Cisco Certified Internetwork Expert (CCIE) Practice Test

Which statements about the Cisco AnyConnect VPN Client are true? (Choose two)

1. It enables users to manage their own profiles

2. By default, DTLS connections can fall back to TLS

3. It can be configured to download automatically without prompting the user

4. To improve security, keepalives are disabled by default

The correct answer is: It can be configured to download automatically without prompting the user

The correct choice highlights a feature of the Cisco AnyConnect VPN Client that enhances user experience and automation. The ability to configure the VPN client to download automatically without prompting the user is particularly useful for organizations that aim to streamline the deployment of VPN solutions to ensure all users have the latest client version with minimal user intervention. This eliminates the burden on users to manage installations and helps maintain a consistent security posture across the network. The other options do have relevant aspects but do not accurately reflect the functionality or default behavior in the context of the Cisco AnyConnect VPN Client. For example, while users might have some management options, the complete control over profiles can depend on the configuration set by system administrators, limiting the degree of self-management in certain environments. Additionally, DTLS connections do indeed provide fallback to TLS for compatibility in different network environments, which may be a consideration for troubleshooting or connectivity issues. Lastly, keepalives in the context of maintaining VPN connectivity are typically enabled by default to assist in keeping the session active and to ensure better availability, contrary to the statement regarding their default disabled setting.