300-715 · Question #6
In which two ways can users and endpoints be classified for TrustSec? (Choose two)
The correct answer is A. VLAN C. dynamic. TrustSec classification assigns Security Group Tags (SGTs) to users and endpoints in two broad ways: statically via VLAN (A) - where a specific SGT is mapped to a VLAN - and dynamically (C) - where SGTs are assigned in real time during authentication (802.1X, MAB, or Web Auth)…
Question
In which two ways can users and endpoints be classified for TrustSec? (Choose two)
Options
- AVLAN
- BSXP
- Cdynamic
- DQoS
- ESGACL
How the community answered
(27 responses)- A93% (25)
- B4% (1)
- D4% (1)
Explanation
TrustSec classification assigns Security Group Tags (SGTs) to users and endpoints in two broad ways: statically via VLAN (A) - where a specific SGT is mapped to a VLAN - and dynamically (C) - where SGTs are assigned in real time during authentication (802.1X, MAB, or Web Auth) based on ISE authorization policy results. SXP (B) is a protocol that propagates IP-to-SGT bindings to devices that cannot participate in 802.1X, but it is not itself a classification method. QoS (D) and SGACLs (E) are enforcement or policy mechanisms, not classification methods.
Topics
Community Discussion
No community discussion yet for this question.