How should I use these Endpoint Compliance practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Endpoint Compliance questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Endpoint Compliance domain.

SISE · topic practice

Endpoint Compliance practice questions

Practise Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) Endpoint Compliance practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Endpoint Compliance

Practice 10 questions Browse domain →

What the exam tests

What to know about Endpoint Compliance

IPv6 questions usually test address types (link-local, global unicast, ULA), autoconfiguration (SLAAC), Neighbor Discovery Protocol and the differences from IPv4.

IPv6 address types and their scopes (link-local, global unicast, multicast, ULA).

SLAAC vs DHCPv6 vs stateful assignment.

Neighbor Discovery Protocol replacing ARP.

IPv6 routing differences and dual-stack coexistence.

Watch out for

Common Endpoint Compliance exam traps

▸Link-local addresses are not routable beyond the local link.
▸SLAAC uses EUI-64 or random interface IDs — not a DHCP server.
▸NDP uses ICMPv6, not ARP.
▸An IPv6 prefix is /64 for most host subnets, not /24.

Practice set

Endpoint Compliance questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice

Read the full Endpoint Compliance explanation →

A user is unable to pass posture assessment because the 'AnyConnect Compliance Module' is not detecting the antivirus software. Which log file on the endpoint should be reviewed to troubleshoot the compliance module's scanning logic?

Trap 1: NAC Agent Log (nac_agent.log)

The NAC Agent is legacy; the question specifies the AnyConnect Compliance Module.

Trap 2: Windows Event Viewer - Application Log

While some errors appear here, the detailed scanning logic is in the AnyConnect directory.

Trap 3: ISE Posture Log (ise_posture.log)

This log is on the ISE server, not the client endpoint.

Study all Endpoint Compliance common traps →

A
NAC Agent Log (nac_agent.log)
Why wrong: The NAC Agent is legacy; the question specifies the AnyConnect Compliance Module.
B
Windows Event Viewer - Application Log
Why wrong: While some errors appear here, the detailed scanning logic is in the AnyConnect directory.
C
AnyConnect Compliance Module log (ac_ise_posture.log)
This is the primary log file on the Windows endpoint for troubleshooting compliance agent scan results.
D
ISE Posture Log (ise_posture.log)
Why wrong: This log is on the ISE server, not the client endpoint.

Endpoint Compliance practice questions

What to know about Endpoint Compliance

Common Endpoint Compliance exam traps

Endpoint Compliance questions

A user is unable to pass posture assessment because the 'AnyConnect Compliance Module' is not detecting the antivirus software. Which log file on the endpoint should be reviewed to troubleshoot the compliance module's scanning logic?

What is the primary function of the 'Monitor Mode' in Cisco ISE Posture policies?

When configuring an AnyConnect Posture Policy, which option allows the administrator to force the agent to perform a scan regardless of the current posture status?

Which protocol is used by the AnyConnect agent to communicate posture information to the ISE Policy Service Node (PSN)?

Where do you upload the AnyConnect posture agent packages to make them available for Client Provisioning?

You are configuring a posture policy for Windows endpoints. Which component must be configured to provide users with a link to download the required compliance software if the posture check fails?

You need to create a posture condition to verify that the 'Cisco AnyConnect' service is running. Which condition type should you select?

An administrator needs to ensure that only endpoints with a specific registry key present are allowed access. Where should this posture condition be defined in Cisco ISE?

Which of the following is a valid remediation action type in Cisco ISE?

Which component is responsible for triggering the posture assessment process when a user connects to the network?

When configuring an 'Application Condition' to check for a specific version of an application, which operator is required to ensure the version is at least '10.5.0'?

Which menu path allows you to view the posture compliance status of all endpoints?

In a posture flow, what happens if an endpoint is determined to be 'Non-Compliant' but no remediation action is configured?

You need to ensure that the AnyConnect posture agent is updated automatically. Where is this configured?

A user is compliant, but ISE still classifies the device as 'Unknown'. What is the most likely cause?

When using AnyConnect as the posture agent, how can you prevent users from disabling the posture service?

During a troubleshooting session, you notice that the AnyConnect agent is not receiving the posture policy. Which log file on the ISE Policy Service Node (PSN) should you examine?

Which of the following is required for AnyConnect to perform posture assessment on a Mac endpoint?

What is the purpose of the 'Posture Discovery' phase?

Which posture condition should be used to ensure a specific Windows patch (KB number) is installed?

Track your progress over time

Start a Endpoint Compliance only practice session

Related SISE topic practice pages

Network Access Device Administration practice questions

BYOD practice questions

Endpoint Compliance practice questions

Web Auth And Guest Services practice questions

Profiler practice questions

Policy Enforcement practice questions

Architecture And Deployment practice questions

SISE fundamentals practice questions

SISE scenario practice questions

SISE troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid