300-620 · Question #257
What is the result of the pcEnPref flag configured on the epg-App_EPG?
The correct answer is C. Access control rules for the private network are applied.. The pcEnPref flag configured on an EPG results in specific access control rules being applied for the private network, allowing communication within its Preferred Group.
Question
What is the result of the pcEnPref flag configured on the epg-App_EPG?
Exhibit
Options
- AAny configuration changes to the private network are validated.
- BAccess control rules for the L3Out network are applied.
- CAccess control rules for the private network are applied.
- DAny changes to the underlying EPG objects are forbidden.
How the community answered
(25 responses)- A4% (1)
- C92% (23)
- D4% (1)
Why each option
The `pcEnPref` flag configured on an EPG results in specific access control rules being applied for the private network, allowing communication within its Preferred Group.
The `pcEnPref` flag defines communication policy for EPGs in a preferred group, not configuration change validation for the private network.
While an L3Out is within a private network, the `pcEnPref` flag's primary effect is on communication between EPGs within the preferred group, not specifically general access control rules for the L3Out network.
The `pcEnPref` flag, when enabled on an EPG, designates that EPG as a member of the Preferred Group for its associated Private Network (VRF). Within the Preferred Group, access control rules are relaxed, allowing unrestricted communication between EPGs that are also members of the same preferred group within that private network without requiring explicit contracts.
The `pcEnPref` flag is a policy setting for communication within a private network, not a mechanism to prevent configuration changes to EPG objects.
Concept tested: Cisco ACI Preferred Group Enforcement
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/sw/config-guide/contracts/b-Cisco-APIC-Contract-Guide-501.html
Topics
Community Discussion
No community discussion yet for this question.
