Which Ansible playbook fragment returns the fewest queried ACI endpoint groups?

Question

Options

• A

  - name: GET EPGs
   aci_epg:
   host: "{{ inventory_hostname }}"
   username: "{{ username }}"
   password: "{{ password }}"
   validate_certs: no
   state: query
   ap: internet
  

• B

  - name: GET EPGs
   aci_epg:
   host: "{{ inventory_hostname }}"
   username: "{{ username }}"
   password: "{{ password }}"
   validate_certs: no
   tenant: prod_tenant
   state: query
   ap: internet
  

• C

  - name: GET EPGs
   aci_epg:
   host: "{{ inventory_hostname }}"
   username: "{{ username }}"
   password: "{{ password }}"
   validate_certs: no
   tenant: prod_tenant
   state: query
   epg: web
  

• D

  - name: GET EPGs
   aci_epg:
   host: "{{ inventory_hostname }}"
   username: "{{ username }}"
   password: "{{ password }}"
   validate_certs: no
   tenant: prod_tenant
   state: query
   ap: internet
   epg: web
  

• A
  11% (4)
• B
  6% (2)
• C
  3% (1)
• D
  80% (28)

Explanation

Option D is correct because it provides all three levels of specificity in the ACI object hierarchy - tenant, ap (Application Profile), and epg - which pinpoints exactly one endpoint group, returning the smallest possible result set.

Why the distractors are wrong:

• A omits both tenant and epg, so ACI returns all EPGs across every tenant that have an AP named "internet" - the broadest query of all four.
• B adds tenant but still omits epg, so it returns all EPGs within the internet AP in prod_tenant - more specific than A, but still a collection.
• C specifies tenant and epg but omits ap, meaning ACI searches for an EPG named "web" across all Application Profiles in prod_tenant - potentially multiple results.

Memory tip: Think of ACI's hierarchy as a postal address - Tenant → AP → EPG maps to Country → City → Street. The more address fields you fill in, the fewer results you get back. A query with all three fields (tenant + ap + epg) is a fully addressed letter; omitting any field is like leaving off part of the address and getting mail for an entire city instead.

No community discussion yet for this question.