200-155 · Question #141
Which description of a contract is true?
The correct answer is A. It allows or denies communication between EPGs.. In Cisco ACI, a contract is a policy construct that explicitly governs the communication between different Endpoint Groups (EPGs).
Question
Which description of a contract is true?
Options
- AIt allows or denies communication between EPGs.
- BIt defines communication by using subnets.
- CIt contains Layer 2, 3 and 4 policy rules.
- DIt contains a filter and an EPG.
How the community answered
(49 responses)- A88% (43)
- B2% (1)
- C2% (1)
- D8% (4)
Why each option
In Cisco ACI, a contract is a policy construct that explicitly governs the communication between different Endpoint Groups (EPGs).
A contract in Cisco ACI explicitly defines the communication rules and permissions between a provider EPG and a consumer EPG, dictating which traffic is allowed or denied based on associated filters. This mechanism is crucial for microsegmentation and security policies.
While contracts apply to EPGs that exist within bridge domains associated with subnets, the contract itself does not define communication *by using subnets*; it defines rules between EPGs, which are logical endpoint groupings.
A contract contains subjects that reference filters, and these filters specify Layer 3 and Layer 4 policy rules (protocols, ports), but they do not typically contain Layer 2 policy rules directly.
A contract contains a filter, but it does not *contain* an EPG; rather, EPGs *consume* or *provide* a contract to define their communication policies.
Concept tested: Cisco ACI contracts functionality
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/getting-started/cisco-apic-getting-started-guide-50x/m_contracts.html#Cisco_Reference.dita_d288d672-03d6-448f-897d-479bfb291a1a
Topics
Community Discussion
No community discussion yet for this question.