350-601 Question #428: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. A secure server that provides services to EPG-2 must be placed in EPG-1. The remaining EPGs--EPG-2, EPG-3 and EPG-4--must communicate without any contracts. Which set of actions accomplishes this goal?

Options

• AExclude EPG-2, EPG-3, and EPG-4 from the preferred group.
• BExclude EPG-2, EPG-3, and EPG-4 from the preferred group.
• CInclude EPG-2, EPG-3, and EPG-4 in the preferred group.
• DInclude EPG-1 and EPG-2 in the preferred group.

Explanation

{"question_number": 2, "correct_answer": "C", "explanation": "In Cisco ACI, the Preferred Group feature allows EPGs within the same VRF to communicate with each other without requiring explicit contracts. The requirement states that EPG-2, EPG-3, and EPG-4 must communicate freely without contracts, while EPG-1 (which contains a secure server) must only communicate with EPG-2 via an explicit contract. By including EPG-2, EPG-3, and EPG-4 in the preferred group, those three EPGs communicate freely among themselves. EPG-1 is intentionally excluded from the preferred group, so any communication between EPG-1 and EPG-2 must go through a contract - enforcing the required security boundary. Including EPG-1 in the preferred group would remove the security enforcement, and excluding EPG-2, EPG-3, and EPG-4 would prevent the contract-free communication they require.", "generated_by": "claude-sonnet", "llm_judge_score": 3}

No community discussion yet for this question.