400-007: Cisco Certified Design ExpertDemo

By Cisco · Question Mode

QuestionQ275

Network Design

A customer has a functional requirement stating that HR systems in a data center must be segmented from other systems located in that same data center and VLAN. The systems run legacy applications using hard-coded IP addresses. Which segmentation method is suitable and scalable for the customer?

  • A data center perimeter firewalling
  • B routed firewalls
  • C VACLs on data center switches
  • D transparent firewalling
Explanation

VACLs enforce access policy on traffic bridged within a VLAN, so they can segment HR hosts from other hosts that share the same VLAN and IP subnet without changing the legacy applications’ hard-coded addresses. They are applied and enforced in switch hardware, providing a scalable alternative to placing dedicated firewall paths between same-subnet systems.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!