Refer to the exhibit. An engineer created a local user named User on Cisco ACI. The engineer must configure the fabric so that the User can access only common and PROD tenants.
Which set of actions accomplishes the goal?
A.
Add security domain “mgmt.” to User. Associate security domain “mgmt.” under PROD tenant.
B.
Add security domain “Tenant” to User. Associate security domain “Tenant” under PROD tenant.
C.
Add security domain “all” to User. Associate security domain “all” under PROD tenant
D.
Add security domain “common” to User. Associate security domain “common” under PROD tenant.
In Cisco ACI (Application Centric Infrastructure), security domains are used to define access permissions for users. The purpose is to associate users with specific parts of the ACI fabric, such as tenants, VRFs, or application profiles.
In Cisco ACI (Application Centric Infrastructure), security domains are used to define access permissions for users. The purpose is to associate users with specific parts of the ACI fabric, such as tenants, VRFs, or application profiles.
Explanation:
1. Security Domain in Cisco ACI:
• A security domain restricts access to specific parts of the fabric (tenants, application profiles, etc.) for a user or group.
• In this case, the user should only access the common tenant and the PROD tenant.
2. Action Breakdown:
• By adding the “common” security domain to the user, you limit their access to only common-associated resources.
• Associating the “common” domain with the PROD tenant ensures access to the relevant parts of the PROD tenant without unnecessarily broadening access (e.g., using “all” security domains).
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
docoumn
4 days, 4 hours agodocoumn
4 days, 4 hours agodesignated
1 week, 2 days ago