Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

Auto Reconnect re-establishes a dropped session to the same headend but does not redirect the client to a different ASA.

Network Access Manager manages wired and wireless 802.1X authentication and is entirely unrelated to VPN headend availability.

AnyConnect Backup Servers defines an ordered list of alternate headend ASAs in the VPN client profile. If the primary ASA is unreachable, the client automatically attempts each backup server in sequence, providing transparent failover without requiring user intervention.

ASA failover configures a secondary ASA to take over if the primary device fails hardware or software checks. Active/standby or active/active failover keeps the headend continuously available so existing sessions are preserved and new connections can still be established.

Always On enforces continuous VPN connectivity by preventing users from bypassing the tunnel, but does not define alternate headend addresses for failover.