Which two endpoint compliance statuses are possible? (Choose two.)

1. A. unknown
2. B. known
3. C. invalid
4. D. compliant
5. E. valid

Correct Answer: AD

A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

1. A. Keep track of guest user activities
2. B. Configure authorization settings for guest users
3. C. Create and manage guest user accounts
4. D. Authenticate guest users to Cisco ISE

Correct Answer: C

Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

1. A. personas
2. B. qualys
3. C. nexpose
4. D. posture

Correct Answer: D
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide Posture is a service in Cisco Identity Services Engine (Cisco ISE) that allows you to check the state, also known as posture, of all the endpoints that are connecting to a network for compliance with corporate security policies. This allows you to control clients to access protected areas of a network.

What must match between Cisco ISE and the network access device to successfully authenticate endpoints?

1. A. SNMP version
2. B. shared secret
3. C. certificate
4. D. profile

Correct Answer: B
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html

When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition. However, other groups that are in the same domain are seen What is causing this issue?

1. A. Cisco ISE only sees the built-in groups, not user created ones
2. B. The groups are present but need to be manually typed as conditions
3. C. Cisco ISE's connection to the AD join point is failing
4. D. The groups are not added to Cisco ISE under the AD join point

Correct Answer: D
https://www.youtube.com/watch?v=0kuEZEo564s&ab_channel=CiscoISE-IdentityServicesEngine