300-710 SNCF Integration Practice Question
An administrator integrates Cisco Secure Firewall Management Center with Cisco ISE via pxGrid. After successful registration, the administrator wants to create an Access Control policy rule that blocks traffic from users in the 'Contractors' Security Group Tag. Where in the FMC rule creation wizard should the administrator configure this condition?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
In the Access Control Rule, navigate to the Users tab and select the desired Security Group Tag.
In FMC Access Control policies, user and tag-based criteria are added under the 'Users' tab of the rule configuration, where Security Group Tags learned via pxGrid can be selected.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
In the Access Control Rule, navigate to the Users tab and select the desired Security Group Tag.
Why this is correct
The Users tab in FMC Access Control rules allows administrators to filter traffic based on users, user groups, and Security Group Tags (SGTs).
- ✗
In Objects > Object Management > Access Control > SGT Objects.
Why it's wrong here
SGTs learned via pxGrid appear automatically in the Users tab of Access Control rules without needing manual object creation in Object Management.
- ✗
In the Platform Settings policy under Identity Sources.
Why it's wrong here
Platform Settings configure global device behavior, not individual Access Control rule criteria.
- ✗
In the Access Control Rule, navigate to the Networks tab and select Security Groups.
Why it's wrong here
Networks tab is for IP addresses, networks, and Geo-location objects, not SGTs.
About these practice questions
One of 478 original 300-710 SNCF practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This 300-710 SNCF practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-710 SNCF exam.