Questions

Which utility can you use to identify redundant or shadow rules?

Publish Time: Author: blog Visit: 39

Which utility can you use to identify redundant or shadow rules? 

A. The ACL trace tool in Cisco APIC-EM. 
B. The ACL analysis tool in Cisco APIC-EM. 
C. The Cisco APIC-EM automation scheduler. 
D. The Cisco IWAN application. 

Correct Answer: B 
Explanation 
Explanation/Reference: 
Cisco APIC-EM supports the following policy analysis features: 
+ Inspection, interrogation, and analysis of network access control policies. 
+ Ability to trace application specific paths between end devices to quickly identify ACLs in use and problem areas. 
+ Enables ACL change management with easy identification of conflicts and shadows -> Maybe B is themost suitable answer. 
The ACL trace tool can only help us to identify Which ACL on Which router is blocking or allowing traffic. It cannot help identify redundant/shadow rules. 
Note:Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) is a Cisco Software Defined Networking (SDN) controller, Which uses open APIs for policy-based management and security through a single controller, abstracting the network and making network services simpler. APIC-EM provides centralized automation of policy-based application profiles. 
Reference: CCNA Routing and Switching Complete Study Guide Cisco Intelligent WAN (IWAN) application simplifies the provisioning of IWAN network profiles with simple business policies. The IWAN application defines business-level preferences by application or groups of applications in terms of the preferred path for hybrid WAN links. Doing so improves the application experience over any connection and saves telecom costs by leveraging cheaper WAN links. 
Shadow rules are the rules that are never matched (usually because of the first rules). For example two access-list statements: 
access-list 100 permit ip any any 
access-list 100 deny tcp host A host B 
Then the second access-list statement would never be matched because all traffic have been already allowed by the first statement. In this case we call statement 1 shadows statement 2.

BestCiscoDumps is the best way to pass CCNA certification in your first attempt. You will receive the complete and comprehensive study materials from us. As a result, you will improve your experience, increase your salary, and become certified.

identify redundant or shadow rules

Which utility can you use to identify redundant or shadow rules?
Download

Have Any question for us?