Which tow features are part of Cisco identity Services Engine? (Choose two)

Secure remote access via VPN is handled by Cisco AnyConnect paired with ASA or Firepower headends; ISE provides posture assessment for remote sessions but is not the access solution itself.

Guest access management is a primary ISE capability, providing customizable guest portals, sponsor-based approval workflows, and full guest lifecycle management for temporary network users.

SSL decryption is a function of next-generation firewalls such as Cisco Firepower Threat Defense, not a capability provided natively by ISE.

Cisco ISE provides application visibility and control by integrating with Cisco's TrustSec and pxGrid ecosystem, enabling application-aware policy enforcement across the network based on user and device context.

Device profiling, while associated with ISE in some contexts, is not one of the two features this question identifies as primary ISE capabilities; the focus here is on guest access and application-aware policy enforcement.

File-type blocking is a threat defense feature associated with Cisco Firepower and Cisco Secure Malware Analytics (AMP), not part of ISE's identity and access control feature set.