Exam 300-620 topic 1 question 265 discussion

Actual exam question from Cisco's 300-620

Question #: 265
Topic #: 1

An engineer is implementing an out-of-band (OOB) management access for the Cisco ACI fabric. The secure access must meet these requirements:

• Only GUI and secure shell must be allowed to access the management interfaces of the ACIs.
• The only IP ranges that must be permitted to connect the fabric will be 10.10.10.0/24 and 192.168.15.0/24.

Which configuration set meets these requirements?

A. Implement HTTPS and SSH protocol filters in the OOB contract.
Add the required subnets to the external network instance profile.
B. Set up static IPs on the management interfaces from the required IP range.
Add the required subnets to the external network instance profile.
C. Create an out-of-band EPG in the external management entity.
Associate the management profile with the OOB contract.
D. Create an out-of-band EPG in the common tenant.
Associate the external network instance profile with the OOB contract.

Show Suggested Answer

Suggested Answer: A 🗳️

by zelya19 at March 3, 2024, 12:48 a.m.

Comments

Submit Cancel

zelya19

8 months, 2 weeks ago

Selected Answer: A

Tenants > mgmt > Contracts > Out Of Band Contracts, apply in provided direction to Node Management EPG Tenants > mgmt > External Management Network Instance Profiles -> apply the contract in consumed direction and add subnets Make sure HTTPS and SSH are enabled in Fabric > Fabric Policies > Policies > Pod > Management Access

upvoted 1 times

...

Exam 300-620 All Questions

View all questions & answers for the 300-620 exam

Exam 300-620 topic 1 question 265 discussion

Comments

zelya19

SY0-701