CCIE Security
Domain 4Objective 9
4.9 Posture Assessment with Cisco ISE CCIE-SECURITY Practice Questions (Page 9)
Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)
54questions here
11free pages
8concepts
25%of the exam
Questions 41–45
- 41
An organization is deploying Cisco ISE for both corporate and BYOD devices. They want to use client provisioning to deliver the AnyConnect posture agent to corporate devices, but for BYOD devices, they want to use a web-based posture assessment that does not require an agent. What should the administrator configure?
Select an answer first - 42
A security administrator is troubleshooting a posture assessment failure for a user. The user's endpoint is running Windows 10 and the AnyConnect agent is installed. The ISE logs show that the posture assessment timed out. What is the most likely cause of this timeout?
Select an answer first - 43
A company has a posture policy that checks for the presence of a specific software application. The check works for Windows endpoints, but it is not working for Mac endpoints. The administrator has verified that the application is installed on the Mac. What is the most likely reason for the check failing on Mac?
Select an answer first - 44
An administrator is configuring a remediation action for non-compliant endpoints. The requirement is that non-compliant endpoints should be able to access only the remediation portal and the internet, but not internal resources. The administrator has created an ACL that permits access to the remediation portal and denies access to internal subnets. However, users are still able to access internal resources. What is the most likely cause?
Select an answer first - 45
A company is deploying Cisco ISE posture assessment and wants to use the AnyConnect posture agent. They have a mix of Windows and Mac endpoints. They want to ensure that the agent is automatically installed on both platforms without user intervention. What should the administrator configure?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.