Which two benefits does Cisco TrustSec provide?

Cisco TrustSec provides consistent network segmentation by enforcing policies based on user and device identity, rather than IP addresses or VLANs, allowing for micro-segmentation across the network. This enhances security by limiting lateral movement of threats. It also offers simplified management of network access through its policy-based approach, centralizing access control decisions and reducing the complexity of configuring ACLs on numerous network devices. End-to-end traffic encryption is typically handled by other protocols like IPsec or MACsec, not TrustSec directly. Advanced endpoint protection and unknown file analysis are functions of endpoint security solutions and sandboxing technologies, respectively, not core TrustSec features.