Community Q&A
350-601 — frequently asked questions
Community-vetted answers to 3 common questions about this exam, each traced back to a specific practice question.
Questions from real practice questions
Each Q&A comes from a specific question — follow the link for the full analysisACI uSeg EPG Microsegmentation: Which Intra-EPG Isolation Settings Block Traffic?
Does Allow Micro-Segmentation alone block traffic between a uSeg EPG and its base EPG?
No. Allow Micro-Segmentation enables uSeg EPG creation on the VMM domain association, but the blocking behavior comes from Intra-EPG Isolation being Enforced on the base EPG and left Unenforced on the uSeg EPG.
Why should the uSeg EPG's Intra-EPG Isolation be Unenforced instead of Enforced?
Enforcing it also isolates the attribute-matched VMs from each other inside the subset. The requirement only needs those VMs separated from the rest of the base EPG, so Unenforced preserves intra-subset communication.
What changes if the requirement also blocks traffic among the matching VMs?
Set Intra-EPG Isolation to Enforced on the uSeg EPG as well; that adds isolation within the subset, matching option C's behavior.