What two are measures of posture compliance used by identity and access management systems? (Choose two.)