Correct Answer: B
https://www.cisco.com/c/dam/en/us/solutions/collateral/borderless-networks/trustsec/C07-
730151-00_overview_of_trustSec_og.pdf
Classification In order to use SGTs within your infrastructure, your devices must support SGTs.
All Cisco switches and wireless controllers embedded with Cisco TrustSec technology support the assignment of SGTs. An SGT can be assigned dynamically or statically. Dynamic classification occurs via an authentication sequence, via 802.1x, MAB, or web authentication.
When authentication isn't available, static classification methods are necessary. In static classification the tag maps to something (an IP, subnet, VLAN, or interface) rather than relying on an authorization from the Cisco ISE. This process of assigning the SGT is defined as
"classification." These classifications are then transported deeper into the network for policy enforcement.