Objective 2.23 Describe Customization Options for an Access Policy (logon Page, Webtop, Network Access, Language) 304 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is deploying an access policy for both Windows and macOS endpoints. The policy must authenticate users, then check for a Windows-specific registry key on Windows devices and a macOS-specific process on macOS devices, and finally grant network access. The administrator wants to avoid unnecessary checks on the wrong platform. Which approach best implements this requirement?

   • AUse a server-side OS detection check to branch, then apply the appropriate endpoint check for each OS, followed by a network access grant
   • BUse a general-purpose OS detection check to branch, then apply the appropriate endpoint check for each OS, followed by a network access grant
   • CApply both the registry check and the process check to all endpoints, followed by a network access grant
   • DUse a client-side OS detection check to branch, then apply the appropriate endpoint check for each OS, followed by a network access grant
   Reveal Solution Discussion Select an answer first
2. 7foundation · medium

   An access policy needs to ensure that a Windows client has a specific security setting configured in the system registry. Which endpoint check type is designed to inspect this?

   • ARegistry check
   • BProcess check
   • CFirewall check
   • DAntivirus check
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company wants to allow access to a network only if the endpoint passes a firewall check. If the check fails, the user should be blocked and see a message. The administrator also wants to track the number of blocked users for reporting. Which branch ending configuration should be used?

   • ADeny branch with a redirect to the help desk
   • BDeny branch with logging enabled and a custom message
   • CRedirect branch with logging enabled and a custom message
   • DAllow branch with logging enabled and a custom message
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A company's access policy requires that endpoints pass a registry check before accessing a web application. If the check fails, the user should be blocked. Which branch ending should be used for the failed check path?

   • ADeny branch
   • BAllow branch
   • CRedirect branch
   • DLogout branch
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator is building an access policy for a remote-access VPN. The policy must first verify that the client device has a specific registry key present, then check that the firewall service is running, and finally grant access to the corporate network. Which sequence of policy item categories correctly implements this requirement?

   • AClient-side endpoint security checks for the registry key and firewall service, followed by a network access grant
   • BServer-side endpoint security checks for the registry key and firewall service, followed by a webtop assignment
   • CClient-side checks for the registry key and firewall service, followed by a redirect to the VPN landing page
   • DGeneral-purpose registry and firewall checks, followed by an allow branch
   Reveal Solution Discussion Select an answer first