nerdexam
Cisco

300-730 · Question #46

Refer to the exhibit. Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)

The correct answer is C. authentication aaa E. group-alias General enable. Two commands under webvpn-attributes work together to display a named group in the AnyConnect login prompt: one sets AAA as the authentication method and one creates the visible group alias.

Remote Access VPN

Question

Refer to the exhibit. Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)

Exhibit

300-730 question #46 exhibit

Options

  • Agroup-url https://172.16.31.10/General enable
  • Bgroup-policy General internal
  • Cauthentication aaa
  • Dauthentication certificate
  • Egroup-alias General enable

How the community answered

(27 responses)
  • B
    7% (2)
  • C
    89% (24)
  • D
    4% (1)

Why each option

Two commands under webvpn-attributes work together to display a named group in the AnyConnect login prompt: one sets AAA as the authentication method and one creates the visible group alias.

Agroup-url https://172.16.31.10/General enable

The 'group-url' command creates a URL-based direct connection entry point for the tunnel group, but it does not create a group alias that appears in the AnyConnect login prompt dropdown.

Bgroup-policy General internal

The 'group-policy General internal' command binds a group policy to the tunnel group, but it does not configure any user-visible display name or affect what appears in the AnyConnect connection prompt.

Cauthentication aaaCorrect

The 'authentication aaa' command configures the tunnel group to use AAA for client authentication, which enables the standard AnyConnect username/password credential prompt. Without this command, the connection method does not present the interactive login dialog shown in the exhibit.

Dauthentication certificate

The 'authentication certificate' command configures certificate-based client authentication, which bypasses the username/password prompt entirely and would not produce the credential login screen shown in the exhibit.

Egroup-alias General enableCorrect

The 'group-alias General enable' command creates a human-readable name called 'General' that appears in the AnyConnect group dropdown selector on the login screen. This is the specific mechanism that surfaces the group name to end users during connection.

Concept tested: AnyConnect tunnel-group group-alias and AAA authentication

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-anyconnect.html

Topics

#tunnel-group#webvpn-attributes#group-alias#AAA authentication

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice