Question 1 of 30
In a Cisco ACI environment, you are tasked with configuring contract filters to control the traffic between two application profiles: \"WebApp\" and \"DatabaseApp.\" The WebApp profile requires HTTP and HTTPS traffic to be allowed, while the DatabaseApp profile needs to permit only MySQL traffic. Given that the contract filters must be applied to ensure that only the necessary traffic flows between these two profiles, which of the following configurations would best achieve this goal while adhering to the principles of least privilege and security best practices?
Create a contract with two filters: one allowing TCP ports 80 and 443 for HTTP and HTTPS, and another allowing TCP port 3306 for MySQL traffic.
Create a single filter allowing all TCP traffic between the two profiles to simplify the configuration.
Create separate contracts for each application profile, allowing all traffic without any filters to ensure connectivity.
Create a contract with a filter allowing only ICMP traffic to test connectivity between the two profiles.

Preparing for CISCO 300-620 Implementing Cisco Application Centric Infrastructure (DCACI)? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free