nerdexam
Cisco

300-610 · Question #164

An engineer must design a solution based on Cisco Nexus 7709 Switches. The solution must connect test and development network segments and separate the enterprise applications from the production netw

The correct answer is C. 1. Assign a separate VDC for the testing and development environments.. To achieve complete separation of routing instances and IP stacks, support deep packet inspection between environments, and allow the allocation of additional physical interfaces on a Cisco Nexus 7709 switch, assigning a separate Virtual Device Context (VDC) for each environment

Data Center Network Design

Question

An engineer must design a solution based on Cisco Nexus 7709 Switches. The solution must connect test and development network segments and separate the enterprise applications from the production network. The network security team requires routing instances and the IP stack to be completely separated from each other and for traffic between the environments to undergo a deep packet inspection. The development team also requests the ability to allocate additional physical interfaces from the Cisco Nexus 7709 device in each environment. Which solution meets these requirements?

Options

  • A
    1. Create a VRF for the testing and development environments.
  • B
    1. Enable new routing instances for the testing and development environments in the same VDC.
  • C
    1. Assign a separate VDC for the testing and development environments.
  • D
    1. Create a separate VRF for the testing and development environments.

How the community answered

(34 responses)
  • A
    15% (5)
  • B
    9% (3)
  • C
    74% (25)
  • D
    3% (1)

Why each option

To achieve complete separation of routing instances and IP stacks, support deep packet inspection between environments, and allow the allocation of additional physical interfaces on a Cisco Nexus 7709 switch, assigning a separate Virtual Device Context (VDC) for each environment is the most appropriate solution.

A1. Create a VRF for the testing and development environments.

Creating a VRF (Virtual Routing and Forwarding) isolates routing instances but shares the same physical device's control plane, data plane, and physical interfaces, which does not meet the requirement for 'IP stack to be completely separated' and independent physical interface allocation.

B1. Enable new routing instances for the testing and development environments in the same VDC.

Enabling new routing instances (VRFs) within the same VDC provides routing isolation but shares the underlying control plane, data plane, and physical resources, failing to meet the demand for complete IP stack separation and independent physical interface allocation.

C1. Assign a separate VDC for the testing and development environments.Correct

Assigning a separate VDC (Virtual Device Context) for the testing and development environments on a Cisco Nexus 7709 switch provides complete separation of routing instances, IP stacks, and dedicated physical interfaces, fulfilling all requirements. VDCs create truly isolated logical switches, allowing for full traffic isolation and the ability to insert a firewall between VDCs for deep packet inspection.

D1. Create a separate VRF for the testing and development environments.

Creating a separate VRF provides routing isolation but does not offer the complete physical and resource separation of a VDC, which is critical for allocating additional physical interfaces and full IP stack isolation.

Concept tested: Cisco Nexus VDC for Multi-Tenancy and Isolation

Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus7000/sw/virtual_device_contexts/config/guide/n7k_vdc_config/vdc_overview.html

Topics

#Nexus 7000#VDC#network segmentation#security zones

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-610 Practice