Exam 1Y0-231 topic 1 question 120 discussion

A or c, but i go with c cause i habe done this

This is a tricky question but it's D for me. A. configuring an nFactor authentication policy can only be bound to a authentication profile and not to the Gateway vServer. B. creating a SAML IDP policy could be bound to the advanced policy of the Gateway vServer BUT will only work together with the authentication profile. "Important: The plug-in does not support SAML authentication when SAML policies are bound directly to the VPN virtual server, that is non-nFactor authentication." C. configuring a RADIUS authentication policy and if that is the only policy with a tradition RADIUS auth, then I would not be a two-way auth. Thing is, it could be with some products like the NPS Extension for MFA. D. adding an authentication profile and that is based on an nFactor authentication which normally at least two-way auth.