ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-901 All Questions

View all questions & answers for the 350-901 exam
Go to Exam

Exam 350-901 topic 1 question 129 discussion

Actual exam question from Cisco's 350-901
Question #: 129
Topic #: 1
[All 350-901 Questions]

A local data center deployment using Cisco NX-OS switches is scaling and requires automatic configuration at scale. Configuration management must be set up for a Cisco NX-OS switch by using Ansible. The Ansible control server is currently located on a different subnet than the switch. The solution has these requirements:
✑ The transport protocol used must be encrypted.
✑ The connections must originate from a server in the same local network.
Enable mode must be supported.

Which connectivity method must be used?

  • A. HTTP through a web proxy.
  • B. HTTPS through a repository and ansible_become method for privilege escalation.
  • C. SSH through a bastion host and ansible_become method for privilege escalation.
  • D. XML-RPC through a web proxy.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by udo2020 at Dec. 29, 2021, 1:08 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
dsizov
Highly Voted 2 years ago
C is correct: https://blog.networktocode.com/post/ansible-bastion-host/
upvoted 9 times
...
NetGirl
Highly Voted 1 year, 3 months ago
Selected Answer: C
C is correct.
upvoted 5 times
...
samael666
Most Recent 3 days, 1 hour ago
Selected Answer: C
agree with the answer
upvoted 1 times
...
johntermlen
5 months, 3 weeks ago
Selected Answer: C
Option A, HTTP through a web proxy, is not secure because HTTP is not an encrypted protocol. Option B, HTTPS through a repository and ansible_become method for privilege escalation, is not secure because the connections would not originate from a server in the same local network. Option D, XML-RPC through a web proxy, is not a supported method for connecting to an NX-OS switch
upvoted 1 times
...
Teringzooi
1 year, 3 months ago
Selected Answer: C
Correct answer: C SSH is used: ansible_ssh_common_args=ProxyCommand="ssh -W %h:%p ntc@bastion" https://blog.networktocode.com/post/ansible-bastion-host/
upvoted 3 times
...
designated
1 year, 4 months ago
Selected Answer: C
C is correct https://blog.networktocode.com/post/ansible-bastion-host/ https://docs.ansible.com/ansible/latest/network/user_guide/network_debug_troubleshooting.html#network-delegate-to-vs-proxycommand
upvoted 1 times
...
kapppa
1 year, 5 months ago
I think it is C
upvoted 2 times
...
QuiShong
1 year, 7 months ago
I'd go with C. As the link in Johnno's answer says, a jump host can be used. Quite often, jump hosts are called bastions. Also, a (I assume git) repository cannot set up connections to other devices.
upvoted 1 times
...
Johnno26
2 years ago
Selected Answer: B
B is correct: https://docs.ansible.com/ansible/latest/network/user_guide/network_best_practices_2.5.html
upvoted 3 times
...
udo2020
2 years ago
I think it's C
upvoted 4 times
Johnno26
2 years ago
A bastion host does not live in the same local network as the NXOS devices, should be B.
upvoted 2 times
testingrealname
1 year, 9 months ago
How do you know the bastion host is not in the same local network?
upvoted 1 times
designated
1 year, 4 months ago
Experience.
upvoted 1 times
designated
1 year, 4 months ago
It should be the C answer.
upvoted 2 times
...
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago