Which two endpoint compliance statuses are possible? (Choose two.)

Cisco Identity Services Engine (ISE) uses a set of defined statuses to classify an endpoint's compliance state after a posture assessment. The primary statuses are: Compliant: The endpoint meets all mandatory security requirements defined in the posture policy. Non-Compliant: The endpoint fails to meet one or more mandatory requirements. Unknown: The posture assessment process has not yet been initiated or completed for the endpoint. From the options provided, "compliant" and "unknown" are two of the valid, documented endpoint compliance statuses used by Cisco ISE.

B. known: "Known" describes whether an endpoint is registered in the ISE database, not its security posture or compliance state.
C. invalid: This status is not used for posture compliance. It might apply to other contexts like invalid credentials or certificates.
E. valid: This is not a standard ISE posture status. The correct term for an endpoint that passes assessment is "Compliant."

1. Cisco Identity Services Engine Administrator Guide

Release 3.2

"Posture Status of Endpoints". In the section describing endpoint attributes

the "Posture Status" is defined with the possible values: Compliant

Non-Compliant

and Unknown.

2. Cisco Identity Services Engine Administrator Guide

Release 3.1

Chapter: "Reports"

Section: "Posture Assessment by Condition". This section describes a report that filters endpoints based on their posture status

explicitly listing the available statuses as "Compliant"

"Non-Compliant"

and "Unknown".

3. Cisco Identity Services Engine (ISE) Posture Service Prescriptive Deployment Guide

"Posture States". This guide details the posture assessment flow

where endpoints transition between states

including an initial "Unknown" state before assessment and a final "Compliant" or "Non-Compliant" state after assessment.