Which three statements about fitter and contract are true? (Choose three.)

Question

Options

• AA contract can be consumed and provided by as many EPGs as are needed by the network design.
• BA filter can be used by multiple contracts.
• CA filter contains groups of IP subnet
• DA contract can be consumed by a single EPG
• EA contract can be provided by a single EPG
• FA filter contains EtherType, IP protocol, TCP flags, and Layer 4 ports.

• A
  74% (26)
• C
  3% (1)
• D
  14% (5)
• E
  9% (3)

Explanation

In Cisco ACI, contracts are reusable policy objects that define permitted traffic between EPGs, and they support many-to-many relationships - a single contract can be both provided and consumed by as many EPGs as needed (A), making rigid single-EPG restrictions in options D and E factually wrong. Filters are likewise reusable building blocks that can be referenced across multiple contracts (B), which is core to ACI's modular policy design. A filter classifies traffic using Layer 2–4 attributes: EtherType (e.g., IP, ARP), IP protocol (e.g., TCP, UDP), TCP flags, and Layer 4 source/destination ports (F) - not IP subnets, which belong to EPG subnet configurations, making option C incorrect.

Memory tip: Think "Filters = Frame/Packet headers (L2–L4)" - if it's an address (IP subnet), it's not in a filter. And for contracts, remember "Contracts are shared agreements" - just like a legal contract can be signed by many parties, an ACI contract can be provided/consumed by many EPGs simultaneously.

No community discussion yet for this question.