Home » Cisco » 300-209 » Which option must be added to the configuration to make sure the users in the sales department cannot access the finance department server?

Which option must be added to the configuration to make sure the users in the sales department cannot access the finance department server?

06/25/2019 – by Mod_GuideK 2

An engineer is configuring clientless SSL VPN. The finance department has a database server that only they should access, but the sales department can currently access it. The finance and the sales departments are configured as separate group-policies. Which option must be added to the configuration to make sure the users in the sales department cannot access the finance department server?
A. tunnel group lock
B. webtype ACL
C. port forwarding
D. VPN filter ACL

SHOW ANSWERS

2 thoughts on “Which option must be added to the configuration to make sure the users in the sales department cannot access the finance department server?”

hshshs says:

01/28/2020 at 8:47 PM

A is the right answer because the group-lock feature on the ASA restricts a user to a specific tunnel group.

Reply
anonymous says:

07/10/2019 at 2:39 AM

Its webtype ACL. Tunnel group-lock only controls which connection profile a user can log in to. The ACL allows or denys access to resources on the network.

Reply

2 thoughts on “Which option must be added to the configuration to make sure the users in the sales department cannot access the finance department server?”

Leave a Reply Cancel reply