Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 122

A network engineer is installing Cisco AnyConnect on company laptops so that users can access corporate resources remotely. The VPN concentrator is a Cisco router running IOS-XE 16.9.1 code and configured as a FlexVPN server that uses local authentication and *$Cisc431089017$* as the key-id for the IKEv2 profile. Which two steps must be taken on the computer to allow a successful AnyConnect connection to the router? (Choose two.)

Answer options

• A. In the Cisco AnyConnect XML profile, set the IPsec Authentication method to EAP-AnyConnect.
• B. In the Cisco AnyConnect XML profile, add the hostname and host address to the server list.
• C. In the Cisco AnyConnect XML profile, set the user group field to DefaultAnyConnectClientGroup.
• D. In the Cisco AnyConnect Local Policy, set the BypassDownloader option in the local to true.
• E. In the Cisco AnyConnect Local Policy, add the router IP address to the Update Policy.

Correct answer: A, B

Explanation

Options A and B are essential for establishing a successful AnyConnect connection; A configures the correct authentication method, while B ensures the client knows where to connect. The other options (C, D, E) are not required for the initial connection setup to the VPN concentrator.