What are two benefits of using Cisco TrustSec? (Choose two.)

Cisco TrustSec provides consistent network segmentation by using Security Group Tags (SGTs) to classify users and devices, enabling security policies to be applied uniformly across the entire network regardless of their physical location or underlying network infrastructure.

While TrustSec contributes to overall security, its primary mechanism is identity-based segmentation, not universal end-to-end traffic encryption, which would typically be handled by other technologies like MACsec or IPsec.

Advanced endpoint protection against malware is typically the domain of dedicated endpoint security solutions (e.g., Cisco Secure Endpoint), which operate at the host level, rather than a core feature of network segmentation provided by TrustSec.

TrustSec simplifies the management of network access by centralizing the definition of access policies based on SGTs, thereby reducing the need for complex, distributed ACL configurations on numerous network devices.

Unknown file analysis using sandboxing is a feature of advanced malware protection (AMP) solutions, designed to detect sophisticated threats by executing suspicious files in a controlled environment, which is outside TrustSec's scope.