Exam 300-730 topic 1 question 165 discussion

Actual exam question from Cisco's 300-730

Question #: 165
Topic #: 1

Refer to the exhibit. A network administrator is setting up Cisco AnyConnect on an ASA headend. When users attempt to connect to the VPN, they are presented with this message. The administrator has replaced the ASA's self-signed certificate with a certificate enrolled with the internal CA and has confirmed that the certificate is not revoked. Which two tasks will the administrator need to do to prevent users from seeing this message? (Choose two.)

A. Trust the issuing CA for the ASA identity certificate on the user's PC.
B. Enroll and import an SSL certificate with the CN value example.cisco.com on the ASA.
C. Add the CN example.cisco.com to the AnyConnect XML certificate matching section.
D. Enable certificate authentication under the connection profile.
E. Add example.cisco.com to the server name list within the AnyConnect Local Policy.