An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes.
Which statement describes microsegmentation in this scenario?

A. ACI does not support microsegmentation based on vCenter VM attributes. The network attributes should be used for microsegmentation.

B. When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts.

C. Microsegmentation is supported only using AVE or AVS.

D. An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch.








 

Suggested Answer: D

When you enable Microsegmentation with Cisco ACI, Cisco APIC allocates a pair of VLANs (PVLANs) and configures a PVLAN portgroup on VMware vCenter.
Doing so forces traffic to go to the leaf switch even if two VMs in the same portgroup try to talk to each other
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/virtualization/Cisco-ACI-Virtualization-Guide-42x/Cisco-ACI-Virtualization-

Guide-421_chapter_0100.html

This question is in 350-601 DCCOR exam 
For getting CCNP Data Center Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.