Question 580
An ISE administrator troubleshoots the following: A post-login client waits indefinitely for a posture result and the helpdesk immediately changes user passwords without inspecting the posture service path. What is the most appropriate next configuration or repair?
Explanation
Correct Answer
Inspect client provisioning, posture agent communication, and PSN reachability while preserving valid authentication credentials. This is appropriate because the posture assessment stage may fail independently after a successful RADIUS identity authentication. It should be verified by this evidence: The test client reports a completed posture state once agent and PSN communication is restored, with password validation unchanged.
Incorrect Answers
Authentication verifies an identity, while posture measures endpoint compliance against configured health requirements. The repeat risk here is different: a device missing the mandated OS update fails its relevant condition despite having an approved antivirus product. A directly relevant preventive control is: Inspect client provisioning, posture agent communication, and PSN reachability while preserving valid authentication credentials.
Posture service capabilities differ by endpoint type and available probes; a desktop software module is not universally deployable. The repeat risk here is different: a device missing the mandated OS update fails its relevant condition despite having an approved antivirus product. A directly relevant preventive control is: Inspect client provisioning, posture agent communication, and PSN reachability while preserving valid authentication credentials.
The pilot laptop downloads the intended module, installs it, and completes the configured posture checks. The repeat risk here is different: a device missing the mandated OS update fails its relevant condition despite having an approved antivirus product. A directly relevant preventive control is: Inspect client provisioning, posture agent communication, and PSN reachability while preserving valid authentication credentials.