300-435 Question 178
Single answerAn enterprise network administrator is deploying Cisco Software-Defined Access (SDA) to simplify network management and segmentation. The administrator wants to ensure the solution supports automated network segmentation and enforces access policies based on user identity and group membership. Which component of SDA is primarily responsible for achieving this functionality?
- A
Cisco DNA Center
- B
Identity Services Engine (ISE)
- C
Fabric Edge Nodes
- D
LISP Control Plane
Show answer and explanation
Correct answer: B
Explanation
In Cisco SDA, Identity Services Engine (ISE) plays a crucial role in enabling automated network segmentation and enforcing access policies. ISE integrates with the SDA fabric to provide group-based policy enforcement and identity-driven network access control. This allows the network to dynamically adapt to user and device identity while maintaining security and segmentation.
- A. Incorrect.
Cisco DNA Center is the central management platform for SDA, but it is primarily responsible for orchestrating and automating workflows rather than enforcing access policies based on identity and group membership.
- B. Correct.
Identity Services Engine (ISE) is responsible for policy enforcement, user identity management, and group-based access control within SDA, making it the correct answer.
- C. Incorrect.
Fabric Edge Nodes are responsible for connecting endpoints to the SDA fabric, but they do not enforce access policies based on identity or group membership.
- D. Incorrect.
LISP Control Plane is used for mapping endpoint identities to their corresponding locations in the network, but it does not enforce access policies based on identity and group membership.