Database Server Microsegmentation
Question
Several production and development database servers exist in the same EPG and IP subnet.
The IT security policy is to prevent connections between production and development.
Which attribute must be used to assign the servers to different microsegments?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.B.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/virtualization/b_ACI_Virtualization_Guide_3_1_1/In order to prevent connections between production and development database servers that exist in the same EPG and IP subnet, they must be assigned to different microsegments. Microsegmentation is the process of dividing a network into smaller segments to increase security and reduce the attack surface.
The attribute that must be used to assign the servers to different microsegments in this scenario is the IP address. Each server should be assigned a unique IP address, and these addresses should be used to group the servers into different microsegments. This will allow the network to be segmented in such a way that production and development servers cannot communicate with each other.
The other answer options are not correct because they are not relevant to the scenario described in the question. The data center attribute is used to assign resources to different data centers within a network, but it does not help with the segmentation of servers within the same data center. VM name is also not relevant as it does not provide any information about the network or its segmentation. VMM domain is used to manage virtualization, but it does not provide any information about the network or its segmentation either.
Therefore, the correct answer is C. IP address, as it is the attribute that provides the necessary information to group servers into different microsegments based on their unique IP addresses.
