What are the two distribution methods available to an administrator when performing a fresh rollout of the Cisco AnyConnect Secure Mobility Client? (Choose two.)

Web deploy allows users to download and install the AnyConnect client directly from a secure web portal, often an SSL VPN gateway like a Cisco ASA, upon their initial connection.

SFTP (SSH File Transfer Protocol) is a secure file transfer protocol but is not a native distribution method for the AnyConnect client's initial rollout, though it could be used as part of a custom predeployment script.

TFTP (Trivial File Transfer Protocol) is an insecure and basic file transfer protocol, not typically used for secure, fresh rollouts of enterprise client software like AnyConnect.

Cloud update refers to updates of an already installed client via the cloud, not a fresh rollout distribution method for initial client installation.

Predeploy involves pushing the AnyConnect client software to endpoints using enterprise software distribution tools, such as Microsoft SCCM or Group Policy Objects (GPO), before users attempt their first VPN connection.