300-730 Question #50: Real Exam Question with Answer & Explanation

The correct answer is D: AnyConnect profile. A local AnyConnect profile must be configured on the FlexVPN server to enable local username/password authentication for AnyConnect clients.

Remote Access VPN

Question

Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

Options

Ause of certificates instead of username and password
BEAP-AnyConnect
CEAP query-identity
DAnyConnect profile

Explanation

A local AnyConnect profile must be configured on the FlexVPN server to enable local username/password authentication for AnyConnect clients.

Common mistakes.

A. Certificate-based authentication is an alternative method to username/password, not a prerequisite for enabling local credential-based authentication on FlexVPN.
B. EAP-AnyConnect is one supported EAP method in certain deployments but is not the specific configuration requirement for enabling local authentication on a FlexVPN server.
C. EAP query-identity is a mechanism for requesting an EAP identity but is not a prerequisite for local authentication on a FlexVPN headend.

Concept tested. FlexVPN local authentication requirement for AnyConnect clients

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/xe-16/sec-ike2-vpn-xe-16-book/sec-cfg-flex-vpn.html

Topics

#FlexVPN#AnyConnect#local authentication#EAP

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice