An engineer used a posture check on a Microsoft Windows endpoint and discovered that the MS17-010 patch was not installed, which left the endpoint vulnerable to WannaCry ransomware. Which two solution

Cisco Identity Services Engine (ISE) posture policies can be configured not only to detect missing patches like MS17-010 but also to automatically initiate or enforce the installation of these patches, thereby remediating the vulnerability before granting network access.

Profiling in Cisco ISE identifies and categorizes endpoints based on various attributes but is not used to check for specific patch levels or to initiate patch installation for posture compliance.

A Cisco Identity Services Engine (ISE) posture policy can be configured to check that an endpoint has the required MS17-010 patch installed as a condition for determining its compliance and eligibility for network access.

While endpoint firewall policies can help prevent the spread or execution of exploit traffic post-compromise, they do not directly address or remediate the root vulnerability of a missing patch.

Setting up a well-defined endpoint patching strategy is a good overall practice but does not represent a specific, immediate technical solution using Cisco products to mitigate the discovered vulnerability as the other options do.