When a pre-provision immediacy is used, when is the policy downloaded to the Cisco ACI leaf switch?

With pre-provision immediacy, the Cisco APIC pushes the policy configuration to the leaf switch immediately after a policy change is made, and the leaf switch programs this policy into its hardware policy CAM at that time, before any traffic arrives. This ensures the hardware is ready to enforce policies instantly.

This choice is partially correct but less precise than A, as 'when the policy is downloaded in the leaf' doesn't specify *when* the download happens relative to a change or traffic, which is key for 'pre-provision'.

This describes 'on-demand' immediacy, where policies are programmed only when the first packet matching the policy arrives, not pre-provision immediacy.

While related to VMM integration, the downloading and programming of policies based on immediacy settings is a fabric-level function not directly tied to the ESXi host attachment itself.