300-620 · Question #187
Refer to the exhibit. New e-commerce software is deployed on Cisco ACI fabric. The environment must meet these requirements: - The overall number of contracts must be reduced by reusing the existing…
The correct answer is A. Application Profile. To efficiently reuse contracts, restrict communication within an Application Network Profile (ANP), and prevent communication with other ANPs, the appropriate contract scope must be selected.
Question
Refer to the exhibit. New e-commerce software is deployed on Cisco ACI fabric. The environment must meet these requirements:
- The overall number of contracts must be reduced by reusing the
existing contracts within a VRF when possible.
- The e-commerce software must communicate only with software EPGs that
are part of the same ANP.
- The e-commerce software must be prevented from communicating with
applications in different ANPs. Which scope must be selected to meet these requirements?
Exhibit
Options
- AApplication Profile
- BEndpoint Group
- CTenant
- DGlobal
How the community answered
(52 responses)- A71% (37)
- B19% (10)
- C4% (2)
- D6% (3)
Why each option
To efficiently reuse contracts, restrict communication within an Application Network Profile (ANP), and prevent communication with other ANPs, the appropriate contract scope must be selected.
Setting the contract scope to Application Profile (ANP) ensures that contracts are only enforced between EPGs within the same Application Network Profile. This directly meets the requirements by allowing contracts to be reused across EPGs within the ANP, restricting communication only to EPGs within that ANP, and implicitly preventing communication with applications in different ANPs.
Endpoint Group (EPG) is not a valid scope for contracts; contracts are defined between EPGs, but the scope determines where the contract definition can be applied or reused.
Tenant scope allows contracts to be reused across different ANPs within the same tenant, which would not prevent communication with applications in different ANPs if they are still within the same tenant, contradicting a requirement.
Global scope allows contracts to be reused across all tenants and ANPs, which directly contradicts the requirement to prevent communication with applications in different ANPs by making the contract universally applicable.
Concept tested: ACI contract scope for ANP isolation
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/config-guide/cisco-aci-virtual-application-centric-infrastructure-configuration-guide-501.html
Topics
Community Discussion
No community discussion yet for this question.