How is end-to-end microsegmentation enforced in a Cisco SD-Access architecture?

How is end-to-end microsegmentation enforced in a Cisco SD-Access architecture?

A. VLANs are used to segment traffic at Layer 2. B. 5-tuples and ACLs are used to permit or deny traffic. C. SGTs and SGTACLs are used to control access to various resources. D. VRFs are used to segment traffic at Layer 3.