What type of policy governs authorization group assignment based on Endpoint Analysis results?

• A. Pre-authentication policy
• B. Post-authentication policy
• C. Authorization policy
• D. Global policy

Answer: (B)

Endpoint Analysis results are used to influence access decisions after a user has authenticated, so the step that uses those posture results to assign the user to an authorization group happens in the post-authentication phase. This policy runs once the user is verified and can apply actions based on the device posture, such as mapping the user into the appropriate authorization group that governs what resources they can reach. Pre-authentication policies occur before authentication and can block access, but they don’t perform group assignments based on endpoint state. Global policies apply broadly and aren’t about posture-driven grouping. Authorization policies come into play to enforce what resources are allowed once groups are established, but the actual assignment of authorization groups from Endpoint Analysis results is handled by the post-authentication policy.