nerdexam
Cisco

300-620 · Question #329

Refer to the exhibit. An engineer must disable the communication between the two backup servers in the backup EPG. Which action accomplishes this goal?

The correct answer is D. Set Intra EPG Isolation to Enforced.. To disable communication between two backup servers located within the same EPG, the Intra EPG Isolation feature must be set to Enforced.

ACI Fabric Infrastructure

Question

Refer to the exhibit. An engineer must disable the communication between the two backup servers in the backup EPG. Which action accomplishes this goal?

Exhibit

300-620 question #329 exhibit

Options

  • ASet Preferred Group Member to Excluded.
  • BSet the physical domain to None.
  • CSet a different static binding for the encap VLAN.
  • DSet Intra EPG Isolation to Enforced.

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    15% (8)
  • C
    9% (5)
  • D
    72% (39)

Why each option

To disable communication between two backup servers located within the same EPG, the Intra EPG Isolation feature must be set to Enforced.

ASet Preferred Group Member to Excluded.

Preferred Group Member settings influence contract application between EPGs and do not provide isolation for endpoints within the same EPG.

BSet the physical domain to None.

Setting the physical domain to None would disassociate the EPG from the physical network, preventing its deployment, but does not enforce isolation between active endpoints within it.

CSet a different static binding for the encap VLAN.

Setting a different static binding for the encap VLAN would only change the VLAN used for the EPG's access port, which does not inherently enforce isolation between endpoints within that EPG.

DSet Intra EPG Isolation to Enforced.Correct

Intra EPG Isolation, when set to Enforced, prevents endpoints that are members of the same EPG from communicating with each other. This feature creates a virtual firewall effect within the EPG, blocking traffic between devices like the backup servers described.

Concept tested: Cisco ACI Intra EPG Isolation enforcement

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/sw/management/cisco-apic-management-guide-5x/m-intra-epg-isolation.html

Topics

#Intra EPG Isolation#EPG communication#security policy#microsegmentation

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice