Exam 300-730 topic 1 question 155 discussion

TND only checks if the device is safe and network is clear for connection. SBL connects device to headend prior to any device OS logon prompt or user login happens.

"B" is the correct answer here.

B is the correct answer

B is the correct answer

B I think the keywords are 'automatic' and 'when not on company network'. Automatic VPNs are usually machine cert based. SBL itself does not know if it is a company network or not. TND is required to detect that.

Trusted Network Detection (TND) gives you the ability to have AnyConnect automatically disconnect a VPN connection when the user is inside the corporate network (the trusted network) and start the VPN connection when the user is outside the corporate network (the untrusted network). https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html#id_100236

B is the good one

"A company-owned laptop": this excludes user certificates. You want the laptoptop to connect, regardless of the user logging on. Considering the "automatically establishes a VPN", SBL makes sence. So I'd say C.

not sure. It makes sense B - company client machine TND : Trusted Network Detection SBL : Start Before Logon