Exam 300-620 topic 1 question 128 discussion

Actual exam question from Cisco's 300-620

Question #: 128
Topic #: 1

Refer to the exhibit. A customer must back up the current Cisco ACI configuration securely to the remote location using encryption and authentication. The backup job must run once per day. The customer’s security policy mandates that any sensitive information including passwords must not be exported from the device. Which set of steps meets these requirements?

A. Export destination using FTP protocol.
Use XML format.
B. Export destination using FTP protocol.
Disable Global AES Encryption.
C. Export destination using SCP protocol.
Disable Global AES Encryption.
D. Export destination using SCP protocol.
Use XML format.

Show Suggested Answer

Suggested Answer: C 🗳️

by Dash at April 12, 2023, 11:55 a.m.

Comments

Submit Cancel

Narbledeath

Highly Voted 8 months, 1 week ago

Picking C. AES is disabled because you don't want passwords or sensitive info to be exported.

upvoted 7 times

...

thinqtanklearningDOTcom

Most Recent 7 months ago

Selected Answer: C

Absolutely C based on the requirements. SCP provides authentication and encryption. And per Cisco documentation "To export hashed secure properties (passwords and certificates), AES encryption must be configured and enabled. While encryption is not enabled, any secure fields will not be exported. In this case re-importing the configuration will require all secure properties to be re-configured."

upvoted 4 times

...

Dash

8 months, 1 week ago

Shouldn't this be D? If you disable AES then data will not be encrypted!

upvoted 1 times

thinqtanklearningDOTcom

7 months ago

See my comments above.

upvoted 1 times

...