nerdexam
Cisco

350-701 · Question #267

In which two ways does Easy Connect help control network access when used with Cisco TrustSec? (Choose two)

The correct answer is C. It allows for the assignment of Security Group Tags and does not require 802.1x to be configured E. It allows for managed endpoints that authenticate to AD to be mapped to Security Groups. This question asks to identify two specific ways Cisco Easy Connect enhances network access control when integrated with Cisco TrustSec.

Submitted by krish.m· Mar 30, 2026Endpoint Security and Access

Question

In which two ways does Easy Connect help control network access when used with Cisco TrustSec? (Choose two)

Exhibit

350-701 question #267 exhibit

Options

  • AIt allows multiple security products to share information and work together to enhance security
  • BIt creates a dashboard in Cisco ISE that provides full visibility of all connected endpoints.
  • CIt allows for the assignment of Security Group Tags and does not require 802.1x to be configured
  • DIt integrates with third-party products to provide better visibility throughout the network.
  • EIt allows for managed endpoints that authenticate to AD to be mapped to Security Groups

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    11% (3)
  • C
    82% (23)
  • D
    4% (1)

Why each option

This question asks to identify two specific ways Cisco Easy Connect enhances network access control when integrated with Cisco TrustSec.

AIt allows multiple security products to share information and work together to enhance security

While Easy Connect works within a security ecosystem, this statement describes a general benefit of security product integration rather than a specific function of Easy Connect itself.

BIt creates a dashboard in Cisco ISE that provides full visibility of all connected endpoints.

Cisco ISE provides a dashboard for endpoint visibility, but the primary function of Easy Connect is related to simplifying SGT assignment and endpoint authentication, not solely the creation of a dashboard.

CIt allows for the assignment of Security Group Tags and does not require 802.1x to be configuredCorrect

Cisco Easy Connect simplifies TrustSec deployments by allowing endpoints to be assigned Security Group Tags (SGTs) without mandating 802.1X authentication on every access port. This enables granular segmentation and policy enforcement in environments where full 802.1X deployment is not feasible or desired.

DIt integrates with third-party products to provide better visibility throughout the network.

While TrustSec can integrate with third-party products, Easy Connect's specific purpose is to simplify SGT assignment and authentication, not primarily to provide better visibility through third-party product integration.

EIt allows for managed endpoints that authenticate to AD to be mapped to Security GroupsCorrect

Easy Connect integrates with existing identity stores like Active Directory (AD) to map managed endpoints that authenticate to AD directly to specific Security Groups. This leverages established identity information to assign appropriate SGTs and enforce role-based access control policies across the network.

Concept tested: Cisco TrustSec Easy Connect features

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/easy_connect/configuration_guide/b_easy_connect_3se_cg/b_easy_connect_3se_cg_chapter_01.html

Topics

#Cisco Easy Connect#Cisco TrustSec#Security Group Tags#Network Access Control

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 350-701 Practice