300-620 DCACI: Implementing Cisco Application Centric Infrastructure

By Cisco · Question Mode

QuestionQ38

ACI Management

Question Image

Refer to the exhibit. A Cisco ACI environment contains two e-commerce applications. The default contract from a common tenant is used between the different application tiers, and the applications operate as expected. The customer wants to move to more-specific contracts to prevent unwanted traffic between EPGs. A network administrator creates the app-to-db contract to meet this objective for the application and database tiers. The application EPGs must communicate only with their respective database EPGs. How should this contract be configured to meet this requirement?

Explanation

Cisco ACI Application Profile contract scope programs consumer-provider rules only for EPGs in the same application profile. Because the two e-commerce applications use separate application profiles, this permits each application EPG to reach its corresponding database EPG while preventing cross-application traffic. VRF scope would allow crosstalk among all EPGs in the shared VRF that consume or provide the contract.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!