Q3Remote access VPNs
A Cisco AnyConnect client creates an SSL VPN connection to an ASA at the corporate office. An engineer must make sure that the client computer complies with the enterprise security policy. Which feature can update the client so it meets an enterprise security policy?
← → navigate · a answer
Discussion · 8
5
sorry, i meant answer D
3
Correct answer is A.
The Advanced Endpoint Assessment is focused on AV and remediation. Endpoint Assessment focuses on the security policy checks of the local system, which examines or assesses the system.
2
The question says
'which feature can >update< the client' - updating means - making some changes on the client.
Only Advanced Endpoint Assessment can do that ..
So i think answer A is correct.
2
i think it's D
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect46/administration/guide/b_AnyConnect_Administrator_Guide_4-6/configure-posture.html#ID-1407-0000004e
2
D. Since Advanced can take action
1
D
the key phrase here (Which feature can update the client to meet an enterprise security policy)
1
Basic Host Scan can be ruled out easily here
1
I'll go with D
"If the end user disables antivirus or personal firewall after successfully establishing the VPN connection, our Advanced Endpoint Assessment feature attempts to re-enable that application within approximately 60 seconds."
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/configure-posture.html#ID-1407-00000047