Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Cisco Exam 300-620 Topic 3 Question 83 Discussion

Actual exam question for Cisco's 300-620 exam
Question #: 83
Topic #: 3
[All 300-620 Questions]

Refer to the exhibit.

Refer to the exhibit. A Cisco ACI environment hosts two e-commerce applications. The default contract from a common tenant between different application tiers is used, and the applications work as expected. The customer wants to move to more specific contracts to prevent unwanted traffic between EPGs. A network administrator creates the app-to-db contract to meet this objective for the application and database tiers. The application EPGs must communicate only with their respective database EPGs. How should this contract be configured to meet this requirement?

Show Suggested Answer Hide Answer
Suggested Answer: C

in order to provide connectivity from EPGs from a specific site to networks reachable through a remote site L3OUT, a new stretched external EPG must be added to the existing L3OUT.


Contribute your Thoughts:

Carman
7 days ago
Option C is a bit overkill for this scenario. Using a VRF would be like building a whole new highway system just to keep the cars in their lanes.
upvoted 0 times
...
Felice
10 days ago
Haha, I'd love to see the network admin try to implement the app-to-db contract as a Taboo contract. That would be like putting a 'Do Not Enter' sign on a two-way street!
upvoted 0 times
...
Kristel
13 days ago
I agree, B is the way to go. Scoping the contract to the Application Profile makes the most sense for this use case.
upvoted 0 times
...
Alonzo
13 days ago
I'm not sure, but I think setting the scope to VRF could also work to meet the requirement.
upvoted 0 times
...
Aron
14 days ago
I agree with Rebecka. Setting the scope to Application Profile will ensure that the application EPGs only communicate with their respective database EPGs.
upvoted 0 times
...
Arthur
20 days ago
The correct answer is B. Setting the app-to-db contract scope to the Application Profile will restrict communication between the application and database EPGs within that profile, preventing unwanted traffic between tiers.
upvoted 0 times
Wilda
2 days ago
I think the correct answer is A) Set the app-to-db scope to Global.
upvoted 0 times
...
...
Rebecka
25 days ago
I think the contract should be configured with a scope of Application Profile.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77