Exam 350-601 topic 1 question 316 discussion

vzAny contract to VRF or VRF in mode unenforced no?

C would mean changing VRF configration. So A is the correct one,

You would need to assign an EPG to a Preffered group so that rules C out.

The Preferred Group (PG) feature allows you to specify a set of EPGs that are part of the same VRF to allow full communication between them with no need for contracts to be created. https://www.cisco.com/c/en/us/td/docs/dcn/mso/3x/configuration/cisco-aci-multi-site-configuration-guide-301/aci-multi-site-use-case-preferred-group.pdf As the VRF is already created and all EPGs are in same VRF; preferred group will permit communication without the need of additional config

A requires no additional configuration on EPG level. There are several different configuration options available to enable open communication amongst many/all EPGs on a Cisco ACI fabric: ● Contract with vzAny: vzAny represents all EPGs, ESGs and external EPGs on a VRF instance. Providing and consuming an open "permit-any" contract on vzAny allows open communication between all endpoints on a VRF instance. ● Preferred Groups – Assigning multiple EPGs to a Preferred Group allows open communication between the EPGs in the Preferred Group, with the restriction that there can only be one Preferred Group per VRF instance. ● Disable security – We do not recommend this option because configuring the VRF instance to "unenforced" mode converts the VRF instance to "permit only," allowing open communication between all endpoints in the VRF instance. Disabling security implicitly disables security contracts and advanced functionality such as service graphs.

only preferred group does not require additional configuration

I hate this kind of questions, since is telling you: Impement a vrf, but with no further action! so, I assume it means, the only action allowed is the creation of the vrf itself... that statement makes option A invalid, I guess

question is abount implementing a new vrf.

I agree with Minsait.

C is the correct. It says no more action, then we can not configura a contract.

the correct answer - A

The correct answer is A. https://sdncore.com/aci-contracts-basics/#:~:text=of%20this%20post.-,contract%20subject%20and%20scope,-The%20contract%20may

It is A