An administrator is setting up AnyConnect for the first time for a few users. Currently, the router does not have access to a RADIUS server. Which AnyConnect protocol must be used to allow users to…

EAP-GTC requires an external authentication server such as RADIUS to validate one-time passwords or token-based credentials.

EAP-MSCHAPv2 depends on a RADIUS server or Active Directory to perform the MS-CHAP challenge-response exchange.

EAP-MD5 requires a RADIUS server to store and verify the MD5-hashed user credentials.

EAP-AnyConnect is Cisco's proprietary EAP method that allows the AnyConnect headend router or ASA to authenticate users using its local user database, eliminating the requirement for an external RADIUS server. It is the only EAP type in the AnyConnect framework that fully supports local authentication without external infrastructure. This makes it the correct choice when no RADIUS server is accessible.