Exam 300-710 topic 1 question 281 discussion

Correct answer is A and E. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/710/management-center-device-config-71/vpn-remote-access.html

A. Now LDAPS with Cisco Duo went to End Of Live. But until February 20, 2025 this bundle worked. "VPN users logging into existing LDAPS applications can still complete two-factor authentication. Duo Support teams will continue to troubleshoot LDAPS applications." https://help.duo.com/s/article/8019?language=en_US E. Rapid Threat Containment support using RADIUS CoA or RADIUS dynamic authorization. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/710/management-center-device-config-71/vpn-remote-access.html#concept_kkw_sv2_2hb

Definitely A and E. C is clearly wrong from the following documentation: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/760/management-center-device-config-76/vpn-remote-access.html?bookSearch=true#:~:text=These%20ports%20must%20not%20be%20used%20on%20the%20threat%20defense%20device%20before%20configuring%20remote%20access%20VPN%20policy

A and C - Cisco is never going to miss an opportunity to sell another one of their services in its certification exam. Configure DUO for LDAP over VPN https://duo.com/docs/ciscoasa-ldap#:~:text=Duo%20Two%2DFactor%20Authentication%20with%20LDAPS%20for%20Cisco%20ASA%20SSL%20VPN%20with%20Browser%20and%C2%A0AnyConnect

Cer2020, what you say is correct but there aren't other correct choises in the answer, so I prefer A

Can't be A - You cannot use a direct connection with the Duo Cloud Service over LDAPS - need an Auth Proxy