An engineer is troubleshooting VPN connectivity issues between a PC and ASA using Cisco AnyConnect IPsec IKEv2. Which requirement must be satisfied for proper functioning?
A. PC certificate must contain the server-auth EKU.
B. The connection must use EAP-AnyConnect.
C. The SAN must be used as the CN for the ASA-side certificates.
D. profile and binary updates must be downloading over IPSec
b is the right answer
https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/113692-technote-anyconnect-00.html