300-445 Question 52
Single answerYour organization is deploying Secure Client (formerly AnyConnect) across remote employees to ensure secure VPN access and network visibility. During the deployment, you need to ensure that the Secure Client configuration enforces the use of posture assessment to verify that devices meet compliance policies before granting access. Which configuration action should you take?
- A
Enable HostScan in the Secure Client configuration.
- B
Configure split tunneling in the VPN profile.
- C
Enable certificate-based authentication for Secure Client.
- D
Deploy a Dynamic Access Policy (DAP) on the VPN gateway.
Show answer and explanation
Correct answer: A
Explanation
To enforce posture assessment during Secure Client deployment, HostScan must be enabled. HostScan checks endpoint compliance, such as antivirus, OS updates, and firewall settings, ensuring that only compliant devices are granted VPN access. This is a critical step for maintaining network security in remote access scenarios.
- A. Correct.
Enabling HostScan in the Secure Client configuration allows posture assessment, ensuring that devices meet compliance requirements such as antivirus, firewall, or OS checks before granting access to the network.
- B. Incorrect.
Split tunneling determines how traffic is routed through the VPN but does not relate to posture assessment or compliance enforcement.
- C. Incorrect.
Certificate-based authentication is used for verifying the identity of devices or users but does not enforce posture compliance.
- D. Incorrect.
Dynamic Access Policies (DAPs) can grant specific levels of access based on certain criteria, but they are not used to enforce posture assessment directly.