An administrator desires that when work laptops are not connected to the corporate network,
they should automatically initiate an AnyConnect VPN tunnel back to headquarters. Where
does the administrator configure this?
A.
Via the svc trusted-network command under the group-policy sub-configuration mode on the
ASA
B.
Under the “Automatic VPN Policy” section inside the Anyconnect Profile Editor within ASDM
C.
Under the TNDPolicy XML section within the Local Preferences file on the client computer
D.
Via the svc trusted-network command under the global webvpn sub-configuration mode on
the ASA
“Under the TNDPolicy XML section within the Local Preferences file on the client computer”
That doesn’t seem very scalable or enforceable solution. How would you audit that its in place? This seems like a bad security practice. Is there no other way to enforce this via anyconnect profile, GPO, etc? Is the question poorly worded and they intend to enact these settings as a one-off, exception, rather than across a whole fleet of endpoints?
Points awarded to whomever can explain this.
0
0
in my opinion the answer is poorly worded. it is correct that you can configure this in the XML File which is downloaded to the local maschine.
But you configure this with the anyconnect profile editor on the ASA so the xml gets pushed down to the client
http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect31/administration/guide/anyconnectadmin31/ac03vpn.html#34783
(Step 1: Launch the Profile Editor from ASDM)
Moreover the TDN Policy is Part of the Automatic VPN Policy (see Step 3 from the Configuration Guide) so Answer B would be correct too (it is not as correct as answer C so…)
fun fact if you go and alter this on the local maschine when the maschine connects back to the ASA the Profile will be overwriten by the ASA so it makes no sense to chance this file on a local maschine at all if it is not already configured the same way on the ASA
Anyway i would still go with answer C because A and D are clearly wrong and answer B is not as correct as answer C (C is more specific cause they ask for a TND Feature and the only answer which reference TND is C)
0
0
BTW, part of the new 307Q 300-209 dumps are available here:
https://drive.google.com/open?id=0B-ob6L_QjGLpVTNFVTRPdC0zTnM
Best Regards!
0
0