Which two methods assign Security Group Tags (SGTs) to users in a Cisco TrustSec deployment? (Choose two.)

IEEE 802.1x is a primary method for assigning SGTs. When a device authenticates via 802.1x, the RADIUS server (typically Cisco ISE) can assign an SGT based on the user or device identity. Web authentication (WebAuth) is also used to assign SGTs, often for guest users or devices that cannot perform 802.1x. After successful web authentication, ISE assigns an SGT. DHCP, modular QoS, and policy routing are network services or traffic management techniques, not direct methods for assigning SGTs to users or devices in a TrustSec context. While they might interact with TrustSec policies, they don't perform the initial SGT assignment.