Objective 2.21 Explain Access Policy Flow and Logic (i.e., Branching, Loops, Macros [when and How to Use Them]) 304 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An administrator needs to create a macro that contains a series of checks for device posture. The macro will be used in several access policies. After creating the macro in the access policy editor, what is the next step the administrator must perform to make the macro available for use in other policies?

   • APublish the macro to the global macro library so it can be inserted into any access policy.
   • BCopy the macro definition and paste it into each policy's visual editor.
   • CSave the macro as a new access policy and reference it from other policies.
   • DExport the macro as a file and import it into each target policy individually.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How can an administrator prevent an infinite loop in an access policy?

   • ABy using a 'fallback' result to exit the loop.
   • BBy ensuring the loop has a condition that will eventually become false.
   • CBy using a 'Deny' item at the end of the loop.
   • DBy limiting the loop to a maximum of 10 iterations.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has multiple access policies that all begin with the same set of checks: verify the user's IP address is in a trusted range, then verify the device is registered, then verify the user is not in the 'Blocked' group. The administrator wants to make this logic reusable and centrally managed. What is the most appropriate approach?

   • ACreate a macro with these checks and insert it at the beginning of each access policy.
   • BCreate a separate access policy for the checks and use a redirect from the other policies.
   • CCopy the checks into each policy and update them manually when changes are needed.
   • DUse a loop to repeat these checks within each policy.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   After a macro has been created, how is it inserted into an access policy?

   • ABy writing a TCL command in the 'Rule' item.
   • BBy using the 'Add Macro' button in the 'Access Policy' properties.
   • CBy importing a configuration file that contains the macro.
   • DBy dragging the macro from the 'Macros' palette and dropping it into the policy flow.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of the 'fallback' result in an access policy item?

   • ATo terminate the access policy session immediately.
   • BTo provide a default action when the item's primary result is not defined.
   • CTo define the next item to execute when the item fails to complete successfully.
   • DTo re-run the current item if the user provides incorrect input.
   Reveal Solution Discussion Select an answer first