【答题赢鸿鹄币】SERVICE

小乔

How does Cisco TrustSec enable more flexible access controls for dynamic networking environments and data centers?
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint
C. classifies traffic based on advanced application recognition
D. classifies traffic based on the contextual identity of the endpoint rather than its IP address



选详细解释和答案的给予20鸿鹄币奖励

tianlaodadas

答案D
思科原文：The ultimate goal of Cisco TrustSec technology is to assign a tag (known as a Security Group Tag, or SGT) to the
user’s or device’s traffic at ingress (inbound into the network), and then enforce the access policy based on the tag
elsewhere in the infrastructure (in the data center, for example). This SGT is used by switches, routers, and
firewalls to make forwarding decisions.
根据为每个user分配一个tag，即SGT，并且基于SGT做转发，这样做比基于目的地址转发灵活的多，也更好做安全管控。