Question

A security engineer must ensure that all corporate Windows endpoints have their patch management software installed and reporting that no critical patches are missing before granting full network access. The engineer wants ISE to natively validate this state rather than checking for a specific file or registry key. Which posture condition type should be used?

Accepted Answer

Patch Management Condition, checking installation status and up-to-date patch compliance

Answer

File Condition verifying the last-modified date of the patch installer executable

Answer

Registry Condition verifying the version value under the patch agent's registry hive

Answer

Service Condition verifying the patch management service is running