Free Cisco 300-715 SISE Actual Exam Questions - Question 8 Discussion
and have been reported as stolen in the Cisco ISE My Devices Portal. Which condition must be used
when configuring an authorization policy that sets DenyAccess permission?
C/D? The key here is the device being reported stolen, which aligns with Lost. But I wonder if Reinstate could be involved if they later want to allow access again. Since the question focuses on blocking access, Lost makes more sense as the BYOD state to target in the policy. The Blocklist part definitely fits for denying access. So, C seems like the better match based on stolen device status and being on the blocklist.
Maybe C, since Lost clearly means stolen devices need blocking.
C imo, because Lost is the only BYOD state that clearly indicates a device is reported stolen, making it the right condition to deny access in this case. The others don’t reflect stolen status.
It’s C for sure. Lost means reported stolen, so that matches the scenario perfectly. The other states don’t really reflect a stolen device status.
C, because Lost directly identifies devices reported stolen, no cert needed.
It’s C since Lost clearly flags stolen devices regardless of cert status.
The BYOD state Lost clearly flags devices flagged as stolen, so combining that with Blocklist makes sense. The state Pending wouldn’t capture already stolen devices yet, so B seems off.
A/C? The key is the Blocklist group plus a BYOD state indicating the device is no longer trusted. Lost makes sense for stolen devices, but I wonder if Pending could catch those without certificates since they might not have completed full onboarding. Still, Lost seems more precise for reported stolen devices, so I'd go with C over A.
C, since Lost directly matches stolen status regardless of certificate onboarding.
C/D? If the device is reported stolen, Lost seems right, but Reinstate might be needed if they want to reverse the block later. Still, Lost fits the immediate deny better here.
It’s C, Lost fits stolen status, so denying makes sense here.
C, Lost matches stolen devices status for blocking access properly.
C imo makes the most sense since stolen devices would be marked Lost, so combining Blocklist with Lost ensures those endpoints get denied access.
Option C since stolen devices match Lost BYOD state.