Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be…

The correct answer is C. VM name. In Cisco ACI microsegmentation, when servers share the same EPG and IP subnet, IP address cannot be used as the differentiating attribute (since they're in the same subnet, IP-based separation would require different subnets). VM name is the correct attribute because it is a…

Security

Question

Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign the servers to different microsegments?

Exhibit

Options

AData center
BVMM domain
CVM name
DIP address

How the community answered

(39 responses)

A
8% (3)
B
3% (1)
C
72% (28)
D
18% (7)

Explanation

In Cisco ACI microsegmentation, when servers share the same EPG and IP subnet, IP address cannot be used as the differentiating attribute (since they're in the same subnet, IP-based separation would require different subnets). VM name is the correct attribute because it is a unique, stable identifier assigned to each virtual machine in the VMM (Virtual Machine Manager) domain, allowing ACI to assign individual VMs to different microsegment EPGs regardless of their IP address or subnet. Data center and VMM domain are too broad for per-VM separation. This enforces the security policy of isolating production from development at the microsegment level.

Topics

#Cisco ACI#Microsegmentation#Security Policy#EPG

Community Discussion

No community discussion yet for this question.

Full 350-601 Practice