Which policy construct is used in Cisco SD-Access to identify a source or a destination of a traffic flow?IP addressSGTMAC addresspolicy tag

The correct answer is policy tag.

Explanation:

In Cisco Software-Defined Access (SD-Access), policy constructs are utilized to efficiently manage and control network traffic. One of the key components in this framework is the policy tag. Policy tags serve as identifiers for classes of devices or users, enabling precise management of security and quality of service (QoS) policies across the network.

Unlike traditional methods that rely solely on IP or MAC addresses, which can be static and less flexible, policy tags allow for dynamic assignment based on user roles or device types. This enhances network segmentation and visibility, as policy tags can be applied regardless of the physical or virtual environment. By employing policy tags, Cisco SD-Access is able to provide a more granular and context-aware approach to traffic flow identification, which is critical in modern network management for supporting multiple types of traffic and applications.

In summary, while IP addresses and MAC addresses identify devices at a network layer, the policy tag is a higher-level construct that abstracts the endpoint details, allowing for more effective policy enforcement and traffic management in an SD-Access architecture.