nerdexam
Cisco

350-601 · Question #481

A DevOps engineer must use Python to manage a Cisco device. The device is in a highly secure DMZ environment. Only trusted Cisco Python libraries can be used. Which solution meets the requirements?

The correct answer is D. Develop a containerization application that uses trusted Cisco-provided libraries. A DevOps engineer needs to manage a Cisco device in a secure DMZ using only trusted Cisco Python libraries. Deploying a containerized application with these libraries provides the necessary security and control.

Automation

Question

A DevOps engineer must use Python to manage a Cisco device. The device is in a highly secure DMZ environment. Only trusted Cisco Python libraries can be used. Which solution meets the requirements?

Options

  • ADevelop an on-box Python script that uses trusted Cisco libraries.
  • BDevelop an application by using serverless technologies in a primary cloud provider.
  • CDevelop an off-box Python script that uses trusted Cisco libraries.
  • DDevelop a containerization application that uses trusted Cisco-provided libraries.

How the community answered

(60 responses)
  • A
    13% (8)
  • B
    7% (4)
  • C
    27% (16)
  • D
    53% (32)

Why each option

A DevOps engineer needs to manage a Cisco device in a secure DMZ using only trusted Cisco Python libraries. Deploying a containerized application with these libraries provides the necessary security and control.

ADevelop an on-box Python script that uses trusted Cisco libraries.

Developing an on-box Python script might lack the necessary isolation and control over library dependencies and execution environment required in a highly secure DMZ.

BDevelop an application by using serverless technologies in a primary cloud provider.

Using serverless technologies in a primary cloud provider does not directly address the requirement of managing a Cisco device in a DMZ and may introduce external dependencies and security concerns not aligned with a DMZ.

CDevelop an off-box Python script that uses trusted Cisco libraries.

Developing an off-box Python script, while offering flexibility, may not inherently guarantee the exclusive use of trusted Cisco libraries or provide the same level of environmental control and security isolation as a containerized solution in a DMZ.

DDevelop a containerization application that uses trusted Cisco-provided libraries.Correct

Developing a containerization application that uses trusted Cisco-provided libraries meets the requirements by providing a secure, isolated, and portable environment for Python scripts. Containers ensure that only approved libraries are used and can be deployed securely in a DMZ, offering better control over the execution environment compared to directly running scripts.

Concept tested: Secure Python script deployment in DMZ

Topics

#Network Automation#Python#Containerization#DMZ Security

Community Discussion

No community discussion yet for this question.

Full 350-601 Practice