To quarantine users who attempt to take a screenshot during a session, which Citrix ADC policy should be configured?

• A. Post-Authentication Scan
• B. SmartAccess
• C. SmartControl
• D. Pre-Authentication Scan

Answer: (A)

This question is about enforcing actions based on user behavior after they have signed in. You want to quarantine a user if they try to take a screenshot while a session is active, so the enforcement needs to run after authentication has succeeded and while the session is alive.

Post-Authentication Scan policies are designed to run once a user is already authenticated, allowing you to check endpoint posture and behavior during the active session and apply enforcement actions (such as quarantine) when violations are detected. That makes them the appropriate mechanism for reacting to in-session actions like attempting a screen capture.

Pre-Authentication Scan runs before authentication, so it can’t observe or respond to actions that occur after login. SmartControl focuses on in-session restrictions to prevent data leakage (like blocking certain features), but the specific enforcement of quarantining a user based on a post-login action is implemented via a post-authentication scan policy. SmartAccess governs access decisions rather than enforcing quarantine for in-session behavior.

Therefore, configuring a Post-Authentication Scan policy is the best fit for quarantining users who attempt to take a screenshot during a session.