Supposedly option C is the VLAN port on the real exam.

Folks...The only 2 configuration options for an AppGigabitEthernet data port are: 'TRUNK' or 'VLAN' (comparable to 'trunk' or 'access' ports). The management interface is used by the switch to "manage" the docker container (eg. starting and operating a shell). This interface isn't running as a 'service interface' (such as "eth0") inside the docker container, it's bound to the whole container. You can see the 2 available configurations on page 84 of the original CiscoLive presentation of docker container configuration on a catalyst switch: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKCRS-2004.pdf

"The AppGigabitEthernet interface can be configured as a trunk or VLAN specific interface. For a trunk interface, it is extended to work as a Layer 2 trunk port, and all traffic received by the port is available to the application. For a VLAN interface, the application is connected to a specific VLAN network by specifying the VLAN ID number"

You're all wrong. It's A and D. Look at the diagram on Cisco's website that lists Management Interface, front-panel VLAN and front-panel Trunk. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1612/b_1612_programmability_cg/application_hosting.html

So, I would go with A, E

I choose A, B

It's A and B. A bridged virtual interface means it's layer 2 and VLANs live at layer 2. Since it's talking about a data port, it would mean you need a bridged virtual interface for a single VLAN and a trunk interface for an interface carrying multiple VLANS. This is a networking question when you think about it.

Based on the HW diagram, it should be Trunk and Management Interfaces

Read this carefully, The “AppGigabitEthernet” interface is only available on the Cisco Catalyst 9300 series, Catalyst 9404 and Catalyst 9407 switches. Catalyst 9500, and 9600 series switches do not support AppGigabitEthernet interface. The connectivity for applications hosted on these models is achieved through management interface

In short....assuming JCGO is right that the real exam actually says "VLAN" and not "SPAN", the answers are A & C. If it really says "SPAN" then the question is broken because "SPAN" is nowhere in the documentation and there are no other viable choices.

Selected Answer: AC A and C look more correct since SPAN Source Ports can be access or trunk ports. Definition: Containers can connect to AppGigabitEthernet in two modes: VLAN (where a single untagged VLAN is mapped to a container’s interface) and Trunk (where traffic for all the allowed VLANs is sent as Native or VLAN-tagged frames) Also, please see the white paper > https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.html Although, there are two types of connectivity which are via Front Panel (Regular) L2 interfaces using trunk or VLAN (untagged vlan) or via L3 Routed interface using NAT and VirtualPortGroup. I think the question is asking only about the AppGigabitEthernet and this could be only configured as L2 interfaces in two modes (VLAN and Trunk) according to the WhitePaper and Cisco DEVCOR Study Guide.

A & E: A. Trunk Interface: You would normally configure the GigabitEthernet interface as a trunk interface when connecting to a container. This lets you carry multiple VLANs over the same interface, which can be useful for containerized applications that need access to multiple VLANs. E. Subinterface: Subinterfaces can be used when you need to split a physical interface into multiple logical interfaces. This can help isolate traffic or provide connectivity to multiple containers with different network configurations

https://www.cisco.com/c/dam/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.pdf

That is a direct quote from RexChen above - so Trunk or VLAN is what I'd pick if the test says VLAN. It does not mention a BVI, but management interface is not in that document...

based on the link provided by Bloody_sausage Supported ports are Management Port Front-panel trunk port Front-panel VLAN port so answer is A and D?

In my opinion, this question seems to be asking for options supported by the AppGigabitEthernet interface. Therefore, the answers appear to be A and B.

A is correct for sure. D is not right. It's about another interface on the front panel. From the configuration guide, I did not see an option to configure AppGiga subinterfaces. B does not make sense since virtual interfaces are the concepts in the container. Completely don't know what "SPAN port" is here.

This is also from the same doc, which suggests the management port can't be used: "A new AppGigabitEthernet interface was introduced [...]. It is an internal hardware data port that is hardware-switched to the front panel data ports." so A and C would be right I believe.

Management interface would be a valid choice if the question were not about the data port: "AppGigabitEthernet interface is used as DATA port... " --- app-vnic management guest-interface network-interface Example: Device(config-app-hosting)# app-vnic management guest-interface 1 --- https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1612/b_1612_programmability_cg/application_hosting.html

The configuration differs between IOS-XE 16 and 17. IOS-XE 17: app-vnic AppGigabitEthernet trunk vlan vlan-ID guest-interface guest-interface-number OR app-vnic AppGigabitEthernet trunk guest-interface guest-interface-number --- IOS-XE 16: app-vnic AppGigEthernet vlan-access vlan vlan-ID guest-interface guest-interface-number OR app-vnic AppGigEthernet trunk guest-interface guest-interface-number --- https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1612/b_1612_programmability_cg/application_hosting.html https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/171/b_171_programmability_cg/application_hosting.html

The above makes me think the subinterface answer could be right, if VLAN means this subinterface

SPAN as a configuration option does not seem possible. https://community.cisco.com/t5/cisco-iox-discussions/packet-inspection-inside-iox/td-p/3886184

A and C, where hopefully "C" is "VLAN port" as JCGO says.. The AppGigabitEthernet interface can be configured as a trunk or VLAN-specific interface. https://www.cisco.com/c/dam/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c87-742415.pdf

I honestly will lean toward doubts on this one. The question is not "options that we could use" is "options we should use". If it was could and C is really VLAN no doubt I'll go with A and C. But looking at the PDF mentioned below we can have a container with two nics, data (trunk) and management...

But there are three ways to connect containers to external networks: via the Management interface, via L2 data ports, and via L3 routed interface. So, the answer could be management interface and trunk ports (L2 data ports), but 'source span port; could be an access port as well.

Selected Answer: AC Correct answers: A & C

It should be Trunk or VLAN interface The AppGigabitEthernet interface can be set up as a trunk or VLAN-specific interface. For a trunk interface, it is extended to work as a Layer 2 trunk port, and all traffic received by the port is available to the application. For a VLAN interface, the application is connected to a specific VLAN network by specifying the VLAN ID number. https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9300-series-switches/white-paper-c11-742415.html