MENU
Your customer is interested in hearing more about how roles can help keep consistent policy enforcement in a distributed overlay fabric How would you explain this concept to them''
35 comments · newest first
RU
Ruth
11 months ago
Totally agree, the egress/ingress enforcement is key!
RI
Ricki
11 months ago
Group Based Policy ID is crucial for consistency in overlays.
BE
Beatriz
11 months ago
Surprised to hear about the role names being sent between VTEPs!
MI
Millie
12 months ago
I thought IP-based policies were still the go-to?
AR
Argelia
12 months ago
Role-based policies really streamline enforcement!
RO
Rochell
12 months ago
I believe role-based policies do enhance User Based Tunneling, but I'm uncertain about how the iPsec protection fits into the overall enforcement strategy.
PE
Penney
1 year ago
I practiced a question similar to this, and I feel like role names being sent between VTEPs was a key point, but I can't remember if it was an advantage over IP-based policies.
DA
Dallas
1 year ago
I remember something about Group Based Policy ID being applied on ingress VTEP, but I can't recall the specifics of how that works with egress.
PH
Phyliss
1 year ago
I think role-based policies are important for maintaining consistency, but I'm not sure if they tie directly to IP addresses.
CO
Colette
1 year ago
This seems straightforward enough. The question is asking how roles can help with policy enforcement, so I'll emphasize how role-based policies are more flexible and scalable than IP-based policies, and how the role information is shared between VTEPs to ensure consistent enforcement.
KR
Kristofer
1 year ago
Okay, I think I've got a handle on this. The key is understanding how roles can be used to consistently apply policies across multiple VTEPs, rather than relying on IP addresses. I'll focus on explaining the advantages of this approach and how it works in a distributed overlay environment.
AL
Alona
1 year ago
Hmm, this is a tricky one. I'm not entirely sure about the differences between group-based policy IDs and role-based policies. I'll need to review my notes on overlay fabrics and policy enforcement to make sure I understand the concepts before attempting to explain them.
AM
Amie
1 year ago
This question seems to be focused on how roles can help with policy enforcement in a distributed overlay fabric. I'll need to think carefully about the key concepts involved and how to explain them clearly to the customer.
DA
Daren
1 year ago
Okay, I've got this. First, I'll determine the functional complexity, then I can count the FTRs and DETs. That should give me the information I need to figure out the right sequence.
CL
Claudio
1 year ago
The question is asking about the best communications approach, not the reason behind it. I'd go with "Critical" since the technical teams are essential to the success of this project.
PR
Precious
1 year ago
Hmm, the schema and WSDL mapping is not entirely clear to me. I'll need to review the concepts carefully before attempting this.
LU
Luann
1 year ago
This seems pretty straightforward. I'll just follow the instructions step-by-step and make sure I don't miss anything. Shouldn't be too difficult.
GE
Geraldine
1 year ago
I heard this exam question was written by someone who got their networking knowledge from a Magic: The Gathering rulebook. Good luck, everyone!
TR
Tracey
1 year ago
Ah, I see what they're getting at. Role-based policies make it easier to manage access and security across the network. No more IP address headaches!
GA
Gail
1 year ago
Ah, I see what they're getting at. Role-based policies make it easier to manage access and security across the network. No more IP address headaches!
DE
Deandrea
1 year ago
C) Group Based Policy ID is applied on ingress VTEP after device authentication and policy is enforced on egress VTEP
SU
Sunshine
1 year ago
B) Role-based policies are tied to IP addresses which have an advantage over IP-based policies and role names are sent between VTEPs
AD
Adelle
1 year ago
A) Group Based Policy ID is applied on egress VTEP after device authentication and policy is enforced on ingress VTEP
VI
Viola
1 year ago
Hold on, what's a VTEP? Is that like a hot tub for virtual machines? I'm just going to guess and hope for the best.
MA
Margot
1 year ago
I'm not sure about the difference between egress and ingress VTEP enforcement. Isn't it just semantics? As long as the policy is applied, it should work, right?
AM
Amie
1 year ago
C) Group Based Policy ID is applied on ingress VTEP after device authentication and policy is enforced on egress VTEP
RO
Rosendo
1 year ago
B) Role-based policies are tied to IP addresses which have an advantage over IP-based policies and role names are sent between VTEPs
BO
Bok
1 year ago
A) Group Based Policy ID is applied on egress VTEP after device authentication and policy is enforced on ingress VTEP
RO
Roxanne
1 year ago
Option C seems to be the correct answer. The policy is enforced on the ingress VTEP after device authentication, ensuring consistent enforcement across the distributed fabric.
SU
Susana
1 year ago
This helps ensure consistent policy enforcement in a distributed overlay fabric.
AL
Alyce
1 year ago
That's right. Group Based Policy ID is applied on the ingress VTEP after device authentication.
CH
Charolette
1 year ago
Option C seems to be the correct answer.
MA
Major
2 years ago
Hmm, that makes sense too. Role-based policies could indeed help with consistent policy enforcement.
PR
Precious
2 years ago
I disagree, I believe the answer is B because it talks about role-based policies being tied to IP addresses.
MA
Major
2 years ago
I think the answer is A because it mentions policy enforcement on ingress VTEP.