Exam 350-601 topic 1 question 55 discussion

Actual exam question from Cisco's 350-601

Question #: 55
Topic #: 1

Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign the servers to different microsegments?

A. data center
B. VM name
C. IP address
D. VMM domain

Show Suggested Answer

Suggested Answer: B 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/virtualization/b_ACI_Virtualization_Guide_3_1_1/ b_ACI_Virtualization_Guide_3_1_1_chapter_0100.html#concept_D527CF389D4440E69A288093516B3643

by Daeh at July 15, 2021, 5:35 p.m.

Comments

Submit Cancel

Jota1234

7 months, 3 weeks ago

Selected Answer: C

It is not mention that vmware is used and leave IP as left over

upvoted 1 times

...

udo2020

11 months, 1 week ago

I was wrong. This is from Cisco Docu: e If you want to use a network-based attribute and classify IP addresses in the same subnet, you must use the MAC-based network attribute. IP-based microsegmented EPGs do not support classification for IP addresses in the same subnet So B should be the answer.

upvoted 1 times

...

udo2020

11 months, 1 week ago

The network-based attributes are IP (IP address filter) and MAC (MAC Address Filter). You can apply one or more MAC or IP addresses to a uSeg EPG. So it can also be C!?

upvoted 1 times

...

GuyThatTakesDumps

2 years, 10 months ago

Selected Answer: B

B is the one... although cisco should make a better way to do this..

upvoted 2 times

...

malkovitch

3 years, 11 months ago

B is correct. By the way, It can't be C because IP-based microsegmented EPGs do not support classification for IP addresses in the same subnet.

upvoted 3 times

mauchi

3 years, 3 months ago

"If you want to use a network-based attribute and classify IP addresses in the same subnet, you must use the MAC-based network attribute. IP-based microsegmented EPGs do not support classification for IP addresses in the same subnet. IP-based microsegmented EPGs are supported only when traffic requires Layer 3 routing. If the traffic is bridged, the microsegmentation policy cannot be enforced."

upvoted 2 times

...

Daeh

4 years ago

B is correct. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/virtualization/Cisco-ACI-Virtualization-Guide-42x/Cisco-ACI-Virtualization-Guide-421_chapter_0100.html

upvoted 2 times

...