350-401 Question 301
Select 3An enterprise network is deploying Cisco TrustSec to ensure secure communication between devices across their network. The network administrator wants to classify traffic based on Security Group Tags (SGTs) and enforce policy-based access controls. Additionally, the administrator is considering deploying MACsec to secure communication at Layer 2. Which of the following statements are correct about TrustSec and MACsec in this scenario?
- A
Cisco TrustSec uses SGTs to classify traffic and enforce access control policies.
- B
MACsec provides end-to-end encryption at the IP layer across the network.
- C
Cisco TrustSec can operate without requiring 802.1X for SGT propagation.
- D
MACsec encrypts Layer 2 traffic and protects against eavesdropping and tampering.
- E
Cisco TrustSec and MACsec are mutually exclusive and cannot be deployed together.
Show answer and explanation
Correct answers: A, C, D
Explanation
Cisco TrustSec and MACsec are complementary technologies that enhance network security. TrustSec uses SGTs to classify and control traffic, while MACsec provides encryption and integrity at Layer 2. TrustSec does not strictly require 802.1X for SGT propagation, making it flexible for different deployment scenarios. Together, these technologies provide a robust security framework for enterprise networks.
- A. Correct.
Correct: Cisco TrustSec uses SGTs to classify traffic and enforce security policies. SGTs allow for scalable and flexible policy management in the network.
- B. Incorrect.
Incorrect: MACsec operates at Layer 2 and does not provide encryption at the IP layer. It secures Ethernet frames between directly connected devices.
- C. Correct.
Correct: While 802.1X is often used for SGT propagation, Cisco TrustSec can also use alternative methods such as inline tagging or manual configuration.
- D. Correct.
Correct: MACsec secures Layer 2 communication by encrypting Ethernet frames, providing protection against eavesdropping and tampering.
- E. Incorrect.
Incorrect: Cisco TrustSec and MACsec are complementary technologies and can be deployed together. TrustSec adds policy-based access control while MACsec provides Layer 2 encryption.