An architect receives a functional requirement for a NAC system from a customer security policy...

A (Posture assessment with remediation VLAN):Posture assessment checks endpoint compliance (such as AV definitions). Non-compliant devices are placed into a remediation VLAN where they can update before regaining normal network access.

Other options explained:

B: SGTs provide segmentation but are not posture-specific.

C: dACLs with SGTs handle policy enforcement, but posture control is required for AV compliance.

D: Quarantine VLAN isolates devices but doesn’t automate remediation.