300-620 · Question #288
A Cisco ACI fabric is integrated with a VMware environment. The engineer must back up the current configuration of the fabric and restore the vCenter password when the configuration is imported…
The correct answer is C. Enable the Global AES Encryption setting. To ensure vCenter passwords and other sensitive information are correctly restored from an ACI configuration backup, the Global AES Encryption setting must be enabled before creating the backup.
Question
A Cisco ACI fabric is integrated with a VMware environment. The engineer must back up the current configuration of the fabric and restore the vCenter password when the configuration is imported. Which action accomplishes this goal?
Options
- ACreate a Configuration Import Policy.
- BSelect SCP protocol for the remote location.
- CEnable the Global AES Encryption setting.
- DSet the Authentication type to Use Password.
How the community answered
(44 responses)- A2% (1)
- B5% (2)
- C86% (38)
- D7% (3)
Why each option
To ensure vCenter passwords and other sensitive information are correctly restored from an ACI configuration backup, the Global AES Encryption setting must be enabled before creating the backup.
Creating a Configuration Import Policy defines the merge behavior during import but does not control whether sensitive data like passwords are encrypted or correctly handled within the backup file.
Selecting SCP protocol specifies the transport mechanism for the backup file to a remote server and does not dictate how sensitive data within the backup content is handled for restoration.
Enabling the Global AES Encryption setting in Cisco ACI is essential for protecting sensitive information, such as vCenter passwords, when performing configuration backups. This encryption ensures that passwords are securely stored within the backup file and can be correctly restored when the configuration is imported, preventing the need for manual re-entry.
Setting the Authentication type to Use Password refers to the credentials used to access the remote backup server, not the encryption or handling of sensitive passwords within the ACI configuration itself.
Concept tested: ACI configuration backup, sensitive data encryption, vCenter passwords
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/config-guide/cisco-aci-config-guide-501/m-cisco-aci-backup-restore-configuration.html#concept_AC4E8D7F94194D0295830E9348A0EC56
Topics
Community Discussion
No community discussion yet for this question.