Which two products are involved in granting safe access to apps? (Choose two.)

Question

Options

• AACI
• BIdentify Services Engine
• CTrustSec
• DDuo
• ESD-Access

• A
  2% (1)
• B
  81% (42)
• C
  12% (6)
• E
  6% (3)

Explanation

Identity Services Engine (ISE) and Duo are both Cisco solutions focused on identity-based access control: ISE enforces network access policies by authenticating and authorizing users/devices before allowing them onto the network, while Duo adds multi-factor authentication (MFA) specifically to verify user identity before granting access to applications. Together, they cover the "safe access to apps" use case from network entry through app-layer authentication.

Why the distractors are wrong:

• A. ACI is Cisco's data center SDN/automation platform - it manages application networking policy, not user identity or app access control.
• C. TrustSec enforces network segmentation using Security Group Tags (SGTs); it's a policy enforcement mechanism, not a product that grants or verifies app access.
• E. SD-Access automates campus network segmentation and group-based policies - it's about network fabric, not authenticating users to applications.

Memory tip: Think "I D"entity - the two answers share the theme of identity: ISE verifies who you are on the network, and Duo verifies who you are at the app. If the product is primarily about who you are, it belongs here.

No community discussion yet for this question.