Which option must be configured to allow SNMP communications and traffic?

Question

Options

• Aan out-of-band bridge domain
• Ban out-of-band contract
• Can out-of-band policy
• Dan out-of-band management interface

• A
  7% (2)
• B
  70% (19)
• C
  19% (5)
• D
  4% (1)

Explanation

In Cisco ACI, contracts control what traffic is permitted between endpoints - even in out-of-band management scenarios. An out-of-band contract must be explicitly configured with a filter allowing SNMP (UDP 161/162); without it, ACI's default-deny model blocks SNMP traffic regardless of other configurations.

Why the distractors are wrong:

• A (bridge domain): Bridge domains handle Layer 2/3 forwarding constructs for tenant networks - they don't define which protocols are permitted.
• C (out-of-band policy): There is no discrete "out-of-band policy" object in ACI that governs traffic permissions; this conflates policy with contracts.
• D (management interface): The out-of-band management interface provides the path for management traffic to reach the fabric, but it doesn't authorize specific protocols like SNMP - that's the contract's job.

Memory tip: Think of contracts as security guards - the management interface is the door, but the contract is the guest list. SNMP only gets in if it's on the list (contract filter).

No community discussion yet for this question.