Which two statements about Cisco ASA authentication using LDAP are true? (Choose two)
A. It uses attribute maps to map the AD memberOf attribute to the cisco ASA Group-Poilcy attribute
B. It uses AD attribute maps to assign users to group policies configured under the WebVPN context
C. The Cisco ASA can use more than one AD memberOf attribute to match a user to multiple group policies
D. It can assign a group policy to a user based on access credentials
E. It can combine AD attributes and LDP attributes to configure group policies on the Cisco ASA
F. It is a closed standard that manages directory-information services over distributed networks
AD is correct
webvpn context is a command in IOS, not ASA. ASA group-policies and LDAP attribute-maps are not configured under WebVPN context.
“This document describes how to configure Lightweight Directory Access Protocol (LDAP) attribute maps to automatically assign the correct VPN policy to a user BASED ON THEIR CREDENTIALS”.
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html
Great answer my firend!