Cisco 300-715 Exam - Topic 3 Question 79 Discussion

Actual exam question for Cisco's 300-715 exam

Question #: 79
Topic #: 3

An engineer is configuring static SGT classification. Which configuration should be used when authentication is disabled and third-party switches are in use?

AVLAN to SGT mapping

BIP Address to SGT mapping

CL3IF to SGT mapping

DSubnet to SGT mapping

Show Suggested Answer

Suggested Answer: B

https://community.cisco.com/t5/security-knowledge-base/segmentation-strategy/ta-p/3757424: 'The method of sending out IP to SGT mappings from ISE is particularly useful if the access switch does not support TrustSec'

by Diane at Dec 26, 2023, 11:57 PM

Limited Time Offer

25%

Off

Get Premium 300-715 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Avery

9 months ago

I thought VLAN mapping was the standard for third-party switches.

upvoted 0 times

...

Felice

9 months ago

Wait, are we sure authentication being disabled means we can't use Subnet to SGT mapping?

upvoted 0 times

...

Carin

10 months ago

No way, L3IF to SGT mapping is the best choice here!

upvoted 0 times

...

Junita

10 months ago

I think IP Address to SGT mapping could work too.

upvoted 0 times

...

Edgar

10 months ago

Definitely VLAN to SGT mapping for this scenario.

upvoted 0 times

...

Bulah

10 months ago

Subnet to SGT mapping sounds familiar, but I don't know if it's the best choice here. I think I saw a similar question where it was used, but I can't recall the details.

upvoted 0 times

...

Dudley

11 months ago

I recall something about L3IF to SGT mapping being used, but I can't remember if that applies when authentication is off. It feels a bit fuzzy.

upvoted 0 times

...

Tawny

11 months ago

I'm not entirely sure, but I feel like VLAN to SGT mapping could also work in this scenario. It was mentioned in a practice question about static SGT configurations.

upvoted 0 times

...

Kaitlyn

11 months ago

I think I remember that when authentication is disabled, we might need to rely on IP Address to SGT mapping. It seems like a common approach for third-party switches.

upvoted 0 times

...

Teri

11 months ago

Subnet to SGT mapping could work, but I'm leaning more towards the VLAN to SGT mapping based on the details provided in the question.

upvoted 0 times

...

Moon

11 months ago

L3IF to SGT mapping? I'm not sure I fully understand that option. I'll have to review the material on that before deciding.

upvoted 0 times

...

Kris

11 months ago

IP Address to SGT mapping seems like the logical choice here. That's how I'd approach this type of question.

upvoted 0 times

...

Geraldo

11 months ago

Hmm, I'm a bit unsure about this one. I'll need to think it through carefully to make sure I don't miss anything.

upvoted 0 times

...

Sylvie

11 months ago

This one seems straightforward. I think the answer is VLAN to SGT mapping since authentication is disabled and third-party switches are involved.

upvoted 0 times

...

Lisha

11 months ago

Okay, let me think this through. The key here is that the customer has specific requirements that need to be manually booked. That rules out options A and B, which are more automated. I think option D, building a rule to assign the customer-preferred resource, could be the way to go.

upvoted 0 times

...

Daniel

11 months ago

This seems like a straightforward question about pay programs and employee learning curves. I think I can approach this systematically and come up with a good answer.

upvoted 0 times

...

William

11 months ago

Based on my understanding, the key tasks you can do with the Smart View Planning Provider are opening data forms, submitting data, and running business rules. I'm pretty confident those are the right three options for this question.

upvoted 0 times

...

Harley

2 years ago

Ooh, Subnet to SGT mapping, that's an interesting one. It could work if we have a clear network topology and can assign SGTs based on subnet.

upvoted 0 times

...

Kimberlie

2 years ago

Hmm, I was leaning towards L3IF to SGT mapping. That way we can classify traffic based on the Layer 3 interface, regardless of the authentication status.

upvoted 0 times

Wei

2 years ago

IP Address to SGT mapping could work too.

upvoted 0 times

...

Ardella

2 years ago

But what about IP Address to SGT mapping?

upvoted 0 times

...

Noel

2 years ago

I think VLAN to SGT mapping is the way to go.

upvoted 0 times

...

Ramonita

2 years ago

D) Subnet to SGT mapping

upvoted 0 times

...

Vilma

2 years ago

C) L3IF to SGT mapping

upvoted 0 times

...

Marshall

2 years ago

B) IP Address to SGT mapping

upvoted 0 times

...

Gail

2 years ago

A) VLAN to SGT mapping

upvoted 0 times

...

Vivienne

2 years ago

You know, I was thinking the same thing. IP Address to SGT mapping might be the way to go in this scenario, since we don't have authenticated users.

upvoted 0 times

...

Lashaun

2 years ago

This question seems a bit tricky. With authentication disabled and third-party switches involved, I'm not sure VLAN to SGT mapping would be the best option.

upvoted 0 times

...