An engineer deployed a Cisco ACI fabric and noticed that the fabric learns endpoints from...

To ensure the Cisco ACI fabric adheres to strict security protocols and only learns endpoints from configured subnets on a bridge domain, the “Enforce Subnet Check” feature must be enabled. This feature restricts endpoint learning to IP addresses belonging to the subnets defined in the bridge domain associated with the endpoint’s VLAN, enhancing security by preventing learning of endpoints from unconfigured subnets. References: Implementing Cisco Application Centric Infrastructure Official Cert Guide