- They are evaluated after the user successfully authenticates.
- They are evaluated before the user successfully authenticates.
- They contain the same checks as Host Scan provides to the DAPs.
- You can only have a single prelogin policy.
The correct answer is 2.
As the name implies, prelogin policies are used prior to user authentication to determine which Cisco Secure Desktop (CSD) policy to apply to the session. Prelogin policies can check for the presence of specific files, digital certificates, operating systems, IP addresses, and/or registry keys.