300-745 · Question #12
A global hotel chain is using Cisco ISE and Cisco switches to manage the network. The hotel company wants to enhance network security by segmenting users and endpoints. The company must ensure that…
The correct answer is D. Configure TrustSec. Cisco TrustSec provides software-defined segmentation by assigning Security Group Tags (SGTs) to users and devices. This allows policy enforcement that prevents communication between devices in the same VLAN without needing dynamic ACLs. It is the correct approach to achieve…
Question
A global hotel chain is using Cisco ISE and Cisco switches to manage the network. The hotel company wants to enhance network security by segmenting users and endpoints. The company must ensure that devices within the same VLAN cannot communicate with each other. The goal is to prevent cross-communication without the use of dynamic access control lists. Which action must be taken using Cisco ISE to meet the requirement?
Options
- AImplement device posturing.
- BSet up endpoint profiling.
- CEnable identity groups.
- DConfigure TrustSec.
How the community answered
(27 responses)- A7% (2)
- B15% (4)
- C7% (2)
- D70% (19)
Explanation
Cisco TrustSec provides software-defined segmentation by assigning Security Group Tags (SGTs) to users and devices. This allows policy enforcement that prevents communication between devices in the same VLAN without needing dynamic ACLs. It is the correct approach to achieve secure segmentation in this scenario.
Topics
Community Discussion
No community discussion yet for this question.