300-610 · Question #153
An engineer must integrate Layer 4 to Layer 7 services within Cisco ACI Fabric. The main requirement is to have a single point of configuration for network elements and firewall policies. Which action
The correct answer is D. Define the service graph model as service policy mode.. The requirement for a single point of configuration for Layer 4-7 services and firewall policies within Cisco ACI is best met by using the service graph model in service policy mode.
Question
An engineer must integrate Layer 4 to Layer 7 services within Cisco ACI Fabric. The main requirement is to have a single point of configuration for network elements and firewall policies. Which action meets these requirements?
Options
- ADefine the service graph model as network policy mode.
- BDeploy the firewalls in routed mode with PBR.
- CDeploy the firewalls in transparent mode.
- DDefine the service graph model as service policy mode.
How the community answered
(56 responses)- A4% (2)
- B4% (2)
- C11% (6)
- D82% (46)
Why each option
The requirement for a single point of configuration for Layer 4-7 services and firewall policies within Cisco ACI is best met by using the service graph model in service policy mode.
Network policy mode for service graphs is a legacy or less integrated approach compared to service policy mode, and it does not offer the same level of centralized, policy-driven automation and single point of configuration for L4-7 services within ACI.
Deploying firewalls in routed mode with PBR is a specific deployment method for a firewall, but it does not address the core ACI requirement of a single point of configuration and automated policy integration through service graphs.
Deploying firewalls in transparent mode is a specific deployment method for a firewall, but it does not address the core ACI requirement of a single point of configuration and automated policy integration through service graphs.
In Cisco ACI, the service graph model in service policy mode provides a centralized, policy-driven approach to integrate Layer 4-7 services. This mode allows for the definition and automation of service device deployments (like firewalls) and their associated policies within the ACI fabric, ensuring a single point of configuration for both network elements and security policies.
Concept tested: Cisco ACI Service Graph Modes
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/l4-l7_services/cisco-aci-l4-l7-services-guide-601/m-overview-l4-l7-services.html
Topics
Community Discussion
No community discussion yet for this question.