ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-601 All Questions

View all questions & answers for the 350-601 exam
Go to Exam

Exam 350-601 topic 1 question 55 discussion

Actual exam question from Cisco's 350-601
Question #: 55
Topic #: 1
[All 350-601 Questions]

Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign the servers to different microsegments?

  • A. data center
  • B. VM name
  • C. IP address
  • D. VMM domain
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/virtualization/b_ACI_Virtualization_Guide_3_1_1/ b_ACI_Virtualization_Guide_3_1_1_chapter_0100.html#concept_D527CF389D4440E69A288093516B3643
by Daeh at July 15, 2021, 5:35 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Jota1234
4 days, 17 hours ago
Selected Answer: C
It is not mention that vmware is used and leave IP as left over
upvoted 1 times
...
udo2020
3 months, 2 weeks ago
I was wrong. This is from Cisco Docu: e If you want to use a network-based attribute and classify IP addresses in the same subnet, you must use the MAC-based network attribute. IP-based microsegmented EPGs do not support classification for IP addresses in the same subnet So B should be the answer.
upvoted 1 times
...
udo2020
3 months, 2 weeks ago
The network-based attributes are IP (IP address filter) and MAC (MAC Address Filter). You can apply one or more MAC or IP addresses to a uSeg EPG. So it can also be C!?
upvoted 1 times
...
GuyThatTakesDumps
2 years, 2 months ago
Selected Answer: B
B is the one... although cisco should make a better way to do this..
upvoted 2 times
...
malkovitch
3 years, 4 months ago
B is correct. By the way, It can't be C because IP-based microsegmented EPGs do not support classification for IP addresses in the same subnet.
upvoted 3 times
mauchi
2 years, 7 months ago
"If you want to use a network-based attribute and classify IP addresses in the same subnet, you must use the MAC-based network attribute. IP-based microsegmented EPGs do not support classification for IP addresses in the same subnet. IP-based microsegmented EPGs are supported only when traffic requires Layer 3 routing. If the traffic is bridged, the microsegmentation policy cannot be enforced."
upvoted 2 times
...
...
Daeh
3 years, 5 months ago
B is correct. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/virtualization/Cisco-ACI-Virtualization-Guide-42x/Cisco-ACI-Virtualization-Guide-421_chapter_0100.html
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago