300-620 · Question #47
In Cisco ACI, if no contract is attached to the EPG, what is the default behavior?
The correct answer is C. Inter-EPG communication is disabled. In Cisco ACI, inter-EPG communication operates on a whitelist model, meaning that if no contract is explicitly attached between End-Point Groups (EPGs), all communication between them is disabled by default.
Question
In Cisco ACI, if no contract is attached to the EPG, what is the default behavior?
Options
- AAll ICMP packets are allowed in inter-EPG communication.
- BAll TCP ports are allowed in inter-EPG communication.
- CInter-EPG communication is disabled.
- DUnidirectional traffic is allowed for all protocols in inter-EPG communication.
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C90% (28)
Why each option
In Cisco ACI, inter-EPG communication operates on a whitelist model, meaning that if no contract is explicitly attached between End-Point Groups (EPGs), all communication between them is disabled by default.
ACI's default behavior is to deny all inter-EPG communication if no contract is present, including ICMP packets.
ACI's default behavior is to deny all inter-EPG communication if no contract is present, including all TCP ports.
Cisco ACI operates on a 'whitelist' model, where communication between EPGs is denied by default unless a contract explicitly permits it. Without a contract, no traffic is allowed.
Without a contract, no traffic, whether unidirectional or bidirectional, is allowed between EPGs; communication is entirely disabled.
Concept tested: Cisco ACI contract enforcement and default inter-EPG communication behavior
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/basic-configuration/cisco-aci-basic-configuration-guide-5x/cisco-aci-application-centric-infrastructure-overview.html#Cisco_ACI_Contracts
Topics
Community Discussion
No community discussion yet for this question.