Which two configurations must be made on Cisco ISE and on Cisco TrustSec devices to force a session to be adjusted after a policy change is made? (Choose two)

Posture assessment is a method to evaluate an endpoint's compliance with security policies, but it doesn't directly force session adjustment *after* a policy change, although a change in posture could trigger a CoA.

`aaa authorization exec default local` configures local authorization for exec mode and is not related to dynamic session adjustments from ISE.

`tacacs-server host 10.1.1.250 key password` configures a TACACS+ server, but the question implies RADIUS-based dynamic authorization (CoA) used by ISE for session adjustment, not TACACS+.

`aaa server radius dynamic-author` must be configured on the Cisco TrustSec enforcement device (e.g., switch) to enable it to receive Change of Authorization (CoA) messages from Cisco ISE. E. Change of Authorization (CoA) is the mechanism used by Cisco ISE to send real-time updates to the network device, forcing a re-evaluation or termination of an active session when a policy change occurs without requiring the user to re-authenticate.