You are designing a NAC security solution that must group machines into objects and provision security policies based on those objects. Which technology do you use?

VXLAN is a Layer 2 overlay encapsulation protocol designed for network virtualization and workload mobility in data centers, not a mechanism for grouping machines into policy objects.

802.1Q is a VLAN tagging standard for trunk links that provides traffic segmentation but does not define role-based grouping or policy provisioning logic.

RBAC (Role-Based Access Control) is the technology that groups machines into logical role objects - such as employee, guest, or contractor - and provisions security policies based on membership in those roles. The NAC policy engine evaluates endpoint identity and posture attributes to assign a role, then enforces the access policy associated with that role. This role-to-policy mapping model is the defining characteristic of RBAC as applied in network access control solutions.

Cisco TrustSec is an implementation framework that uses Security Group Tags (SGTs) to enforce policies but is built on top of RBAC principles rather than being the specific technology that defines the grouping and provisioning model.