QuestionQ60

Define Onboard Provisioning and Posture Attribute Enforcement

A network administrator is configuring a corporate network-enforcement policy. The policy contains rules for corporate-issued laptops, MDM-enabled tablets, and personal smart devices. However, the administrator finds that some clients fail every rule because they lack profile data.

What should the administrator do, following best practices, to ensure these unprofiled clients can access the profiler collectors and receive a profile?

  • A Add a rule that identifies clients without profiles and assigns them a role allowing limited access to the profiler.
  • B Increase the frequency of profile data updates from the endpoint profiler.
  • C Set the default enforcement profile to ‘Allow Access’ for all unprofiled clients.
Explanation

Unprofiled endpoints require a catch-all enforcement rule that assigns a least-privilege role with only the access needed to communicate with the profiler collectors. This enables profiling while avoiding the security risk of granting all unprofiled clients unrestricted network access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!