350-601 Network Practice Question
In a Cisco ACI fabric, which object represents a collection of endpoints that share the same forwarding behavior and security policies?
⚠ Common exam trap
Cisco often tests the distinction between an EPG and a Bridge Domain, where candidates mistakenly think the BD (Layer 2 domain) defines security policies, but in ACI, security is applied at the EPG level via contracts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Endpoint Group (EPG)
In Cisco ACI, an Endpoint Group (EPG) is a logical object that groups endpoints (e.g., servers, VMs) with identical forwarding behavior and security policies. EPGs are the fundamental unit for applying contracts (security policies) and defining communication rules within the fabric, ensuring consistent traffic handling across all members.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VRF
Why it's wrong here
VRF is a Layer 3 routing domain.
- ✗
Tenant
Why it's wrong here
Tenant is a container for policies, not a grouping of endpoints.
- ✓
Endpoint Group (EPG)
Why this is correct
EPG is a collection of endpoints with shared policies.
- ✗
Bridge Domain (BD)
Why it's wrong here
BD defines a Layer 2 forwarding boundary, but EPG groups endpoints.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-601 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.