A customer requires a tool to manage Cisco network hardware. The solution must use secure communication using a secure network protocol, support the use of declarative language to manage the state of

Ansible is primarily a push-based system where configurations are pushed from the controller to the managed nodes, which contradicts the 'periodically pull changes' requirement.

While SaltStack supports both push and pull, its primary mode of operation with Salt Minions is typically push-based or event-driven, and it doesn't align as strongly with the 'periodically pull changes' model as Puppet.

Puppet is a configuration management tool that uses a declarative language to define the desired state of resources. It employs an agent-server architecture where agents on controlled nodes periodically 'pull' configurations from the Puppet master, ensuring secure communication and compliance with the desired state.

Nomir is not a recognized or common network configuration management or automation tool in the same category as the others.