Exam 350-901 All Questions

View all questions & answers for the 350-901 exam

Exam 350-901 topic 1 question 129 discussion

Actual exam question from Cisco's 350-901

Question #: 129
Topic #: 1

A local data center deployment using Cisco NX-OS switches is scaling and requires automatic configuration at scale. Configuration management must be set up for a Cisco NX-OS switch by using Ansible. The Ansible control server is currently located on a different subnet than the switch. The solution has these requirements:
✑ The transport protocol used must be encrypted.
✑ The connections must originate from a server in the same local network.
Enable mode must be supported.

Which connectivity method must be used?

A. HTTP through a web proxy.
B. HTTPS through a repository and ansible_become method for privilege escalation.
C. SSH through a bastion host and ansible_become method for privilege escalation.
D. XML-RPC through a web proxy.

Show Suggested Answer

Suggested Answer: C 🗳️

by udo2020 at Dec. 29, 2021, 1:08 p.m.

Comments

Submit Cancel

dsizov

Highly Voted 2 years, 5 months ago

C is correct: https://blog.networktocode.com/post/ansible-bastion-host/

upvoted 9 times

...

NetGirl

Highly Voted 1 year, 8 months ago

Selected Answer: C

C is correct.

upvoted 5 times

...

examtopicstroilevw

Most Recent 3 months, 1 week ago

Selected Answer: C

Answer: C For those that chose B, I will now explain why B is not applicable and C is the only valid choice. The below link includes a table summarizing the connections available via Ansible to NXOS, for CLI (SSH) and NX-API (HTTPS) Per the link below, NX-API (HTTPS) does not support enable mode. Only CLI (SSH) supports enable mode. Reference: https://docs.ansible.com/ansible/latest/network/user_guide/platform_nxos.html#connections-available

upvoted 1 times

...

samael666

5 months, 1 week ago

Selected Answer: C

agree with the answer

upvoted 1 times

...

johntermlen

11 months ago

Selected Answer: C

Option A, HTTP through a web proxy, is not secure because HTTP is not an encrypted protocol. Option B, HTTPS through a repository and ansible_become method for privilege escalation, is not secure because the connections would not originate from a server in the same local network. Option D, XML-RPC through a web proxy, is not a supported method for connecting to an NX-OS switch

upvoted 1 times

...

Teringzooi

1 year, 8 months ago

Selected Answer: C

Correct answer: C SSH is used: ansible_ssh_common_args=ProxyCommand="ssh -W %h:%p ntc@bastion" https://blog.networktocode.com/post/ansible-bastion-host/

upvoted 3 times

...

designated

1 year, 9 months ago

Selected Answer: C

C is correct https://blog.networktocode.com/post/ansible-bastion-host/ https://docs.ansible.com/ansible/latest/network/user_guide/network_debug_troubleshooting.html#network-delegate-to-vs-proxycommand

upvoted 1 times

...

kapppa

1 year, 10 months ago

I think it is C

upvoted 2 times

...

QuiShong

2 years ago

I'd go with C. As the link in Johnno's answer says, a jump host can be used. Quite often, jump hosts are called bastions. Also, a (I assume git) repository cannot set up connections to other devices.

upvoted 1 times

...