Which two ploicies are used to set this up?

In your Corporate environment, you have various Active Directory groups based o the organizational structure and would like to ensure that users are only able to access certain resources depending on which groups(s)they belong to This policy should apply across the network, You have ISE, ASA and WSA deployed, and would like to ensure the propriate policies are present to ensure access is only based on the user s group membership. Addionally, you don’t want the user to authenticate multiple times to get access.

Which two ploicies are used to set this up? (choose two)
A . Deploy Cisco TrustSec Infrastructure, with ASA and WSA integrated with the ISE to transparently identity user based on SGT assignment. when the user authenticates to the network. the SGTs can then be used in access
B . Deploy ISE, intergrate it with Active Directory, and based on group membership authirize the user to specific VLANs. These VLANs. These VLANs (with specific subnets) should then be used in access policies on the ASA as well as the WSA
C . Deploy a Single Sign-On Infrastructure such as Ping, and Integrate ISE, ASA and WSA with it. Access policies will be applied based on the users group membership retrieved from the authentication Infrastructure.
D . Configure ISE as an SSO Service Provider, and integrate with ASA and WSA using px Grid. ASA and WSA will be able to extract the relevant identity information from ISE to apply to the access policies once the user has authenticated to the network
E . Integrate ISE, ASA and WSA with Active Directory. Once user is authenticated to the network through ISE, the ASSA and WSA will automatically extract the identity information from ad to apply the appropriate access
F . Configure ISE to relay learned SGTs for the authenticates sessions with the binded destination ad dress using SXP ro SXp speakers that will be used to apply access policies at the traffic ingress point for segmentation

View Answer

Answer: A, C