Which SD-WAN feature carries packets with SGTs across the network?

TrustSec Inline Tagging is the correct answer because it directly embeds Security Group Tags (SGTs) within the data plane packets (e.g., using a custom EtherType or VXLAN Group Policy ID), allowing them to traverse the network with the packet itself. This ensures that security policies based on SGTs can be enforced consistently across different network segments. SXP (Security Group Tag Exchange Protocol) is incorrect because it's a control plane protocol used to exchange SGT-to-IP address mappings between network devices, not to carry SGTs within data packets. QoE (Quality of Experience) is incorrect as it's a feature for monitoring and optimizing application performance, unrelated to SGT transport. SGT Enforcement is a general concept of applying policies based on SGTs, not a mechanism for carrying the SGTs themselves across the network.