Câu 150: 400-251: CCIE Security Written Exam

All your remote users use Cisco AnyConnect VPN to connect into your corporate network, with an ASA providing the VPN services. Authentication is through ISE using RADIUS as the protocol. ISE uses Active Directory as the Identity Source. You want to be able to assign different policies to users depending on their group membership in Active Directory. Which action is a way of achieving that goal?

1. A. Configure an authorization policy in ISE to send back a RADIUS Class-25 attribute with the name of the ASA Tunnel Group (Connection Profile)
2. B. Configure an authorization policy in ISE to send back a RADIUS Class-25 attribute with the name of the ASA Group Policy — đáp án hiện tại
3. C. This is only possible when LDAP authorization is configured directly to Active Directory
4. D. Configure an authentication policy in ISE to send back a RADIUS Class-25 attribute with the name of the ASA Tunnel Group (Connection Profile)
5. E. Configure an authentication policy in ISE to send back a RADIUS Class-25 attribute with the name of the ASA Group Policy