Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2AutomationHard
An engineer is deploying a new application that requires dynamic network segmentation and policy enforcement based on user groups and device types within a campus network. Which Cisco enterprise architecture component would provide the foundational capabilities for this advanced segmentation and policy control?
- ACisco Prime Infrastructure
- BCisco SD-WAN
- CCisco SD-Access
- DCisco Meraki Dashboard
Show answer & explanationAnswer & explanation
Correct answer: C. Cisco SD-Access
Cisco SD-Access is specifically designed for campus and branch networks to implement intent-based networking, including dynamic network segmentation (Virtual Networks/VNIs) and group-based policy enforcement (Security Group Tags/SGTs) that can adapt to user and device characteristics. This aligns perfectly with the requirement for advanced segmentation and policy control.
Why the other options are wrong
- A. Cisco Prime Infrastructure is a network management system for traditional networks, offering monitoring and basic configuration, but not the software-defined, dynamic segmentation and policy enforcement of SD-Access.
- B. Cisco SD-WAN is designed for wide area network (WAN) connectivity and optimization, not for dynamic segmentation within a campus LAN.
- D. Cisco Meraki Dashboard manages cloud-managed networking devices, offering simplicity but not the deep, identity-driven segmentation capabilities of SD-Access.
Cisco SD-Access Segmentation
Cisco SD-Access implements advanced network segmentation through Virtual Networks (VNIs) for macro-segmentation and Security Group Tags (SGTs) for micro-segmentation. This allows for policy enforcement based on user and device identity, independent of network topology.
- Macro-segmentation with Virtual Networks (VNIs).
- Micro-segmentation with Security Group Tags (SGTs).
- Identity-based policy enforcement.
- Fabric overlay network for simplified operations.
Memory trick: SD-Access: Campus segmentation for users and devices.