the risk of this ransom ware infection?

An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patchwas not installed, which left the endpoint vulnerable to WannaCry ransomware.

Which two solutions mitigate

the risk of this ransom ware infection? (Choose two)
A . Configure a posture policy in Cisco Identity Services Engine to install the MS17-010 patch before allowingaccess on the network.
B. Set up a profiling policy in Cisco Identity Service Engine to check and endpoint patch level before allowingaccess on the network.
C. Configure a posture policy in Cisco Identity Services Engine to check that an endpoint patch level is metbefore allowing access on the network.
D. Configure endpoint firewall policies to stop the exploit traffic from being allowed to run and replicate
throughout the network.
E. Set up a well-defined endpoint patching strategy to ensure that endpoints have critical vulnerabilities patched in a timely fashion.

View Answer

Answer: A, C

Explanation:

A posture policy is a collection of posture requirements, which are associated with one or more identity groups, and operating systems. We can configure ISE to check for the Windows patch at Work Centers > Posture > Posture Elements > Conditions > File.

In this example, we are going to use the predefined file check to ensure that our Windows 10 clients have the critical security patch installed to prevent the Wanna Cry malware.