Câu 124: 400-251: CCIE Security Written Exam

ISE can be integrated with an MDM to ensure that only registered devices are allowed on the network, and use the MDM to push policies to the device. Devices can go in and out of compliance, either due to policy changes on the MDM server, or another reason. For a device that has already authenticated on the network, and stays connected, but fails out of compliance, what can be done to ensure that a non-compliant device is checked periodically and re-assessed before allowing access to the network?

1. A. FireAMP connector can be used to relay posture information to ISE via FireAMP cloud. — đáp án hiện tại
2. B. The MDM agent periodically sends a packet with compliance info that the Wireless Controller can be used to limit network access.
3. C. Enable Period Compliance Checking (PCC) on ISE.
4. D. Enable Change of Authorization (CoA) on MDM.
5. E. Enable Change of Authorization (CoA) on ISE.
6. F. The MDM agent will automatically disconnect the device from the network when it is non-compliant.