QuestionQ323

Security

Question Image

Refer to the exhibit. A secure server that provides services to EPG-2 must be located in EPG-1. The remaining EPGs, EPG-2, EPG-3, and EPG-4, must communicate without any contracts. Which set of actions achieves this goal?

  • A Exclude EPG-2, EPG-3, and EPG-4 from the preferred group. Configure a contract between EPG-1 and EPG-3.
  • B Exclude EPG-2, EPG-3, and EPG-4 from the preferred group. Configure a contract between EPG-2 and EPG-3.
  • C Include EPG-2, EPG-3, and EPG-4 in the preferred group. Configure a contract between EPG-1 and EPG-2.
  • D Include EPG-1 and EPG-2 in the preferred group. Configure a contract between EPG-2 and EPG-3.
Explanation

EPGs included in a Cisco ACI contract preferred group can communicate freely with one another without contracts. Including EPG-2, EPG-3, and EPG-4 therefore provides their required contract-free communication. EPG-1 remains outside that unrestricted group, and an explicit contract between EPG-1 and EPG-2 permits the secure server’s required services while preserving its isolation from the other EPGs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!