A security engineer has a new TrustSec projct and must create a few static security group tag classifications as proof of concept. Which two classifications must the engineer configure? (Choose two.)

Switch ID is used for identifying the network device itself, not for classifying endpoints with SGTs.

MAC address-based static SGT classification assigns an SGT to endpoints based on their specific MAC address, which is a common and effective method for statically classifying individual devices.

VLAN-based static SGT classification assigns an SGT to all endpoints within a particular VLAN, providing a straightforward way to group devices for security policy enforcement without dynamic authentication.

User ID is typically used for dynamic SGT assignment based on user authentication, not for static classification.

Interface-based classification is often dynamic or part of access policy configuration, but MAC and VLAN are more direct for static SGT assignments.