nerdexam
Cisco

300-620 · Question #101

An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user…

The correct answer is D. Under the Create Remote location settings, select Protocol: SCP. To create a secure ACI fabric backup that includes sensitive information, is transferable securely, and parseable by Python scripts, a specific configuration for remote location and export policy settings is required.

ACI Management and Operations

Question

An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary. Which configuration set must be used to meet these requirements?

Options

  • AUnder the Create Remote location settings, select Protocol: FTP
  • BUnder the Create Remote location settings, select Protocol: FTP
  • CUnder the Create Remote location settings, select Protocol: SCP
  • DUnder the Create Remote location settings, select Protocol: SCP

How the community answered

(35 responses)
  • A
    11% (4)
  • B
    3% (1)
  • C
    6% (2)
  • D
    80% (28)

Why each option

To create a secure ACI fabric backup that includes sensitive information, is transferable securely, and parseable by Python scripts, a specific configuration for remote location and export policy settings is required.

AUnder the Create Remote location settings, select Protocol: FTP

FTP does not provide secure and encrypted transport, failing to meet the requirement for a secure and encrypted transfer.

BUnder the Create Remote location settings, select Protocol: FTP

FTP does not provide secure and encrypted transport, failing to meet the requirement for a secure and encrypted transfer.

CUnder the Create Remote location settings, select Protocol: SCP

While SCP provides secure transport, this option, as stated, does not explicitly include or imply the necessary settings for JSON format and secure export of user/password information, which are critical requirements.

DUnder the Create Remote location settings, select Protocol: SCPCorrect

Selecting SCP as the remote location protocol ensures secure and encrypted transport for the backup file, and the overall configuration set must also include enabling secure export to capture user and password information, along with setting the backup format to JSON for easy processing with Python scripts.

Concept tested: Cisco ACI secure configuration backup and recovery

Source: https://www.cisco.com/c/en/us/td/docs/dcn/apic/5x/sw-install-upgrade/cisco-apic-installation-upgrade-guide-52x/cisco-apic-installation-upgrade-guide-52x_chapter_010.html#id_36128

Topics

#APIC backup#SCP#disaster recovery#configuration export

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice