Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 191

A network engineer responsible for the switching environment must provision a new switch to properly propagate security group tags within the TrustSec inline method. Which CLI command must the network engineer enter on the switch to globally enable the tagging of SGTs?

Answer options

• A. cts sxp enable
• B. cts manual
• C. cts role-based sgt-map
• D. cts role-based enforcement

Correct answer: D

Explanation

The correct command, 'cts role-based enforcement', is necessary to activate the role-based security enforcement that enables the propagation of SGTs. The other options do not enable SGT tagging; 'cts sxp enable' is for SXP sessions, 'cts manual' configures manual configuration, and 'cts role-based sgt-map' is used for mapping, not enabling enforcement.