An organization has recently deployed ISE with Trustsec capable Cisco switches and would like to allow differentiated ne

[answerhappygod]

An organization has recently deployed ISE with Trustsec capable Cisco switches and would like to allow differentiated network access based on user groups.
Which solution is most suitable for achieving these goals?

A. Cyber Threat Defense for user group control by leveraging Netflow exported from the Cisco switches and identity information from ISE
B. MACsec in Multiple-Host Mode in order to encrypt traffic at each hop of the network infrastructure
C. Identity-based ACLs preconfigured on the Cisco switches with user identities provided by ISE
D. Cisco Security Group Access Policies to control access based on SGTs assigned to different user groups