300-610 practice question 33 of 35

A network design must include a solution to run CLI commands remotely on Cisco Nexus 9000 Series Switches. The customer's security policy requires secure login credentials and an encrypted underlying transport. The command output will be processed using tools that support XML or JSON encoding. Which two components should be included in the design? (Choose two.)

Full set: 277 questions
Answer options
A: SSH
B: NX-API Correct answer
C: HTTP
D: HTTPS Correct answer
E: Bash shell
Correct Answer:
B. NX-API; D. HTTPS
Explanation

The design requires a method to run CLI commands remotely with secure transport and receive structured output (XML/JSON). The Cisco NX-API feature on Nexus 9000 switches is designed for this purpose. It allows administrators to send CLI commands over a web-based API. To meet the security requirement of encrypted transport and secure login, the NX-API must be accessed using HTTPS, which encrypts the entire session using TLS/SSL. NX-API natively formats the command output as either XML or JSON, fulfilling the final requirement.

Why Incorrect

A. SSH provides secure, encrypted remote CLI access but does not natively return structured XML or JSON output; it returns plain text.
C. HTTP provides transport for NX-API but is unencrypted, failing to meet the security policy requirement for an encrypted underlying transport.
E. The Bash shell provides direct access to the underlying Linux system on the switch but is not the remote management tool that provides structured data output.

References

1. Cisco Systems, "Cisco Nexus 9000 Series NX-OS Programmability Guide, Release 10.2(x)", Getting Started with Cisco NX-OS Programmability, Section: "NX-API REST". It states, "You can use NX-API REST to send CLI commands to the switch over HTTP or HTTPS... The switch returns the output in a structured XML or JSON format."

2. Cisco Systems, "Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 10.2(x)", Configuring the HTTP/HTTPS Service. This guide explains how to enable HTTPS for secure management access, which is the transport used by a secure NX-API implementation.

Scroll to Top