What is the main purpose of SXP (Security Group Tag Exchange Protocol) in Cisco TrustSec?

To propagate SGT-to-IP bindings to devices that do not support inline tagging

To encrypt SGT information between TrustSec devices

To replace routing protocols like OSPF and EIGRP

In a TrustSec network, which type of device typically requires SXP to participate in microsegmentation?

A firewall that only performs stateful inspection

A legacy switch or router that cannot tag packets with SGTs

A device that supports inline SGT tagging in hardware

An endpoint that generates traffic

What is a Security Group Tag (SGT) in Cisco TrustSec?

A 16-bit value that identifies a group of users or devices with similar security policies

A VLAN ID used for Layer 2 segmentation

A 32-bit IP address used for routing

A cryptographic key used to encrypt traffic

What is the function of a Security Group Access Control List (SGACL) in TrustSec?

It encrypts traffic between SGTs

It defines which SGTs are allowed to communicate with each other

How does SFT (Scalable Fabric Tagging) forward traffic with embedded SGTs?

It sends the SGT in a separate control packet to the next hop

It inserts the SGT into the Ethernet header of the original packet and forwards it natively

It encapsulates packets in a VXLAN tunnel and adds the SGT in the outer header

It uses MPLS labels to carry the SGT

CCIE Security

Domain 2Objective 6

2.6 Microsegmentation with Cisco TrustSec Using SFT and SXP CCIE-SECURITY Practice Questions (Page 4)

Part of the 2.0 Secure Connectivity and Segmentation domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

11concepts

20%of the exam

Questions 16–20

16foundation · easy
What is the main purpose of SXP (Security Group Tag Exchange Protocol) in Cisco TrustSec?
Select an answer first
17foundation · easy
In a TrustSec network, which type of device typically requires SXP to participate in microsegmentation?
Select an answer first
18foundation · easy
What is a Security Group Tag (SGT) in Cisco TrustSec?
Select an answer first
19foundation · easy
What is the function of a Security Group Access Control List (SGACL) in TrustSec?
Select an answer first
20foundation · easy
How does SFT (Scalable Fabric Tagging) forward traffic with embedded SGTs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.