300-610 · Question #161
An engineer is installing a Cisco Nexus 7000 Series Switch with F2-Series I/O Module. The company's strict security policy requires that the port be in-band. The engineer must also keep these consider
The correct answer is D. Ethernet port. An Ethernet port must be used to meet the requirements for in-band management, secure management over IP with authentication and encryption, and utilizing an F2-Series I/O Module on a Cisco Nexus 7000 Series Switch.
Question
An engineer is installing a Cisco Nexus 7000 Series Switch with F2-Series I/O Module. The company's strict security policy requires that the port be in-band. The engineer must also keep these considerations in mind:
- The customer's security requirements mandate the use of a secure
management mechanism that supports authentication and encryption.
- The port should support management over IP.
Which port type must be used to meet these requirements?
Options
- Amanagement port
- Bconsole port
- Cconnectivity management port
- DEthernet port
How the community answered
(57 responses)- A2% (1)
- B7% (4)
- C5% (3)
- D86% (49)
Why each option
An Ethernet port must be used to meet the requirements for in-band management, secure management over IP with authentication and encryption, and utilizing an F2-Series I/O Module on a Cisco Nexus 7000 Series Switch.
A dedicated management port (mgmt0) on Cisco Nexus 7000 series is for out-of-band management only and is not considered 'in-band' relative to the data plane, failing the strict security policy requirement.
A console port provides out-of-band serial access for initial configuration and troubleshooting and does not support management over IP or secure authentication/encryption for network management.
'Connectivity management port' is not a standard or distinct port type on Cisco Nexus switches that aligns with the requirement for an in-band, IP-addressable, secure management interface on an F2 module.
An Ethernet port on an F2-Series I/O Module can be configured for in-band management, meaning it carries management traffic (like SSH, HTTPS for secure authentication and encryption) along with regular data traffic over the same interface. This meets the requirements for management over IP and in-band access.
Concept tested: Cisco Nexus In-band Management
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus7000/sw/system_management/config/nxos/sm_nxos_cfg.html
Topics
Community Discussion
No community discussion yet for this question.