What are the main components of Cisco TrustSec?

Question

Options

• ACisco ISE and Enterprise Directory Services
• BCisco ISE network switches, firewalls, and routers
• CCisco ISE and TACACS+
• DCisco ASA and Cisco Firepower Threat Defense

• A
  11% (2)
• B
  84% (16)
• D
  5% (1)

Explanation

Cisco TrustSec Components Explained

Cisco TrustSec is a security architecture that relies on Cisco ISE (Identity Services Engine) as the policy decision point, combined with network enforcement devices - including switches, firewalls, and routers - which act as policy enforcement points by applying Security Group Tags (SGTs) to traffic. Option B is correct because TrustSec requires both the centralized policy engine (ISE) and the network infrastructure devices that carry out those policies across the network.

Why the distractors are wrong:

• A is incorrect because Enterprise Directory Services (like Active Directory) are merely an external identity source that ISE queries - they are not a core TrustSec component.
• C is incorrect because TACACS+ is a protocol used for device administration authentication, not part of the TrustSec policy enforcement framework.
• D is incorrect because while Cisco ASA and Firepower can participate in TrustSec enforcement, they alone do not represent the main components - ISE is the essential management hub missing from this option.

Memory Tip: Think of TrustSec as a "policy + enforcement" duo - ISE is the brain (policy), and the switches/firewalls/routers are the muscles (enforcement). No brain + muscles = no TrustSec!

No community discussion yet for this question.