I'd say A - IKEv2 Authorization Policy Source (Step 13): https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html Webvpn is for SSL remote access VPN's and the question asks about an IKEv2 remote access

Selected Answer: A Step 13 (Optional). By default, all client traffic is sent through the tunnel. You can set up split tunneling, which lets only selected traffic go through the tunnel. ip access-list standard split_tunnel permit 10.0.0.0 0.255.255.255 ! crypto ikev2 authorization policy ikev2-auth-policy route set access-list split_tunnel https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html#toc-hId-936641904

for IKEv2 A is correct like Lantis wrote if it where IKEv1 group policy would be right https://www.cisco.com/c/en/us/support/docs/routers/3600-series-multiservice-platforms/91193-rtr-ipsec-internet-connect.html

Naa, Group policy if I am correct is on ASA

WebVPN context -> group-> svc->split D is correct

Im gonna go with group policy on this one. Step 13 (Optional). By default, all traffic from the client will be sent through the tunnel. You can configure split tunnel, which allows only selected traffic to go through the tunnel. ip access-list standard split_tunnel permit 10.0.0.0 0.255.255.255 ! crypto ikev2 authorization policy ikev2-auth-policy route set access-list split_tunnel https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html

Correction. Authorization Policy not group policy

Selected Answer: A Defined in IKEv2 auth policy

Selected Answer: A A is correct

a big A

Group policy sounds right here.

A is the correct answer

On a Cisco router, split tunneling for IKEv2 remote access clients is usually defined in the Group Policy configuration. The Group Policy sets different parameters and settings for a specific group of remote access clients. Inside the Group Policy configuration, you can choose whether split tunneling should be turned on or off for the IKEv2 remote access clients tied to that group. Split tunneling decides how network traffic is routed when a remote access client connects to the router using IKEv2. It lets the client choose which traffic goes through the VPN tunnel and which traffic is sent directly to the local network or the internet. While IKEv2 Authorization Policy can also affect access permissions and policies for IKEv2 remote access clients, split tunneling itself is generally configured in the Group Policy. So, the correct answer is that split tunneling for IKEv2 remote access clients on a Cisco router is defined in the Group Policy.

Answer should be A https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html