Exam 300-730 topic 1 question 93 discussion

Extended Hub Configuration for Client1 Define a AAA attribute list. aaa attribute list Client1 attribute type interface-config "ip mtu 1300" protocol ip attribute type interface-config "service-policy output TEST" protocol ip Note: Remember that the entity assigned via attributes must exist locally. In this case, policy-map was previously configured. policy-map TEST class class-default shape average 60000 Assign AAA attribute list to an authorization policy. crypto ikev2 authorization policy Client1 pool FlexSpokes aaa attribute list Client1 route set interface

It's B&D, it says to ENABLE FlexVPN to use a AAA attribute list, which implies AAA list already exists.

To enable FlexVPN to use a AAA attribute list, the two tasks that must be performed are: 1. Defining the AAA server: You need to define the AAA server configuration on the FlexVPN server, which includes specifying the server's IP address, shared secret, and other relevant settings. This ensures that the FlexVPN server can communicate with the AAA server for authentication, authorization, and accounting purposes. 2. Assigning the list to an authorization policy: Once the AAA server is defined, you need to assign the AAA attribute list to an authorization policy on the FlexVPN server. This authorization policy determines the access privileges for clients connecting to the VPN. By assigning the list to the policy, you can enforce specific attributes or rules defined in the AAA attribute list. These two tasks, defining the AAA server and assigning the AAA attribute list to an authorization policy, are essential for enabling FlexVPN to utilize the AAA attribute list for authentication and authorization purposes.

The question says what have to be done in order to ENABLE Flex VPN to use AAA list... Verify that clients are using the AAA list is not enabling nothing.... So I would go with C and D.

I will go with C and D, makes more sense

B and D are correct https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116032-flexvpn-aaa-config-example-00.html