300-170 · Question #96
Which statement describes how to deploy an access policy?
The correct answer is B. The access policy must be created on the Cisco APIC and then pushed to a leaf. Access policies are configured centrally on the Cisco APIC and then pushed down to the leaf switches, which are the enforcement points for endpoint connectivity.
Question
Which statement describes how to deploy an access policy?
Options
- AThe access policy must be created on the leaf and then pushed to the spine.
- BThe access policy must be created on the Cisco APIC and then pushed to a leaf.
- CThe access policy must be created on the Cisco APIC and then pushed to the spine.
- DThe access policy must be created on the spine and then pushed to a leaf.
How the community answered
(33 responses)- A3% (1)
- B88% (29)
- C3% (1)
- D6% (2)
Why each option
Access policies are configured centrally on the Cisco APIC and then pushed down to the leaf switches, which are the enforcement points for endpoint connectivity.
Policies are not created on individual leaf switches and then pushed to spines; the APIC is the central point of configuration.
In Cisco ACI, all policies, including access policies, are configured declaratively on the centralized Cisco APIC cluster. The APIC then renders and pushes these policies to the relevant leaf switches, which are the points of enforcement for connecting endpoints to the fabric.
Policies are created on the APIC but are primarily pushed to leaf switches for enforcement, not spines, as spines are Layer 3 forwarding devices in ACI.
Policies are not created on spine switches; spines are primarily responsible for inter-leaf routing and do not host endpoint access policies.
Concept tested: ACI policy deployment flow
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/apic-getting-started/cisco-apic-getting-started-guide-50x/m-config-fabric-access.html
Topics
Community Discussion
No community discussion yet for this question.