Question

A security engineer must enforce that all corporate Windows endpoints have both a specific antivirus definition file present AND a particular registry key set to a required value before granting full network access. Neither condition alone is sufficient — both must be true simultaneously. Which ISE posture configuration approach correctly implements this requirement?

Accepted Answer

Create a File Condition and a Registry Condition, then combine them in a Compound Condition using an AND operator, and reference that compound condition in the posture requirement

Answer

Create two separate posture requirements, each mapped to its own remediation action, and place both in the same posture policy row

Answer

Create a single File Condition that also validates the registry value using the file's metadata attributes

Answer

Configure an Application Condition referencing the antivirus, which automatically validates the associated registry keys