What Is a Function of Client Provisioning in Cisco ISE?
Short answer
C Client provisioning ensures that endpoints receive the appropriate posture agents, as it delivers agent and supplicant profiles in Cisco ISE.
Question
Key Takeaways
The question tests the boundary between client provisioning and posture condition checks; the trap is selecting a file, dictionary, or application condition that actually belongs to posture policy.
Client provisioning in Cisco ISE distributes posture agents and supplicant profiles to endpoints. This page confirms that ensuring endpoints receive the appropriate posture agents (C) is its function, while file, dictionary, and application checks are posture conditions.
Common mistake: Many learners select A or D, confusing posture conditions—file existence/version checks and running-process checks—with client provisioning, which delivers agents to endpoints.
Expert Analysis
Why the Answer Is Correct
Client provisioning in Cisco ISE is the policy component that supplies endpoints with the software they need before posture can be evaluated. Option C states that it ensures endpoints receive the appropriate posture agents, which matches the purpose of agent profiles for Windows, Mac OS X, and Linux clients, plus native supplicant profiles for personal devices. When a user is redirected to the client provisioning portal, ISE provisions the correct agent or supplicant based on the endpoint's operating system and identity group. Community discussion from evdw reinforces this: enabling client provisioning lets users download client provisioning resources and "configure agent profiles" for multiple operating systems. Without this delivery step, endpoints cannot run the posture agent, so compliance assessment would never occur.
Why the Other Options Are Wrong
Option A describes a file condition in a posture policy, which verifies a file's existence, date, or version on the endpoint. Option B describes a dictionary or registry condition, which checks a specific attribute and value during posture evaluation. Option D describes an application condition, which confirms that a process is running on the endpoint. All three are posture conditions evaluated by the ISE posture service, not functions of client provisioning. They test endpoint state, whereas client provisioning handles the initial distribution of agents and supplicant profiles.
Community Comment Notes
The sole comment, from evdw, emphasizes that client provisioning enables users to download client provisioning resources and to "configure agent profiles" for Windows, Mac OS X, and Linux, along with "native supplicant profiles for personal devices." That directly supports option C and aligns with the official ISE administrative workflow. No comment disputes the answer or proposes A, B, or D as the function of client provisioning.
Exam Strategy
Focus on the ISE workflow: client provisioning precedes posture. If an option describes a condition check on the endpoint, such as a file, dictionary, or application process, it belongs to posture policy rather than to client provisioning.
Frequently Asked Questions
Why is option A considered a posture condition instead of client provisioning?
Does client provisioning install native supplicant profiles on endpoints?
Discussion 1 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 1
-
evdw 👍 1 Answered CEnable client provisioning to allow users to download client provisioning resources and configure agent profiles. You can configure agent profiles for Windows, Mac OS X, and Linux clients, and native supplicant profiles for personal devices.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.