350-401 Question 46
Single answerAn organization is deploying Cisco SD-Access to simplify network management and improve security. As part of the deployment, they want to ensure consistent policy enforcement and segmentation across the network. Which component of the Cisco SD-Access architecture is responsible for managing and enforcing policies and virtual network segmentation?
- A
Cisco DNA Center
- B
Fabric Edge Node
- C
Control Plane Node
- D
Identity Services Engine (ISE)
Show answer and explanation
Correct answer: D
Explanation
In Cisco SD-Access, the Identity Services Engine (ISE) plays a critical role in managing and enforcing policies and virtual network segmentation. It works in conjunction with Cisco DNA Center to provide a consistent and secure network experience. ISE enables identity-based access control, ensuring that users and devices are assigned appropriate segmentations and permissions across the network.
- A. Incorrect.
Cisco DNA Center acts as the centralized management and automation platform for SD-Access, but it does not directly handle policy enforcement or segmentation. Its primary role is to configure and monitor the SD-Access environment.
- B. Incorrect.
Fabric Edge Nodes are responsible for connecting endpoints to the SD-Access fabric and forwarding traffic. While they play a role in segmentation, they do not enforce policies.
- C. Incorrect.
Control Plane Nodes manage the mapping of endpoint identities to network locations and handle routing within the fabric. They are not responsible for policy enforcement or segmentation.
- D. Correct.
Identity Services Engine (ISE) is responsible for defining and enforcing policies, including user authentication, authorization, and segmentation within the SD-Access architecture.