Cisco Certified Internetwork Expert (CCIE) Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Study for the Cisco Certified Internetwork Expert Exam. Prepare with flashcards, multiple-choice questions, and detailed explanations. Equip yourself with the skills needed to become a top-tier network expert. Get ready for your exam!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.

How long can CTS retain SGT mapping entries after a peer disconnects?

1 minute
3 minutes
5 minutes
10 minutes

The correct answer is: 3 minutes

The correct answer regarding the duration of how long Cisco TrustSec (CTS) can retain Security Group Tag (SGT) mapping entries after a peer disconnects is three minutes. This retention period is crucial for maintaining the session context in scenarios where a device disconnects but may reconnect shortly after. The three-minute retention allows for graceful handling of instances where a device might temporarily disconnect and then need to quickly re-establish its SGT mappings without going through the complete authentication and mapping process again. This can optimize performance and reduce unnecessary overhead in environments where devices frequently connect and disconnect, thus enhancing the overall efficiency of the security framework within the network. Understanding the retention policy is important for network design, especially in environments where dynamic connectivity is common, ensuring that security policies can be applied without delay while also maintaining seamless user experiences.