In Cisco ACI, contracts govern which two types of endpoint group communications? (Choose two.)

Contracts are fundamental to ACI's policy model, explicitly defining the allowed communication between any two application EPGs (fvAEPg), regardless of whether they belong to the same tenant (intratenant) or different tenants (intertenant). This granular control ensures security and proper traffic flow.

While ACI manages Layer 2 internal networks via bridge domains, contracts primarily govern communication-between EPGs-, not directly between an EPG and a generic 'Layer 2 internal network' in isolation from EPGs.

Contracts also govern communication between internal ACI fabric application EPGs and external Layer 3 networks, which are represented by External Network Instance EPGs (l3extInstP). This allows for controlled access from applications within the fabric to resources outside the ACI domain, and vice-versa.

Contracts govern communication for all EPG types, not 'strictly' only between out-of-band EPGs, which are specifically for management access and not representative of the broader data plane communication scenarios.