Which Cisco DNA Center application enforces group-based access control policies?

The Cisco DNA Center Policy application is responsible for defining, managing, and enforcing group-based access control policies, such as those used with Cisco Identity Services Engine (ISE) and Security Group Tags (SGTs). It allows administrators to create intent-based policies that dictate who can access what, based on user roles, device types, and application requirements. The other options are incorrect because: Provision is used for deploying devices, configuring network services, and automating network setup. Design is used for creating network hierarchy, defining network settings, and planning IP addressing. Assurance is used for monitoring network health, troubleshooting issues, and providing insights into network performance.