350-701 Practice Question: Secure Network Access, Visibility and Enforcement
A company uses Cisco ISE for posture assessment. They require that all endpoints meet a certain set of compliance rules before being granted network access. Which service is responsible for performing the posture assessment on the endpoint?
⚠ Common exam trap
Cisco often tests the distinction between the server-side policy evaluation (ISE Policy Service) and the client-side agent (AnyConnect Posture Module) that performs the actual endpoint scan, leading candidates to incorrectly select the Policy Service.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco AnyConnect ISE Posture Module
The Cisco AnyConnect ISE Posture Module is the client-side software agent installed on the endpoint that performs the actual posture assessment. It collects compliance information such as OS patch level, antivirus status, and running processes, then reports this data to the ISE Policy Service for evaluation. Without this module running on the endpoint, ISE cannot perform a posture check.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ISE Policy Service
Why it's wrong here
ISE Policy Service evaluates posture results but does not perform the assessment on the endpoint.
- ✓
Cisco AnyConnect ISE Posture Module
Why this is correct
The AnyConnect Posture Module runs on the endpoint and performs the actual posture checks.
- ✗
Cisco ISE pxGrid
Why it's wrong here
pxGrid is for integration and data sharing, not posture assessment.
- ✗
Network Access Device (switch)
Why it's wrong here
The switch only facilitates authentication and does not perform posture assessment.
Go deeper
Related to this question
About these practice questions
One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.