Exam 300-715 topic 1 question 25 discussion

CORRECT A & B Dynamically or Statically

A & B Because "Static" and "Dynamic" are the two ways. VLAN = STATIC 802.1x, MAB, or web authentication = DYNAMIC Classification In order to use SGTs within your infrastructure, your devices must support SGTs. All Cisco switches and wireless controllers embedded with Cisco TrustSec technology support the assignment of SGTs. An SGT can be assigned dynamically or statically. Dynamic classification occurs via an authentication sequence, via 802.1x, MAB, or web authentication. When authentication isn’t available, static classification methods are necessary. In static classification the tag maps to some thing (an IP, subnet, VLAN, or interface) rather than relying on an authorization from the Cisco ISE. This process of assigning the SGT is defined as “classification.” These classifications are then transported deeper into the network for policy enforcement. https://www.cisco.com/c/dam/en/us/solutions/collateral/borderless networks/trustsec/C07-730151-00_overview_of_trustSec_og.pdf

Classification is the mapping of an IP address to a SGT. This IP-to-SGT mapping can be accomplished either dynamically or statically. Dynamic classification is enabled by ISE context-awareness: the “who, what, how, where, and when” particulars of a given user session. Server connections are usually statically classified, based on a server’s expected usage and the security needs. Options for static classification include the mapping of an IP address, VLAN, subnet, or port to a SGT.

A& B are correct

The process of assigning the SGT is called Classification. A SGT can be assigned dynamically as the result of an ISE authorization or it can be assigned via static methods that map the SGT to something, like a VLAN, subnet, IP Address, or port-profile. Dynamic classification is typically used to assign SGT to users because they are mobile. They could be connected from any location via wireless, wired, or vpn. On the other hand, servers tend not to move, so typically static classification methods are used. Dynamic, VLAN

Vlan = Static mapping Dynamic = Pushed from ISE under Authorization rules.

Vlan (Static) and Dynamic

Static (VLAN) and dynamic

Answer is SXPand dynamic.

Statically (IP, subnet, VLAN, etc.) or dynamically. AB

Correct answer is A and B. Two ways of classification: Dynamically or Stattically (VLAN, IP, etc..)

it should be A & D