An engineer must integrate Cisco ACI with VMware vCenter. The virtualization team configured the necessary port groups and assigned them to virtual machines through VMware vCenter. The final port…

Creating a VMM domain with switch mode set to AVE (Application Virtual Edge) is for specific service deployments and does not control the APIC's write access to vCenter port group configurations.

Setting the VMM domain access mode to Read Only Mode ensures that the Cisco APIC can discover and monitor network objects, including port groups, managed by VMware vCenter without having the capability to modify them. This meets the requirement of protecting existing port group configurations from being changed by Cisco APIC, allowing vCenter to retain control.

Configuring the VMM domain with tag collection allows the APIC to collect VM tags, but it does not determine whether the APIC can modify port group settings.

Activating CDP and LLDP in the VMM domain facilitates physical and virtual switch discovery and topology mapping, not the control of write access to vCenter configurations by the APIC.