In which two ways can users and endpoints be classified for TrustSec? (Choose two)
Correct Answer: A,C
In order to use SGTs within your infrastructure, your devices must support SGTs. All Cisco switches and wireless controllers embedded with Cisco TrustSec technology support the assignment of SGTs. An SGT can be assigned dynamically or statically. Dynamic classification occurs via an authentication sequence, via 802.1x, MAB, or web authentication. When authentication isn't available, static classification methods are necessary. In static classification the tag maps to some thing (an IP, subnet, VLAN, or interface) rather than relying on an authorization from the Cisco ISE. This process of assigning the SGT is defined as "classification." These classifications are then transported deeper into the network for policy enforcement.
https://www.cisco.com/c/dam/en/us/solutions/collateral/borderless networks/trustsec/C07-
730151-00_overview_of_trustSec_og.pdf