Scenario: An administrator wants to control printing access to a new plotter recently purchased by the company. The policy to be created should apply to all the users that initiate an ICA session…

The correct answer is D. Access Control E. Client IP Address. See the full explanation below for the reasoning.

Question

Scenario: An administrator wants to control printing access to a new plotter recently purchased by the company. The policy to be created should apply to all the users that initiate an ICA session from the Engineering subnet and any user that connects through an Advanced Access Control Logon Point created for the Engineering department. Which two filters could the administrator use to apply this policy? (Choose two.)

Options

AUsers
BServers
CClient Name
DAccess Control
EClient IP Address

How the community answered

(34 responses)

A
6% (2)
B
12% (4)
C
3% (1)
D
79% (27)

Community Discussion

Mei-Ling H.Jun 20, 2026

D and E are correct. Access Control covers users connecting through the Advanced Access Control Logon Point, and Client IP Address lets you target sessions coming from the Engineering subnet specifically. Those two filters together match exactly both conditions in the scenario, which is why the other options like Users or Servers do not fit here, they do not capture either the subnet source or the AAC logon point in the way the question requires.

Ingrid P.Jun 21, 2026

The subnet filter is doing the heavy lifting on precision here, so if you are building a deck on SmartAccess policy filters, that one earns its own card separate from Access Control because the recall cue is completely different.

Carlos M.Jun 27, 2026

D and E are right, Access Control catches the AAC logon point and Client IP covers the Engineering subnet.

Samuel O.Jun 29, 2026

Just worth flagging that in a real environment the Client IP filter on that Engineering subnet needs to account for any jump hosts or VPN concentrators that might source traffic from a different range, otherwise you get false negatives on the logon events and the ACL question falls apart at the boundary.

Ingrid P.Jun 27, 2026

D and E are correct. Access Control catches the Advanced Access Control Logon Point condition, and Client IP Address lets you scope the policy to the Engineering subnet by specifying that IP range directly in the filter.

Samuel O.Jun 27, 2026

Took me a second on this one because I almost went with A (Users) out of habit, but then I remembered you need something that actually identifies WHERE the connection is coming from, not just WHO is making it. Client IP Address nails the Engineering subnet piece, and Access Control covers the Advanced Access Control Logon Point condition, so D and E is the move.

Full 1Y0-A05 Practice