Exam 400-007 topic 1 question 129 discussion

Actual exam question from Cisco's 400-007

Question #: 129
Topic #: 1

A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The systems run legacy applications by using hard-coded IP addresses with all HR systems dedicated to .129 to .254 of the 10.20.20.0/24 prefix. Which segmentation method is optimal for the customer?

A. data center perimeter firewalling
B. routed firewalls
C. VACLs on data center switches
D. ACLs on data center switches

Show Suggested Answer

Suggested Answer: C 🗳️

by gcpengineer at March 7, 2023, 12:29 a.m.

Comments

Submit Cancel

Arsenal16

Highly Voted 9 months, 2 weeks ago

Selected Answer: C

VLAN (Virtual LAN) is a concept in which we divide the broadcast domain into smaller broadcast domains logically at layer 2. If we create different VLANs then by default, a host from one VLAN can communicate with all the hosts residing in the same VLAN. If we want some hosts not able to reach other hosts within the same VLAN, then the concept of VLAN Access-list or Private VLAN can be used.

upvoted 5 times

...

sandccie

Most Recent 3 months, 4 weeks ago

Selected Answer: B

The HR system are dedicated to .129 to .254 which can be further segmented to /25 prefix. The question ask which segmentation method is optimal for the customer - not asking to keep the HR systems to stay in the current VLAN with other hosts.

upvoted 1 times

...