An administrator is configuring MAB and needs to create profiling policies to support devices that do not match the built-in profiles. Which two steps must the administrator take in order to use…

Authorization policies use profiling policies as conditions to determine the outcome, not as results themselves.

Profiling policies classify endpoints based on attributes. For an authorization policy to grant access based on these classifications, the profiling policy must be used as a condition to match the endpoint's profile.

While endpoints are part of identity groups, profiling policies themselves are not directly fed into or matched by endpoint identity groups for use in authorization.

Profiling policies do not directly 'make a matching identity group'; they assign a profile, and endpoints can be assigned to identity groups based on these profiles, but the primary way to use profiling policies directly in authorization is via conditions or logical profiles.

Logical profiles allow combining multiple profiling policies or conditions into a single entity, simplifying authorization policies by providing a consolidated condition that represents a specific type or group of devices. Authorization policies can then reference this logical profile.