Cisco Exam 300-620 Topic 12 Question 51 Discussion

Actual exam question for Cisco's 300-620 exam

Question #: 51
Topic #: 12

An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

Apolicy In the management tenant

Bpolicy on the management VLAN

CACL on the management interface of the APIC

DACL on the console interface

Show Suggested Answer

Suggested Answer: C

by Erick at Jan 10, 2023, 12:24 AM

Limited Time Offer

25%

Off

Get Premium 300-620 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chandra

2 months ago

I'm leaning towards option C as well. It makes the most sense to control the management access at the interface lChandral, where we can specifically limit the allowed protocols.

upvoted 0 times

Alex

4 days ago

Yes, that way we can restrict management access to just SSH and HTTPS from the NOC subnet.

upvoted 0 times

...

Genevive

5 days ago

I agree, configuring the ACL on the management interface of the APIC is the most logical solution.

upvoted 0 times

...

Catarina

6 days ago

I think option C is the best choice. It allows us to control access at the interface level.

upvoted 0 times

...

Lenita

2 months ago

Haha, I bet the engineer who wrote this question has a really good sense of humor. Configuring an ACL on the console interface? That's like trying to lock the front door while leaving the back door wide open!

upvoted 0 times

Joanne

5 days ago

D) ACL on the console interface

upvoted 0 times

...

Malissa

7 days ago

C) ACL on the management interface of the APIC

upvoted 0 times

...

Devorah

9 days ago

B) policy on the management VLAN

upvoted 0 times

...

Sarah

16 days ago

A) policy In the management tenant

upvoted 0 times

...

Nancey

1 months ago

B) policy on the management VLAN

upvoted 0 times

...

Francine

2 months ago

That's a good point, it would be pretty funny to configure the ACL on the console interface!

upvoted 0 times

...

Carlota

2 months ago

C) ACL on the management interface of the APIC

upvoted 0 times

...

Candida

2 months ago

A) policy In the management tenant

upvoted 0 times

...

Alica

2 months ago

Option D is a bit of a stretch, don't you think? Why would we need to configure an ACL on the console interface? That's just silly.

upvoted 0 times

...

Felix

2 months ago

I'm not sure about this one. Wouldn't it make more sense to configure the policy in the management tenant? That seems like the logical place to handle management access.

upvoted 0 times

...

Kerry

2 months ago

I think the correct answer is option C. The policy should be configured as an ACL on the management interface of the APIC to limit access to SSH and HTTPS only.

upvoted 0 times