identity or group.

Create a single posture policy with both conditions and apply it to all users.

Use client provisioning to deliver different agents to each group.

A hospital wants to ensure that all devices connecting to their network, including guest devices, are checked for compliance before being granted access. They plan to use Cisco ISE posture assessment. What is the first step in the posture assessment workflow that must occur for a device to be assessed?

The device must be registered in the guest portal.

The device must authenticate and be authorized by ISE, which triggers the posture assessment.

The device must be provisioned with the AnyConnect agent via client provisioning.

The device must be assigned a posture policy.

CCIE Security

Domain 4Objective 9

4.9 Posture Assessment with Cisco ISE CCIE-SECURITY Practice Questions (Page 11)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

8concepts

25%of the exam

Questions 51–54

51application · medium
A company wants to enforce that all Windows endpoints have a specific registry key set and that the antivirus is running. They have created a posture policy that includes these checks. However, they notice that some endpoints are marked as compliant even though the antivirus is not running. What is the most likely cause?
Select an answer first
52application · medium
An administrator is configuring Cisco ISE to deploy the AnyConnect posture agent to Windows endpoints. They want to ensure that the agent is automatically updated when a new version is available. What should the administrator configure?
Select an answer first
53application · medium
A company has two groups of users: employees and contractors. They want to apply different posture requirements: employees must have antivirus and the latest patches, while contractors only need antivirus. How should the administrator configure Cisco ISE to achieve this?
Select an answer first
54application · medium
A hospital wants to ensure that all devices connecting to their network, including guest devices, are checked for compliance before being granted access. They plan to use Cisco ISE posture assessment. What is the first step in the posture assessment workflow that must occur for a device to be assessed?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

4.9 Posture Assessment with Cisco ISE CCIE-SECURITY Practice Questions (Page 11)

Questions 51–54

An administrator is configuring Cisco ISE to deploy the AnyConnect posture agent to Windows endpoints. They want to ensure that the agent is automatically updated when a new version is available. What should the administrator configure?

A company has two groups of users: employees and contractors. They want to apply different posture requirements: employees must have antivirus and the latest patches, while contractors only need antivirus. How should the administrator configure Cisco ISE to achieve this?

Keep studying — 4.0 Identity Management, Information Exchange, and Access Control