An engineer deployed a Cisco ACI fabric and noticed that the fabric learns endpoints from subnets that are not configured on a bridge domain. To meet strict security requirements, the engineer must…

The correct answer is D. Enable Enforce Subnet Check. To ensure the Cisco ACI fabric adheres to strict security protocols and only learns endpoints from configured subnets on a bridge domain, the "Enforce Subnet Check" feature must be enabled. This feature restricts endpoint learning to IP addresses belonging to the subnets…

ACI Packet Forwarding

Question

An engineer deployed a Cisco ACI fabric and noticed that the fabric learns endpoints from subnets that are not configured on a bridge domain. To meet strict security requirements, the engineer must prevent this behavior. Which action must be taken to prevent this behavior?

Options

AActivate Enable Data Plane Endpoint Learning
BImplement Pervasive Gateway
CConfigure Static Binding
DEnable Enforce Subnet Check

How the community answered

(63 responses)

A
5% (3)
B
8% (5)
C
14% (9)
D
73% (46)

Explanation

To ensure the Cisco ACI fabric adheres to strict security protocols and only learns endpoints from configured subnets on a bridge domain, the "Enforce Subnet Check" feature must be enabled. This feature restricts endpoint learning to IP addresses belonging to the subnets defined in the bridge domain associated with the endpoint's VLAN, enhancing security by preventing learning of endpoints from unconfigured subnets.

Topics

#Enforce Subnet Check#endpoint learning#bridge domain#security

Community Discussion

No community discussion yet for this question.

Full 300-630 Practice