- (Exam Topic 1)
An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

1. A. Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.
2. B. Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.
3. C. Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.
4. D. Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.
5. E. Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

Correct Answer: AC
A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.

- (Exam Topic 3)
Which Cisco security solution determines if an endpoint has the latest OS updates and patches installed on the system?

1. A. Cisco Endpoint Security Analytics
2. B. Cisco AMP for Endpoints
3. C. Endpoint Compliance Scanner
4. D. Security Posture Assessment Service

Correct Answer: A

- (Exam Topic 3)
What provides total management for mobile and PC including managing inventory and device tracking, remote view, and live troubleshooting using the included native remote desktop support?

1. A. mobile device management
2. B. mobile content management
3. C. mobile application management
4. D. mobile access management

Correct Answer: A

- (Exam Topic 3)
Which solution allows an administrator to provision, monitor, and secure mobile devices on Windows and Mac computers from a centralized dashboard?

1. A. Cisco Umbrella
2. B. Cisco AMP for Endpoints
3. C. Cisco ISE
4. D. Cisco Stealthwatch

Correct Answer: C

- (Exam Topic 2)
Refer to the exhibit.

Which type of authentication is in use?

1. A. LDAP authentication for Microsoft Outlook
2. B. POP3 authentication
3. C. SMTP relay server authentication
4. D. external user and relay mail authentication

Correct Answer: A
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118844-technoteesa-00.htmlThe exhibit in this Qshows a successful TLS connection from the remote host (reception) in the mail log.