304 · Question #53

What are the possible policy ending types that can be used in VPE? (Select all that apply)

The correct answer is A. Allow B. Deny C. Redirect D. Drop. In VPE (Virtual Policy Engine), policy ending types define the terminal action taken when a policy rule is matched. Allow permits traffic to pass through, Deny blocks it and typically returns a rejection response, Redirect forwards the traffic to a different destination or…

Section 1: Implement APM for Access

Question

Options

AAllow
BDeny
CRedirect
DDrop
ELogout
FReset

How the community answered

(38 responses)

A
92% (35)
E
3% (1)
F
5% (2)

Explanation

In VPE (Virtual Policy Engine), policy ending types define the terminal action taken when a policy rule is matched. Allow permits traffic to pass through, Deny blocks it and typically returns a rejection response, Redirect forwards the traffic to a different destination or service, and Drop silently discards the packet without notifying the sender - all four represent valid terminal dispositions a policy can enforce.

Logout (E) is incorrect because it is a session-management action (ending a user's authenticated session), not a packet/traffic policy outcome. Reset (F) is incorrect because, while a TCP RST is a real network mechanism, it is not a distinct policy ending type in VPE - a Deny action handles connection termination.

Memory tip: Think of the four correct answers as a traffic cop's toolkit - Allow waves you through, Deny shows a stop sign with a reason, Redirect points you another way, and Drop pretends you were never there. Anything involving user sessions (Logout) or low-level transport signals (Reset) falls outside the policy engine's scope.

Topics

#VPE policy endings#APM configuration#Policy actions#Access policy

Community Discussion

No community discussion yet for this question.

Full 304 Practice