300-730 · Question #45
Refer to the exhibit. The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?
The correct answer is C. crypto vpn anyconnect profile Profile 1 flash:RDP.xml webvpn context Context1 svc policygroup PolicyGroup1 svc profile Profile1. The correct IOS SSL VPN configuration to deploy AnyConnect on an RDP machine requires defining the AnyConnect XML profile and binding it to a policy group using 'svc policygroup' and 'svc profile' commands.
Question
Options
- Acrypto vpn anyconnect profile Profile 1 flash:RDP.xml webvpn context Context1 svc platform win reg 1 policy group PolicyGroup1 functions svc-enabled
- Bcrypto vpn anyconnect profile Profile 1 flash:RDP.xml webvpn context Context1 browser-attribute import flash:RDP.xml
- Ccrypto vpn anyconnect profile Profile 1 flash:RDP.xml webvpn context Context1 svc policygroup PolicyGroup1 svc profile Profile1
- Dcrypto vpn anyconnect profile Profile 1 flash:RDP.xml webvpn context Context1 policy group PolicyGroup1 svc module RDP
How the community answered
(32 responses)- A13% (4)
- B6% (2)
- C78% (25)
- D3% (1)
Why each option
The correct IOS SSL VPN configuration to deploy AnyConnect on an RDP machine requires defining the AnyConnect XML profile and binding it to a policy group using 'svc policygroup' and 'svc profile' commands.
The 'svc platform win reg 1' and 'functions svc-enabled' commands are not valid IOS webvpn policy group subcommands; 'functions svc-enabled' does not exist in the IOS webvpn policy group command set.
The 'browser-attribute import flash:RDP.xml' command is not valid IOS webvpn context syntax for assigning AnyConnect profiles; browser-attribute is not a recognized command for profile assignment in this context.
Option C correctly uses 'crypto vpn anyconnect profile Profile1 flash:RDP.xml' to register the AnyConnect XML profile, then under the webvpn context uses 'svc policygroup PolicyGroup1' to assign the policy group and 'svc profile Profile1' to associate the AnyConnect profile with that policy group - the complete and valid IOS sequence for enabling AnyConnect with a custom client profile.
The 'svc module RDP' command is invalid IOS syntax; there is no 'module' subcommand under 'svc' in IOS webvpn policy group configuration for referencing an AnyConnect profile.
Concept tested: Cisco AnyConnect IOS SSL VPN profile and policy group binding
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/15-mt/sec-ssl-vpn-ios-15mt-book.html
Topics
Community Discussion
No community discussion yet for this question.