An administrate in configuring a rule for access policy in Workspace ONE Access. Which three settings can be configured to manage user access to the unified access portal? (Choose three.)

Question

Options

• AApplication Category
• BDevice Type
• CAuthentication Type
• DNetwork Range
• ERule Schedule

• A
  3% (1)
• B
  79% (23)
• D
  7% (2)
• E
  10% (3)

Explanation

Note: The question asks for three answers, but the provided key only lists B and C - the third correct answer is almost certainly D (Network Range), which is a core Workspace ONE Access policy condition. The complete correct set is B, C, and D.

In Workspace ONE Access, access policy rules are built around three primary conditional factors: Device Type (B) lets you enforce different authentication flows based on whether the user is on a managed Windows PC, iOS device, browser, etc.; Authentication Type (C) defines which authentication method(s) - password, certificate, MFA, Kerberos - are required for that rule; and Network Range (D) scopes the rule to specific IP ranges (e.g., corporate network vs. external internet), enabling step-up authentication for off-network users.

Application Category (A) is used to organize apps in the portal catalog but is not a conditional trigger in access policy rules. Rule Schedule (E) does not exist as a native access policy condition in Workspace ONE Access - time-based restrictions are not a built-in rule parameter.

Memory tip: Think "DNA" - Device type, Network range, Authentication type - these are the three "who, where, how" pillars of a Workspace ONE conditional access rule.

No community discussion yet for this question.