Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

The tunnel-group general-attributes section handles authentication methods and address pool assignments, not clientless resource bookmark access.

The tunnel-group webvpn-attributes section configures portal customization and group-alias settings, not URL list assignment.

The 'url-list value <list-name>' command is entered under the 'webvpn' sub-configuration of a group-policy, directly associating the bookmark set with every user mapped to that policy. This is the only location where the assignment takes effect in the clientless portal, as it ties the resource list to the specific access policy applied to each user.

Global webvpn configuration defines portal-wide parameters such as trustpoints and certificate settings but does not assign URL lists to specific user groups.