Question

A security architect is designing a Cisco ISE deployment for a corporate campus. Management wants assurance that any Windows laptop connecting to the internal network is running an approved antivirus product with up-to-date definitions and has the corporate disk-encryption agent installed BEFORE the device is granted access to sensitive VLANs. Which ISE capability directly delivers this requirement?

Accepted Answer

Posture assessment, which evaluates endpoint health against a compliance policy and controls access based on the result

Answer

Profiling, which uses probes to classify the endpoint device type and operating system

Answer

MAC Authentication Bypass, which authenticates devices that lack an 802.1X supplicant

Answer

Guest services, which provide self-registration portals for visitor devices