An organization has recently deployed ISE with Trustsec capable Cisco switches and would like
to allow differentiatednetwork access based on user groups. Which solution is most suitable
for achieving these goals?
A.
Cyber Threat Defense for user group control by leveraging Netflow exported from the Cisco
switches and identity information from ISE
B.
MACsec in Multiple-Host Mode in order to encrypt traffic at each hop of the network
infrastructure
C.
Identity-based ACLs preconfigured on the Cisco switches with user identities provided by ISE
D.
Cisco Security Group Access Policies to control access based on SGTs assigned to different
user groups