nerdexam
Cisco

300-320 · Question #515

An engineer must add a new firewall in front of the public web server infrastructure in an ACI network. Which ACI function is used to accomplish this requirement?

The correct answer is D. Layer 4-7 services. Cisco ACI's Layer 4-7 Services (L4-L7 Services) integration allows network engineers to insert physical or virtual service appliances - such as firewalls, load balancers, and intrusion prevention systems - into the traffic path between EPGs using Service Graphs. The Service…

Advanced Data Center Networks

Question

An engineer must add a new firewall in front of the public web server infrastructure in an ACI network. Which ACI function is used to accomplish this requirement?

Options

  • AApplication Network Profile
  • BService chaining
  • CStatic binding
  • DLayer 4-7 services

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    9% (3)
  • D
    86% (30)

Explanation

Cisco ACI's Layer 4-7 Services (L4-L7 Services) integration allows network engineers to insert physical or virtual service appliances - such as firewalls, load balancers, and intrusion prevention systems - into the traffic path between EPGs using Service Graphs. The Service Graph defines how traffic flows through the device(s) and ACI automatically redirects traffic through the appliance. This is the correct mechanism for inserting a firewall inline in an ACI fabric. Service chaining is a broader concept; the specific ACI implementation is called L4-7 Services with Service Graphs.

Topics

#ACI#Layer 4-7 services#service insertion#firewall chaining

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice