Exam 350-401 topic 1 question 458 discussion

B is correct https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-726831.pdf

B - Cisco TrustSec and Secure Access Solution Components • FlexAuth (802.1X, WebAuth, MAB): All Cisco Catalyst® switching platforms • Device sensors: Cisco Catalyst 3000 Series; Cisco Catalyst 4500 Series with Supervisor 7(L)-E; Cisco Wireless LAN Controllers • Cisco TrustSec: - Cisco Catalyst 2960-S/SF/C, 3560, 3560-E/C, 3750, 3750-E Series: SXP only - Cisco Catalyst 3560-X, 3750-X Series: SXP, SGT, SGACL - Cisco Catalyst 4500 Series with Supervisor 6(L)-E, 7(L)-E: SXP only - Cisco Catalyst 6500 with Supervisor Engine 2T: SXP, SGT, SGACL - Cisco Nexus 7000 and 5000 Series: SXP, SGT, SGACL - Cisco Nexus 1000v: SXP only - Cisco Wireless LAN Controller 2500, 5500, Cisco Wireless Service Module (WiSM) 2, Cisco Wireless Controller on Cisco Services-Ready Engine (SRE): SXP only - Cisco Integrated Services Router G2: SXP, Security Group Firewall (SG-FW) - Cisco ASR 1000 Series Aggregation Services Router: SXP, SG-FW - Cisco ASA 5500 Series Adaptive Security Appliances: SXP, SG-FW - Virtual Desktop Infrastructure (VDI) and Cisco AnyConnect® Secure Mobility Client with Remote Desktop Protocol (RDP)

c Define security group tags Manage policies with ISE Share policies across domains

Correct me if I am wrong but C makes more sense. "The Cisco TrustSec architecture incorporates three key components: Authenticated networking infrastructure" Each device must be authenticated with the Authentication Server. TACACS+ for example https://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.pdf

C is correct