A network engineer is deploying IBNS 2.0 on a Cisco Catalyst switch running IOS-XE. The requirement is that during an authentication failure or RADIUS server unavailability, an endpoint should locally receive a predefined set of interface policies (VLAN and ACL) that are pushed and consistently applied without waiting for ISE. The engineer wants to define these policies once and reference them from multiple event-driven actions within a policy-map. Which IBNS 2.0 construct should the engineer configure to accomplish this?