nerdexam
Cisco

300-620 · Question #34

In Cisco ACI, which three statements are true about endpoints and endpoint groups? (Choose three.)

The correct answer is A. EPGs contain endpoints that have common policy requirements such as security, virtual machine B. An EPG can be statically configured by an administrator in the Cisco APIC, or dynamically D. Endpoints have an address (identity), a location, attributes (such as version or patch level), and. In Cisco ACI, Endpoint Groups (EPGs) aggregate endpoints with shared policy requirements, and EPGs can be configured statically or dynamically to include various types of endpoints possessing identity, location, and attributes.

ACI Fabric Infrastructure

Question

In Cisco ACI, which three statements are true about endpoints and endpoint groups? (Choose three.)

Options

  • AEPGs contain endpoints that have common policy requirements such as security, virtual machine
  • BAn EPG can be statically configured by an administrator in the Cisco APIC, or dynamically
  • CPolicies are applied to individual endpoints rather than EPGs for better efficiency.
  • DEndpoints have an address (identity), a location, attributes (such as version or patch level), and
  • EEndpoints have attributes and can only be virtual.
  • FAn EPG can only be configured statically by an administrator in the Cisco APIC.

How the community answered

(30 responses)
  • A
    87% (26)
  • C
    7% (2)
  • E
    3% (1)
  • F
    3% (1)

Why each option

In Cisco ACI, Endpoint Groups (EPGs) aggregate endpoints with shared policy requirements, and EPGs can be configured statically or dynamically to include various types of endpoints possessing identity, location, and attributes.

AEPGs contain endpoints that have common policy requirements such as security, virtual machineCorrect

Endpoint Groups (EPGs) are logical constructs in ACI that serve as containers for endpoints (e.g., VMs, bare-metal servers) sharing common network policy requirements, including security, quality of service, and Layer 4 to Layer 7 service integration. This abstraction simplifies policy management.

BAn EPG can be statically configured by an administrator in the Cisco APIC, or dynamicallyCorrect

EPGs can be configured statically by an administrator, where endpoints are assigned based on VLANs, ports, or MAC addresses, or dynamically, leveraging integrations with virtual machine managers like vCenter or OpenStack to automatically assign endpoints based on their attributes.

CPolicies are applied to individual endpoints rather than EPGs for better efficiency.

Policies in ACI are applied to Endpoint Groups (EPGs) as a whole, not to individual endpoints, which is a fundamental aspect of the policy-based automation and scalability that ACI provides.

DEndpoints have an address (identity), a location, attributes (such as version or patch level), andCorrect

An endpoint in ACI is identified by its address (MAC or IP), has a specific network location (e.g., connected to a particular leaf interface), and can possess various attributes such as its operating system, version, or patch level, which can be used for policy application.

EEndpoints have attributes and can only be virtual.

Endpoints in ACI are not limited to only virtual entities; they can also be bare-metal servers, containers, or other network devices connected to the fabric.

FAn EPG can only be configured statically by an administrator in the Cisco APIC.

EPGs can be configured both statically by an administrator and dynamically through integrations with external orchestrators like virtual machine managers, making the 'only be configured statically' statement incorrect.

Concept tested: ACI EPG and Endpoint characteristics and policy application

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/sw/getting-started-guide/cisco-apic-getting-started-guide-501/m-endpoints.html

Topics

#EPGs#endpoints#policy application#static EPG#dynamic EPG

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice