PCNSE7 · Question #49
Which command can be used to validate a Captive Portal policy?
The correct answer is C. test cp-policy-match <criteria>. You can use the test security-policy-match command to determine whether the policy is configured correctly. For example, suppose you have a rule that blocks user duane from playing World of Warcraft; you could test the policy as follows: test security-policy-match application…
Question
Which command can be used to validate a Captive Portal policy?
Options
- Aeval captive-portal policy <criteria>
- Brequest cp-policy-eval <criteria>
- Ctest cp-policy-match <criteria>
- Ddebug cp-policy <criteria>
How the community answered
(24 responses)- A8% (2)
- B4% (1)
- C83% (20)
- D4% (1)
Explanation
You can use the test security-policy-match command to determine whether the policy is configured correctly. For example, suppose you have a rule that blocks user duane from playing World of Warcraft; you could test the policy as follows: test security-policy-match application worldofwarcraft source-user acme\duane source any destination any destination-port any protocol 6 "deny worldofwarcraft" { source-region any; destination any; destination-region any; user acme\duane; application/service worldofwarcraft;
Topics
Community Discussion
No community discussion yet for this question.