300-715 · Question #17
What is a method for transporting security group tags throughout the network?
The correct answer is B. by the Security Group Tag Exchange Protocol. Security Group Tags (SGTs) are transported across the network primarily using the Security Group Tag Exchange Protocol (SXP) or embedded within various encapsulation protocols like VXLAN and MPLS.
Question
What is a method for transporting security group tags throughout the network?
Options
- Aby enabling 802.1AE on every network device
- Bby the Security Group Tag Exchange Protocol
- Cby embedding the security group tag in the IP header
- Dby embedding the security group tag in the 802.1Q header
How the community answered
(17 responses)- A6% (1)
- B88% (15)
- D6% (1)
Why each option
Security Group Tags (SGTs) are transported across the network primarily using the Security Group Tag Exchange Protocol (SXP) or embedded within various encapsulation protocols like VXLAN and MPLS.
802.1AE (MACsec) provides link-layer encryption and integrity, but it doesn't directly transport SGTs as part of its header or mechanism.
The Security Group Tag Exchange Protocol (SXP) is a control plane protocol specifically designed to propagate Security Group Tags (SGTs) from a Cisco ISE-enabled access layer to other network devices. SXP provides a way to carry SGTs across network infrastructure elements that may not natively support SGT embedding in data plane packets.
SGTs are not embedded in the IP header; they are typically carried in specific data plane encapsulations (like VXLAN or MPLS) or propagated via a control plane protocol (SXP).
SGTs are not embedded in the 802.1Q header directly; while they are associated with traffic, the 802.1Q tag primarily carries VLAN information.
Concept tested: Security Group Tag (SGT) transport mechanisms
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_trustsec/configuration/xe-16-10/sec-conn-trustsec-xe-16-10-book/m-sxp.html
Topics
Community Discussion
No community discussion yet for this question.