Which configuration should be used when authentication is disabled and third-party switches are in use?

An engineer is configuring static SGT classification.

Which configuration should be used when authentication is disabled and third-party switches are in use?
A . VLAN to SGT mapping
B. IP Address to SGT mapping
C. L3IF to SGT mapping
D. Subnet to SGT mapping

View Answer

Answer: B

Explanation:

https://community.cisco.com/t5/security-knowledge-base/segmentation-strategy/ta-p/3757424: "The method of sending out IP to SGT mappings from ISE is particularly useful if the access switch does not support TrustSec"