350-701 Certification Exam Questions with AI Explanations

QUESTION: 91 Exam Topic: 1, Exam Pool A

Which ID store requires that a shadow user be created on Cisco ISE for the admin login to work?

RSA SecureID
Internal Database
Active Directory
LDAP

Answer(s): C

QUESTION: 92 Exam Topic: 1, Exam Pool A

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17- 010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware.
Which two solutions mitigate the risk of this ransom ware infection? (Choose two)

Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowing access on the network.
Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowing access on the network.
Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is met before allowing access on the network.
Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate throughout the network.
Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

Answer(s): A,C

Explanation:

A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File. In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.