Discuss Cisco 300-715 Exam Topic 10 Question 98

An administrator must block access to BYOD endpoints that were onboarded without a certificate and have been reported as stolen in the Cisco ISE My Devices Portal. Which condition must be used when configuring an authorization policy that sets DenyAccess permission?

AEndpoint Identity Group is Blocklist, and the BYOD state is Registered.

BEndpoint Identify Group is Blocklist, and the BYOD state is Pending.

CEndpoint Identity Group is Blocklist, and the BYOD state is Lost.

DEndpoint Identity Group is Blocklist, and the BYOD state is Reinstate.

Suggested Answer: A

https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_byod.html

Get Premium 300-715 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

36 comments · newest first

Vivan 11 months ago

Agreed with C, Lost is a clear indicator for DenyAccess.

Felix 11 months ago

B is a no-go, Pending shouldn't be blocked like that.

Amie 11 months ago

Wait, can we really block devices just based on the identity group?

Junita 11 months ago

I think A makes more sense, Registered should be blocked too.

Filiberto 12 months ago

Definitely C, Lost is the right state for stolen devices.

Melinda 12 months ago

I keep mixing up the states, but "Blocklist" definitely sounds right for stolen devices. Maybe it's C?

Ciara 1 year ago

I practiced a similar question, and I feel like "Pending" doesn't really fit the context of blocking access.

Renea 1 year ago

I'm not entirely sure, but I remember something about the BYOD state needing to be "Registered" for access.

Ligia 1 year ago

I think the answer might be C, since "Lost" seems to directly relate to stolen devices.

Rupert 1 year ago

This seems straightforward to me. The question is asking for the condition that must be used to set the DenyAccess permission, and option C clearly matches that requirement.

Karan 1 year ago

I'm not entirely sure about this one. I'll need to think it through step-by-step and make sure I'm considering all the details in the question.

Patria 1 year ago

Okay, I think I've got this. The key is that the endpoints need to be in the Blocklist Endpoint Identity Group and have a BYOD state of Lost. I'm confident that option C is the correct answer.

Tegan 1 year ago

Hmm, I'm a bit confused by the BYOD state options. I'll need to review my notes on the Cisco ISE My Devices Portal to make sure I understand the different states.

Julian 1 year ago

This looks like a tricky one. I'll need to carefully read through the options and think about the specific conditions mentioned.

Erasmo 1 year ago

I'm a little confused by the wording of this question. What exactly is a "symmetric key block cipher"? I know the basics of encryption, but the technical terms are throwing me off. I'll have to review my notes before answering this one.

Solange 2 years ago

C) Endpoint Identity Group is Blocklist, and the BYOD state is Lost. Lost and found, but mostly just lost in this IT maze.

Nikita 2 years ago

B) Endpoint Identify Group is Blocklist, and the BYOD state is Pending. Ah, the classic 'pending' state for a stolen device. Classic move, IT admin.

Elfrieda 2 years ago

↳ replying to Nikita

C) Endpoint Identity Group is Blocklist, and the BYOD state is Lost.

Staci 2 years ago

↳ replying to Nikita

B) Endpoint Identify Group is Blocklist, and the BYOD state is Pending. Yes, it's important to block access to stolen devices.

Ettie 2 years ago

↳ replying to Nikita

User 3

Markus 2 years ago

↳ replying to Nikita

A) Endpoint Identity Group is Blocklist, and the BYOD state is Pending.

Rickie 2 years ago

↳ replying to Nikita

User 2

Ceola 2 years ago

↳ replying to Nikita

User 1

Gail 2 years ago

A) Endpoint Identity Group is Blocklist, and the BYOD state is Registered. Registered? No, we want to block access, not grant it!

Yoko 2 years ago

D) Endpoint Identity Group is Blocklist, and the BYOD state is Reinstate. Wait, why would we reinstate access to a stolen device? That doesn't make sense.

Ngoc 2 years ago

C) Endpoint Identity Group is Blocklist, and the BYOD state is Lost. This seems like the most logical choice to block access to stolen BYOD devices.

Kris 2 years ago

↳ replying to Ngoc

D) That makes sense. It's important to secure the network from potentially compromised devices.

Carrol 2 years ago

↳ replying to Ngoc

C) Yes, because if the device is reported as Lost, it should definitely be blocked.

Elin 2 years ago

↳ replying to Ngoc

B) Are you sure that's the correct condition to use for blocking access to stolen BYOD devices?

Patria 2 years ago

↳ replying to Ngoc

Yes, that option makes sense. It ensures that stolen devices are denied access.

Rodrigo 2 years ago

↳ replying to Ngoc

A) Endpoint Identity Group is Blocklist, and the BYOD state is Lost.

Phillip 2 years ago

↳ replying to Ngoc

C) Endpoint Identity Group is Blocklist, and the BYOD state is Lost.

Jaime 2 years ago

↳ replying to Ngoc

A) Endpoint Identity Group is Blocklist, and the BYOD state is Lost.

Desmond 2 years ago

I'm not sure, but I think it makes sense to deny access to stolen devices. So, C) seems like the right choice.

Krissy 2 years ago

I agree with Alesia. If the device is reported as stolen, it should be in the Lost state.

Alesia 2 years ago

I think the answer is C) Endpoint Identity Group is Blocklist, and the BYOD state is Lost.

Cisco 300-715 Exam - Topic 10 Question 98 Discussion