Cisco Exam 300-715 Topic 3 Question 79 Discussion

Actual exam question for Cisco's 300-715 exam

Question #: 79
Topic #: 3

An engineer is configuring static SGT classification. Which configuration should be used when authentication is disabled and third-party switches are in use?

AVLAN to SGT mapping

BIP Address to SGT mapping

CL3IF to SGT mapping

DSubnet to SGT mapping

Show Suggested Answer

Suggested Answer: B

https://community.cisco.com/t5/security-knowledge-base/segmentation-strategy/ta-p/3757424: 'The method of sending out IP to SGT mappings from ISE is particularly useful if the access switch does not support TrustSec'

by Diane at Dec 26, 2023, 11:57 PM

Limited Time Offer

25%

Off

Get Premium 300-715 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Harley

1 years ago

Ooh, Subnet to SGT mapping, that's an interesting one. It could work if we have a clear network topology and can assign SGTs based on subnet.

upvoted 0 times

...

Kimberlie

1 years ago

Hmm, I was leaning towards L3IF to SGT mapping. That way we can classify traffic based on the Layer 3 interface, regardless of the authentication status.

upvoted 0 times

Wei

1 years ago

IP Address to SGT mapping could work too.

upvoted 0 times

...

Ardella

1 years ago

But what about IP Address to SGT mapping?

upvoted 0 times

...

Noel

1 years ago

I think VLAN to SGT mapping is the way to go.

upvoted 0 times

...

Ramonita

1 years ago

D) Subnet to SGT mapping

upvoted 0 times

...

Vilma

1 years ago

C) L3IF to SGT mapping

upvoted 0 times

...

Marshall

1 years ago

B) IP Address to SGT mapping

upvoted 0 times

...

Gail

1 years ago

A) VLAN to SGT mapping

upvoted 0 times

...

Vivienne

1 years ago

You know, I was thinking the same thing. IP Address to SGT mapping might be the way to go in this scenario, since we don't have authenticated users.

upvoted 0 times

...

Lashaun

1 years ago

This question seems a bit tricky. With authentication disabled and third-party switches involved, I'm not sure VLAN to SGT mapping would be the best option.

upvoted 0 times

...