Question

A security engineer must ensure that Windows endpoints connecting through 802.1X are considered compliant only if their installed anti-malware product has virus definitions no older than 3 days. The engineer wants to use a built-in, vendor-aware check that automatically recognizes supported anti-malware vendors and their definition status rather than manually specifying registry keys or file paths. Which posture condition type should the engineer configure in ISE?

Accepted Answer

An Anti-Malware condition that checks the definition file age against the selected vendor and product

Answer

A Compound condition combining File and Registry conditions that reference the anti-malware executable

Answer

A Service condition that verifies the anti-malware service is running on the endpoint

Answer

A Dictionary Simple condition matching the endpoint's posture status attribute