Exam 300-715 topic 1 question 11 discussion

How to Configure CTS SGACL Support Enabling SGACL Policy Enforcement Globally To enable SGACL policy enforcement on Cisco TrustSec-enabled routed interfaces, perform this task: enable configure terminal cts role-based enforcement Enabling SGACL Policy Enforcement Per Interface You can enable SGACL enforcement globally and disable on a specific interface with cts role-based enforcement command. SGACL enforcement can also be enabled on specific interfaces without enabling it globally. To enable SGACL policy enforcement on interfaces, perform this task: enable configure terminal interface GigabitEthernet 0/1/1 cts role-based enforcement

How to Configure CTS SGACL Support Enabling SGACL Policy Enforcement Globally To enable SGACL policy enforcement on Cisco TrustSec-enabled routed interfaces, perform this task: enable configure terminal cts role-based enforcement https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/xe-16/sec-usr-cts-xe-16-book/sec-cts-sgacl.html

this Q came out in my exam today.

The answer is D: Procedure Command or Action Purpose Step 1 enable Example: Device# enable Enables privileged EXEC mode. Enter your password if prompted. Step 2 configure terminal Example: Device# configure terminal Enters global configuration mode. Step 3 cts role-based enforcement Example: Device(config)# cts role-based enforcement Enables Cisco TrustSec SGACL policy enforcement on routed interfaces. Step 4 end Example: Device(config)# end Exits global configuration mode and returns to privileged EXEC mode. cisco doc link below: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9200/software/release/16-11/configuration_guide/cts/b_1611_cts_9200_cg/configuring_security_group_acl_policies.html

Enabling SGACL Policy Enforcement Per Interface: You can enable SGACL enforcement globally and disable on a specific interface with cts role-based enforcement command. SGACL enforcement can also be enabled on specific interfaces without enabling it globally. To enable SGACL policy enforcement on interfaces, perform this task: enable configure terminal interface GigabitEthernet 0/1/1 cts role-based enforcement

per Cisco documentation "cts role-based enforcement" is the correct answer https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/xe-16/sec-usr-cts-xe-16-book/sec-cts-sgacl.html

The correct answer is - cts authorization list. The cts authorization list command is used to create a list of security group tags that are allowed to access a network resource. This command can be used to filter traffic based on security group tags on a routed interface. To create a security group tag authorization list, follow these steps: Log in to the network device. Enter the config t command to enter configuration mode. Enter the cts authorization list command. Enter a name for the authorization list. Enter the security group tags that are allowed to access the network resource. Enter the end command to exit configuration mode.

D is correct-- To enable SGACL policy enforcement on Cisco TrustSec-enabled routed interfaces, perform this task: enable configure terminal cts role-based enforcement

d is correct