Exam 300-730 topic 1 question 18 discussion

crypto ikev2 enable outside client-services port 443 which means when we enable client services they are done over port 443 ( ergo SSL) although client services which I found only mention Group policy updates and not full software updates, so im a bit split

"D" seems to be the correct answer here. The problem that might prevent IKEv2 users from automatically downloading a new AnyConnect release when they connect to the Cisco ASA is that client software updates are not supported with IKEv2. Client software updates are a feature that allows the Cisco ASA to push new AnyConnect software releases to the connected clients automatically. However, this feature is only supported for SSL VPN connections and not for IKEv2 VPN connections. As per the given scenario, where IKEv2 is being used for one group of users and SSL for another group, the IKEv2 users will not have the capability to automatically download a new AnyConnect release when they connect. This is because client software updates are specifically designed for SSL VPN connections and are not supported with IKEv2. Therefore, the problem lies in the fact that client software updates are not supported with IKEv2, rather than the client services not being enabled.

answer is D

Answer correct is A Answer A suggests that the XML profile may not be configured correctly for the affected users. The XML profile is a configuration file that can be used to customize the behavior of the AnyConnect client. It is possible that the XML profile for the IKEv2 users is not configured to allow automatic updates, or that it is pointing to an incorrect location for the new client image. https://community.cisco.com/t5/vpn/anyconnect-with-ikev2/td-p/2478375

https://community.cisco.com/t5/vpn/anyconnect-service-port-not-enabled/td-p/2968124

Correct I think is D

On ASDM, under connection profile -> access interfaces -> IPSEC (IKEv2) Access : you can check or uncheck the boxes for "allow access" and "enable client access"

Correct Answer is D. With Ikev2 you cannot download any updated or packages ir needs an SSL connection