Wireless network users authenticate to Cisco ISE using 802.1X through a Cisco Catalyst switch. An engineer must create an updated configuration to assign a security group tag to the user's traffic using inline tagging to prevent unauthenticated users from accessing a restricted server. The configurations were performed:
* configured Cisco ISE as a Cisco TrustSec AAA server
* configured the switch as a RADIUS device in Cisco ISE
* configured the wireless LAN controller as a TrustSec device in Cisco ISE
* created a security group tog for the wireless users
* created a certificate authentication profile
* created an identity source sequence
* assigned an appropriate security group tag to the wireless users
* defined security group access control lists to specify an egress policy
* enforced the access control lists on the TrustSec policy matrix in Cisco ISE
* configured TrustSec on the switch
* configured TrustSec on the wireless LAN controller
Which two actions must be taken to complete the configuration? (Choose two.)