Exam 350-401 topic 1 question 1005 discussion

Segmentation becomes more granular when based on roles and identities, rather than IP addresses or VLANs, through the use of SGTs. It also simplifies management in dynamic environments, as policies are decoupled from static specifics such as IP addresses, MAC addresses, or VLANs.

Trustec - simplifies management moving from complex ACL to SGT, and offers segmentation Macsec - encrypts data link by link at L2 using onboard ASICs

B, C & E are features of AMP and firepower.

A,D. TrustSec do not provid eencription or protección for malware/virus

A and D

A and D

Answer A, D TrustSec benefits: Create and manage policies in a simple matrix using plain language Easily manage access control and segmentation across the enterprise while maintaining compliance Control access to critical assets by business role, device type, and location reference: https://www.quora.com/What-is-Cisco-TrustSec

A. Consistent network segmentation - TrustSec provides a robust framework for implementing secure and consistent network segmentation based on identity and policy, rather than relying solely on traditional IP-centric methods. D. Simplified management of network access - By leveraging identity-based access control and simplified policy management, TrustSec makes it easier to manage network access rights, reducing complexity and enhancing security posture. Thus, options A and D are the correct answers, as they directly align with the primary functionalities of Cisco TrustSec.

encryption is hop by hop not end to end but C & E are benefits that are convoyed from this feature of TrustSec"Firewall rules are streamlined by using business-level profiles"

B and D.

why not CE?