Which component of Cisco SD-Access integrates with Cisco DNA Center to perform policy segmentation and enforcement through the use of security group access control lists and security group tags?

The correct answer is C. Cisco Identity Services Engine. Cisco Identity Services Engine (ISE) is the correct answer. In the SD-Access architecture, ISE is the policy engine that integrates with Cisco DNA Center to authenticate users and devices, assign Security Group Tags (SGTs) based on identity and context, and enforce Security…

Advanced Enterprise Campus Networks

Question

Options

ACisco Application Policy Infrastructure Controller Enterprise Module
BCisco Network Data Platform
CCisco Identity Services Engine
DCisco TrustSec

How the community answered

(29 responses)

A
3% (1)
B
7% (2)
C
86% (25)
D
3% (1)

Explanation

Cisco Identity Services Engine (ISE) is the correct answer. In the SD-Access architecture, ISE is the policy engine that integrates with Cisco DNA Center to authenticate users and devices, assign Security Group Tags (SGTs) based on identity and context, and enforce Security Group Access Control Lists (SGACLs) for micro-segmentation. ISE is the authoritative source of policy decisions in the SD-Access fabric. Option A (APIC-EM) is a legacy controller replaced by DNA Center and is not involved in SGT-based enforcement. Option B (Cisco Network Data Platform) is an analytics and assurance component, not a policy enforcement engine. Option D (Cisco TrustSec) is the overarching framework/technology for SGT-based segmentation, but ISE is the specific product component that implements and enforces TrustSec policies.

Topics

#SD-Access#Cisco ISE#Policy Enforcement#Security Segmentation

Community Discussion

No community discussion yet for this question.

Full 300-420 Practice