Which statement about microsegmentation is true?

An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes.

Which statement about microsegmentation is true?
A . ACI does not support microsegmentation based on vCenter VM attributes. You should use network attributes for mircosegmentation.
B . An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch.
C . When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts.
D . Microsegmentation is supported only using AVE or AVS.

View Answer

Answer: C

Explanation:

Microsegmentation is a feature of ACI that allows granular control of traffic between endpoints based on vCenter VM attributes, such as name, guest OS, or network adapter type. Microsegmentation works by creating a micro-EPG for each VM and applying contracts and policies to the micro-EPGs. When microsegmentation is enabled, ACI performs distributed switching and routing on the ESXi hosts using the Cisco Application Virtual Switch (AVS) or the Cisco Application Virtual Edge (AVE). This allows ACI to enforce policies at the hypervisor level, without requiring any changes to the physical network or the VM configuration.

Reference: = Implementing and Operating Cisco Data Center Core Technologies (DCCOR) v1.2, Module 6: Cisco

ACI, Lesson 6.3: Cisco ACI Integration

Cisco ACI Virtualization Guide, Release 4.2(x), Chapter: Configuring Microsegmentation