300-445 Question 56
Select 2An organization is deploying Secure Client (formerly AnyConnect) to ensure secure remote access for its employees. The IT team must configure the deployment to enforce endpoint posture assessment and restrict access to corporate resources if compliance checks fail. Which of the following configurations are required to meet this requirement?
- A
Enable HostScan in the Secure Client configuration profile.
- B
Configure Dynamic Access Policies (DAP) on the VPN headend.
- C
Integrate the Secure Client deployment with an external RADIUS server for authentication.
- D
Enable Always-On VPN in the Secure Client settings.
- E
Deploy Cisco Secure Endpoint as part of the Secure Client package.
Show answer and explanation
Correct answers: A, B
Explanation
To enforce endpoint posture assessment and restrict access based on compliance, HostScan must be enabled to perform the checks, and Dynamic Access Policies (DAP) must be configured to apply access restrictions. While other options may enhance security or provide additional functionality, they are not directly tied to the posture assessment and enforcement requirements in this scenario.
- A. Correct.
HostScan is a critical component that performs endpoint posture assessments, such as checking for antivirus, firewall, or other security measures, ensuring compliance before granting access.
- B. Correct.
Dynamic Access Policies (DAP) allow administrators to enforce specific access restrictions based on endpoint posture and other criteria, ensuring non-compliant devices are denied or restricted access.
- C. Incorrect.
While a RADIUS server is beneficial for authentication, it does not directly handle endpoint posture compliance or enforce access restrictions based on compliance checks.
- D. Incorrect.
Always-On VPN ensures continuous connectivity but does not enforce endpoint posture compliance or restrict access based on compliance checks.
- E. Incorrect.
Cisco Secure Endpoint provides advanced endpoint protection, but it is not required for Secure Client posture assessment or access enforcement.