nerdexam
Cisco

300-610 · Question #153

An engineer must integrate Layer 4 to Layer 7 services within Cisco ACI Fabric. The main requirement is to have a single point of configuration for network elements and firewall policies. Which action

The correct answer is D. Define the service graph model as service policy mode.. The requirement for a single point of configuration for Layer 4-7 services and firewall policies within Cisco ACI is best met by using the service graph model in service policy mode.

Network Design

Question

An engineer must integrate Layer 4 to Layer 7 services within Cisco ACI Fabric. The main requirement is to have a single point of configuration for network elements and firewall policies. Which action meets these requirements?

Options

  • ADefine the service graph model as network policy mode.
  • BDeploy the firewalls in routed mode with PBR.
  • CDeploy the firewalls in transparent mode.
  • DDefine the service graph model as service policy mode.

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    4% (2)
  • C
    11% (6)
  • D
    82% (46)

Why each option

The requirement for a single point of configuration for Layer 4-7 services and firewall policies within Cisco ACI is best met by using the service graph model in service policy mode.

ADefine the service graph model as network policy mode.

Network policy mode for service graphs is a legacy or less integrated approach compared to service policy mode, and it does not offer the same level of centralized, policy-driven automation and single point of configuration for L4-7 services within ACI.

BDeploy the firewalls in routed mode with PBR.

Deploying firewalls in routed mode with PBR is a specific deployment method for a firewall, but it does not address the core ACI requirement of a single point of configuration and automated policy integration through service graphs.

CDeploy the firewalls in transparent mode.

Deploying firewalls in transparent mode is a specific deployment method for a firewall, but it does not address the core ACI requirement of a single point of configuration and automated policy integration through service graphs.

DDefine the service graph model as service policy mode.Correct

In Cisco ACI, the service graph model in service policy mode provides a centralized, policy-driven approach to integrate Layer 4-7 services. This mode allows for the definition and automation of service device deployments (like firewalls) and their associated policies within the ACI fabric, ensuring a single point of configuration for both network elements and security policies.

Concept tested: Cisco ACI Service Graph Modes

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/l4-l7_services/cisco-aci-l4-l7-services-guide-601/m-overview-l4-l7-services.html

Topics

#Cisco ACI#service graphs#L4-L7 services#firewall integration

Community Discussion

No community discussion yet for this question.

Full 300-610 Practice