300-730 · Question #210
What is the purpose of a web-type access control list in a Clientless SSL VPN configuration?
The correct answer is D. It manages and restricts user access to specific web resources. Web-type ACLs in Cisco ASA Clientless SSL VPN configurations control which web resources authenticated users are permitted or denied access to through the VPN portal.
Question
Options
- AIt encrypts and decrypts the data traffic passing through the VPN.
- BIt logs user activities for compliance and monitoring.
- CIt authenticates users based on their credentials.
- DIt manages and restricts user access to specific web resources.
How the community answered
(37 responses)- B3% (1)
- C3% (1)
- D95% (35)
Why each option
Web-type ACLs in Cisco ASA Clientless SSL VPN configurations control which web resources authenticated users are permitted or denied access to through the VPN portal.
Encryption and decryption of VPN data is handled by the SSL/TLS protocol stack, not by access control lists of any type.
User activity logging is performed by AAA accounting and syslog features configured separately, not by web-type ACLs.
User authentication is managed by AAA services such as RADIUS, LDAP, or the local user database, not by access control lists.
Web-type ACLs are purpose-built for Clientless SSL VPN and operate at the application layer to permit or deny access to URLs, domains, and network resources presented through the SSL VPN portal. They allow administrators to enforce granular access control over what internal or external web content a VPN user can reach after successful authentication.
Concept tested: Web-type ACL purpose in Clientless SSL VPN
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-clientless-ssl.html
Topics
Community Discussion
No community discussion yet for this question.