300-415 · Question #322
What is the size of SGT data in the metadata header?
The correct answer is B. 16 bits. The Security Group Tag (SGT) data, used for policy enforcement in Cisco TrustSec, is represented as a 16-bit value within the metadata header.
Question
Options
- A8 bits
- B16 bits
- C24 bits
- D32 bits
How the community answered
(30 responses)- A7% (2)
- B90% (27)
- C3% (1)
Why each option
The Security Group Tag (SGT) data, used for policy enforcement in Cisco TrustSec, is represented as a 16-bit value within the metadata header.
An 8-bit SGT would only allow for 256 unique security groups, which is typically insufficient for complex enterprise segmentation needs.
The Security Group Tag (SGT) is a fundamental component of Cisco TrustSec for group-based policy enforcement, and its data field in a metadata header is standardized as a 16-bit value. This 16-bit identifier allows for granular classification of users and devices into security groups.
A 24-bit SGT is not the standard size defined for Security Group Tags in Cisco TrustSec implementations.
A 32-bit SGT is not the standard size defined for Security Group Tags; while it would allow for a vast number of groups, it would also consume more overhead than necessary for its intended purpose.
Concept tested: TrustSec Security Group Tag (SGT) size
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/trustsec_spt_config.html
Topics
Community Discussion
No community discussion yet for this question.