Secure User Access to Published Resources CCP-V-CURRENT Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   An organization is implementing MFA for all users accessing published resources. They have a group of users who frequently travel to areas with poor cellular coverage. The security team wants to ensure these users can still authenticate without being locked out. Which MFA method should be configured for this group?

   • AHardware token that generates a one-time passcode (OTP) offline
   • BPhone call to a registered number
   • CMobile app push notifications
   • DSMS-based one-time passcodes
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of a conditional access rule that denies access if the user's device is not compliant with security policies?

   • ATo increase network speed
   • BTo reduce server load
   • CTo simplify user login
   • DTo ensure only secure devices can access resources
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company has a policy that requires all devices to have the latest OS patches before accessing published resources. However, some users have older devices that cannot be patched due to hardware limitations. The company still wants to allow these users to work, but with reduced access. What is the best approach?

   • AAllow access from unpatched devices but only to non-sensitive applications and with session recording enabled.
   • BRequire users to use a VPN before accessing any resource, regardless of patch level.
   • CIgnore the patch requirement and allow full access to all devices.
   • DBlock all access from devices that are not patched.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When configuring a Citrix Gateway to secure web-based access, which URL scheme should be used to ensure HTTPS encryption?

   • Ahttps://
   • Bftp://
   • Chttp://
   • Dtelnet://
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company allows employees to access a sensitive finance application from both corporate-managed laptops and personal devices. The security team wants to ensure that only devices with a compliant antivirus and the latest OS patches can access the app. Which conditional access policy configuration should an administrator implement?

   • ABlock access from all personal devices and allow only corporate-managed laptops regardless of their security posture.
   • BRequire the user to reauthenticate every time they access the finance application from a personal device.
   • CGrant access only when the device is domain-joined and the user's location is within the corporate network.
   • DRequire device compliance as a condition and grant access only if the device is marked as compliant by the endpoint management solution.
   Reveal Solution Discussion Select an answer first