nerdexam
Cisco

300-620 · Question #257

What is the result of the pcEnPref flag configured on the epg-App_EPG?

The correct answer is C. Access control rules for the private network are applied.. The pcEnPref flag configured on an EPG results in specific access control rules being applied for the private network, allowing communication within its Preferred Group.

ACI Fabric Infrastructure

Question

What is the result of the pcEnPref flag configured on the epg-App_EPG?

Exhibit

300-620 question #257 exhibit

Options

  • AAny configuration changes to the private network are validated.
  • BAccess control rules for the L3Out network are applied.
  • CAccess control rules for the private network are applied.
  • DAny changes to the underlying EPG objects are forbidden.

How the community answered

(25 responses)
  • A
    4% (1)
  • C
    92% (23)
  • D
    4% (1)

Why each option

The `pcEnPref` flag configured on an EPG results in specific access control rules being applied for the private network, allowing communication within its Preferred Group.

AAny configuration changes to the private network are validated.

The `pcEnPref` flag defines communication policy for EPGs in a preferred group, not configuration change validation for the private network.

BAccess control rules for the L3Out network are applied.

While an L3Out is within a private network, the `pcEnPref` flag's primary effect is on communication between EPGs within the preferred group, not specifically general access control rules for the L3Out network.

CAccess control rules for the private network are applied.Correct

The `pcEnPref` flag, when enabled on an EPG, designates that EPG as a member of the Preferred Group for its associated Private Network (VRF). Within the Preferred Group, access control rules are relaxed, allowing unrestricted communication between EPGs that are also members of the same preferred group within that private network without requiring explicit contracts.

DAny changes to the underlying EPG objects are forbidden.

The `pcEnPref` flag is a policy setting for communication within a private network, not a mechanism to prevent configuration changes to EPG objects.

Concept tested: Cisco ACI Preferred Group Enforcement

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/sw/config-guide/contracts/b-Cisco-APIC-Contract-Guide-501.html

Topics

#EPG properties#pcEnPref flag#Access control rules#Private network

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice