300-445 Question 54
Single answerAn enterprise organization is deploying Secure Client (formerly AnyConnect) for remote workers to ensure secure access to internal resources. During the deployment, the network administrator must configure a feature to enforce endpoint compliance checks, such as verifying antivirus status and operating system updates, before granting network access. Which feature of Secure Client should the administrator enable?
- A
HostScan
- B
Split Tunneling
- C
Always-On VPN
- D
Dynamic Access Policies (DAP)
Show answer and explanation
Correct answer: A
Explanation
HostScan is a feature within Secure Client that ensures endpoint compliance by running pre-login or post-login checks on the user's device. These checks verify system configurations, such as antivirus status, operating system updates, and other security parameters, to prevent non-compliant devices from accessing the network. This is essential for organizations prioritizing secure remote access.
- A. Correct.
HostScan is the correct feature for performing endpoint compliance checks, such as verifying antivirus status, OS updates, and other host properties, before granting network access.
- B. Incorrect.
Split Tunneling is used to allow specific traffic to bypass the VPN tunnel, typically for optimizing performance, but it does not perform compliance checks.
- C. Incorrect.
Always-On VPN ensures that the VPN connection is active at all times for secure communication, but it does not handle endpoint compliance checks.
- D. Incorrect.
Dynamic Access Policies (DAP) allow administrators to define granular access policies based on user and device properties, but they are not specifically used to perform compliance checks.