Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 260

Which two Cisco ISE components enforce security policies on noncompliant endpoints by blocking network access? (Choose two.)

Answer options

• A. Apex licensing
• B. TACACS+
• C. profiling
• D. DHCP and SNMP probes
• E. posture agents

Correct answer: C, E

Explanation

The correct answers, C and E, are profiling and posture agents, as they are specifically designed to assess endpoint compliance and enforce policies. The other options do not directly block network access; for example, TACACS+ is primarily for authentication, and Apex licensing pertains to licensing management.