Exam 300-715 topic 1 question 315 discussion

Actual exam question from Cisco's 300-715

Question #: 315
Topic #: 1

An engineer configures Cisco ISE and Cisco Catalyst switches to enforce Cisco TrustSec policies. The engineer must use a nondisruptive deployment approach for new devices by deploying TrustSec policies in staging, preproduction, and production. Which action must be taken to complete the configuration?

A. Configure Security Group Tag Exchange Protocol on the new devices and integrate the devices in groups with Cisco ISE.
B. Configure policy matrices in Cisco ISE and assign the new devices to the policy matrices.
C. Integrate the new devices in staging, preproduction, and production network device groups.
D. Configure a different security group tag for the new devices in the staging, preproduction, and production stages.

Show Suggested Answer

Suggested Answer: A 🗳️

by Cachaman at March 27, 2025, 2:50 p.m.

Comments

Submit Cancel

Cachaman

1 month ago

Selected Answer: C

Correct answer is C. The key here is nondisruptive. As soon as you enable SXP, the sw will get all the IP-to-SGT mappings and this could potentially cause issues if for some reason the switch gets the Trustsec policy. Staging: Add all the AAA+CTS Config (Validate local SGTs) Pre-prod: Enable SXP to validate the SW is getting all the SGT info Local+SXP (No TrustSec policy) Prod: Push the TrustSec Policy. A- makes sense, but in may opinion, if you enable SXP day one could be risky

upvoted 1 times

...

Exam 300-715 All Questions

View all questions & answers for the 300-715 exam

Exam 300-715 topic 1 question 315 discussion

Comments

Cachaman

SY0-701