300-620 · Question #329
Refer to the exhibit. An engineer must disable the communication between the two backup servers in the backup EPG. Which action accomplishes this goal?
The correct answer is D. Set Intra EPG Isolation to Enforced.. To disable communication between two backup servers located within the same EPG, the Intra EPG Isolation feature must be set to Enforced.
Question
Refer to the exhibit. An engineer must disable the communication between the two backup servers in the backup EPG. Which action accomplishes this goal?
Exhibit
Options
- ASet Preferred Group Member to Excluded.
- BSet the physical domain to None.
- CSet a different static binding for the encap VLAN.
- DSet Intra EPG Isolation to Enforced.
How the community answered
(54 responses)- A4% (2)
- B15% (8)
- C9% (5)
- D72% (39)
Why each option
To disable communication between two backup servers located within the same EPG, the Intra EPG Isolation feature must be set to Enforced.
Preferred Group Member settings influence contract application between EPGs and do not provide isolation for endpoints within the same EPG.
Setting the physical domain to None would disassociate the EPG from the physical network, preventing its deployment, but does not enforce isolation between active endpoints within it.
Setting a different static binding for the encap VLAN would only change the VLAN used for the EPG's access port, which does not inherently enforce isolation between endpoints within that EPG.
Intra EPG Isolation, when set to Enforced, prevents endpoints that are members of the same EPG from communicating with each other. This feature creates a virtual firewall effect within the EPG, blocking traffic between devices like the backup servers described.
Concept tested: Cisco ACI Intra EPG Isolation enforcement
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/sw/management/cisco-apic-management-guide-5x/m-intra-epg-isolation.html
Topics
Community Discussion
No community discussion yet for this question.
