Which two options describe how Taboo contracts differ from regular contracts in Cisco ACI? (Choose two)

The correct answer is A. Taboo contract entries are looked up with higher priority than entries in regular contracts F. They are associated with pair of EPGs. Taboo contracts in Cisco ACI are deny-based contracts that are evaluated with higher priority than regular (permit-based) contracts, ensuring that explicit deny rules are enforced before any allow rules are matched (A). Like regular contracts, taboo contracts are applied…

Advanced Data Center Networks

Question

Options

ATaboo contract entries are looked up with higher priority than entries in regular contracts
BTaboo contract entries are looked up with lower priority than entries in regular contracts.
CThey are not associated with one EPG
DThey are not associated with EPGs
ETaboo contract entries are looked up based on administrator configured priority
FThey are associated with pair of EPGs

How the community answered

(26 responses)

A
62% (16)
B
23% (6)
C
4% (1)
D
4% (1)
E
8% (2)

Explanation

Taboo contracts in Cisco ACI are deny-based contracts that are evaluated with higher priority than regular (permit-based) contracts, ensuring that explicit deny rules are enforced before any allow rules are matched (A). Like regular contracts, taboo contracts are applied between a pair of EPGs - a provider EPG and a consumer EPG - so they are indeed associated with a pair of EPGs (F). Options C and D are incorrect because taboo contracts are associated with EPGs. Option B is incorrect because taboo contracts have higher, not lower, priority. Option E is incorrect because the priority is fixed (higher than regular contracts), not administrator-configured.

Topics

#ACI#Taboo contracts#EPG#policy enforcement

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice