nerdexam
Cisco

300-415 · Question #322

What is the size of SGT data in the metadata header?

The correct answer is B. 16 bits. The Security Group Tag (SGT) data, used for policy enforcement in Cisco TrustSec, is represented as a 16-bit value within the metadata header.

Security and Quality of Service

Question

What is the size of SGT data in the metadata header?

Options

  • A8 bits
  • B16 bits
  • C24 bits
  • D32 bits

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    90% (27)
  • C
    3% (1)

Why each option

The Security Group Tag (SGT) data, used for policy enforcement in Cisco TrustSec, is represented as a 16-bit value within the metadata header.

A8 bits

An 8-bit SGT would only allow for 256 unique security groups, which is typically insufficient for complex enterprise segmentation needs.

B16 bitsCorrect

The Security Group Tag (SGT) is a fundamental component of Cisco TrustSec for group-based policy enforcement, and its data field in a metadata header is standardized as a 16-bit value. This 16-bit identifier allows for granular classification of users and devices into security groups.

C24 bits

A 24-bit SGT is not the standard size defined for Security Group Tags in Cisco TrustSec implementations.

D32 bits

A 32-bit SGT is not the standard size defined for Security Group Tags; while it would allow for a vast number of groups, it would also consume more overhead than necessary for its intended purpose.

Concept tested: TrustSec Security Group Tag (SGT) size

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/trustsec_spt_config.html

Topics

#SGT (Security Group Tag)#TrustSec#Metadata Header#Security Protocol

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice