Cisco Exam 300-730 Topic 11 Question 105 Discussion

Actual exam question for Cisco's 300-730 exam

Question #: 105
Topic #: 11

A router is being configured for IKEv2 AnyConnect using AnyConnect-EAP. How would the administrator separate profiles for administrators and employees so that authorization differs when they connect?

ADefine group aliases on the headend and have the user pick the appropriate alias when they connect

BDefine group-urls on the headend and create two XML profiles to match the administrator and user group urls

CCreate a certificate map and match on the appropriate certificate fields

DDefine key-ids on the headend and create two XML profiles to match the administrator and user key-ids.

Show Suggested Answer

Suggested Answer: B

Use the FQDN including the subdomain for the website.According to the Firepower Management Center Configuration Guide, Version 6.61, when you create a URL object, you must use the fully qualified domain name (FQDN) of the website, including any subdomains, and omit the protocol prefix (HTTP or HTTPS). For example, to match www.example.com, you must enter www.example.com as the URL object value, not http://www.example.com or https://www.example.com. The system automatically matches both HTTP and HTTPS traffic for the same FQDN. Specifying the protocol to match (HTTP or HTTPS) is not required and will result in an invalid URL object. Using the subject common name from the website certificate or defining the path to the individual webpage that uses HTTPS are not supported options for URL objects.

by Hannah at Feb 10, 2025, 03:29 PM

Limited Time Offer

25%

Off

Get Premium 300-730 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gayla

28 days ago

I wonder if the router comes with a 'Automatically Separate Admins and Employees' button. That would make this question a breeze!

upvoted 0 times

Mattie

9 days ago

A) Define group aliases on the headend and have the user pick the appropriate alias when they connect

upvoted 0 times

...

Marla

1 months ago

Option A seems a bit too basic. Asking users to pick the right alias could lead to confusion and potential security risks.

upvoted 0 times

...

Matthew

1 months ago

Option D looks interesting, but I'm not sure how practical it would be to manage multiple key-ids. I think I'll stick with option B.

upvoted 0 times

Heike

7 days ago

B: Yeah, I agree. Managing multiple key-ids could get complicated.

upvoted 0 times

...

Elizabeth

18 days ago

A: I think option B is the way to go. It seems like a simpler solution.

upvoted 0 times

...

Zana

2 months ago

I'm not sure, but I think B) Define group-urls on the headend and create two XML profiles to match the administrator and user group urls could also be a valid option.

upvoted 0 times

...

Eveline

2 months ago

I'm leaning towards option C. Using a certificate map to match on specific fields could provide a more secure way to differentiate between administrators and employees.

upvoted 0 times

Raelene

2 days ago

Yes, using a certificate map for authorization can help ensure that the right access is granted to the right users.

upvoted 0 times

...

Jesse

5 days ago

Definitely, it's important to have a secure method in place to separate profiles for administrators and employees.

upvoted 0 times

...

Cory

8 days ago

I agree, using a certificate map to match on specific fields is a smart way to handle authorization for different user groups.

upvoted 0 times

...

Nicolette

1 months ago

I think option C is a good choice. It provides a secure way to differentiate between administrators and employees.

upvoted 0 times

...

Abel

1 months ago

C) Create a certificate map and match on the appropriate certificate fields

upvoted 0 times

...

Cecilia

2 months ago

A) Define group aliases on the headend and have the user pick the appropriate alias when they connect

upvoted 0 times

...

Jose

2 months ago

I disagree, I believe the correct answer is C) Create a certificate map and match on the appropriate certificate fields.

upvoted 0 times

...

Kami

2 months ago

I think the answer is A) Define group aliases on the headend and have the user pick the appropriate alias when they connect.

upvoted 0 times

...

Emelda

2 months ago

Option B seems like the way to go. Defining group-urls and creating separate XML profiles sounds like a simple and effective solution.

upvoted 0 times

Elbert

19 days ago

Option B seems like the way to go. Defining group-urls and creating separate XML profiles sounds like a simple and effective solution.

upvoted 0 times

...

Blythe

20 days ago

B) Define group-urls on the headend and create two XML profiles to match the administrator and user group urls

upvoted 0 times

...

Merlyn

2 months ago

A) Define group aliases on the headend and have the user pick the appropriate alias when they connect

upvoted 0 times

...