Exam 300-730 topic 1 question 9 discussion

The Alias help to map, that is correct, however, the questions say that you are not using the tunnel list feature, and that feature shows the Aliases of all the connection profiles, if you are not using that feature, there is no way you can see the Alias, therefore you cannot map to any VPN Cert maps and Group URLs are the correct answer

B and D

To map a VPN session to a tunnel group without using the tunnel-group list, you can use the parameters certificate mapping and group-url. These parameters help in associating a VPN session with a specific tunnel group. So, the correct combination is: Certificate mapping Group-url Certificate mapping allows you to map user attributes to specific connection profiles based on information present in the user's certificate. The group-url is a parameter that allows users to connect to a specific group URL, which, in turn, is associated with a particular tunnel group. Therefore, the correct answer is certificate mapping and group-url.

BD is correct https://integratingit.wordpress.com/2022/03/23/asa-group-url-and-alias/

AD is correct

BD A. group-alias --> This is a tunnel-group list on the logon page but the question asked not to use the tunnel-group list. B. certificate map --> Can assign the user to a tunnel-group without the tunnel-group list. C. optimal gateway selection --> Completely different feature. D. group-url --> Can assign the user to a tunnel-group without the tunnel-group list. E. AnyConnect client version --> Can be used in certain decisions in DAP but i don't think it can assign a tunnel group based on client version.

A and D

I think A and D are correct: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html