300-730 · Question #46
Refer to the exhibit. Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)
The correct answer is C. authentication aaa E. group-alias General enable. Two commands under webvpn-attributes work together to display a named group in the AnyConnect login prompt: one sets AAA as the authentication method and one creates the visible group alias.
Question
Exhibit
Options
- Agroup-url https://172.16.31.10/General enable
- Bgroup-policy General internal
- Cauthentication aaa
- Dauthentication certificate
- Egroup-alias General enable
How the community answered
(27 responses)- B7% (2)
- C89% (24)
- D4% (1)
Why each option
Two commands under webvpn-attributes work together to display a named group in the AnyConnect login prompt: one sets AAA as the authentication method and one creates the visible group alias.
The 'group-url' command creates a URL-based direct connection entry point for the tunnel group, but it does not create a group alias that appears in the AnyConnect login prompt dropdown.
The 'group-policy General internal' command binds a group policy to the tunnel group, but it does not configure any user-visible display name or affect what appears in the AnyConnect connection prompt.
The 'authentication aaa' command configures the tunnel group to use AAA for client authentication, which enables the standard AnyConnect username/password credential prompt. Without this command, the connection method does not present the interactive login dialog shown in the exhibit.
The 'authentication certificate' command configures certificate-based client authentication, which bypasses the username/password prompt entirely and would not produce the credential login screen shown in the exhibit.
The 'group-alias General enable' command creates a human-readable name called 'General' that appears in the AnyConnect group dropdown selector on the login screen. This is the specific mechanism that surfaces the group name to end users during connection.
Concept tested: AnyConnect tunnel-group group-alias and AAA authentication
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-anyconnect.html
Topics
Community Discussion
No community discussion yet for this question.
