350-601 practice question 11 of 25

A network engineer implements a Python script on a Cisco Nexus 9000 Series Switch with redundant supervisors. The script is located on a built-in…

Full set: 422 questions
A network engineer implements a Python script on a Cisco Nexus 9000 Series Switch with redundant supervisors. The script is located on a built-in container that runs as part of the Cisco NX-OS system. The requirement is to automate the periodic transfer of the Python script to a redundant supervisor. In addition, the script must be transferred to an external server using encryption and authentication. Which configuration set meets these requirements?
Answer options
A: Enable the checkpoint feature. Configure an EEM job to transfer the script to the SCP server.
B: Implement the guest shell synchronization feature. Configure a scheduler job to transfer the script to the TFTP server.
C: Enable the checkpoint feature. Configure a scheduler job to transfer the script to the HTTP server.
D: Implement the guest shell synchronization feature Configure a CRON job to transfer the script to the SCP server. Correct answer
Correct Answer:
D. Implement the guest shell synchronization feature Configure a CRON job to transfer the script to the SCP server.
Explanation

The requirement is to synchronize a script in a container between redundant supervisors and securely transfer it externally. The "guest shell synchronization" feature in NX-OS is designed specifically to synchronize the guest shell's root filesystem between the active and standby supervisors. For periodic, automated tasks within the Linux-based guest shell, a standard CRON job is the appropriate tool. To meet the "encryption and authentication" requirement for the external transfer, SCP (Secure Copy Protocol) must be used, as protocols like TFTP or HTTP are not inherently secure.

Why Incorrect

A. The checkpoint feature is for saving and rolling back device configurations, not for synchronizing files within the guest shell container.
B. TFTP (Trivial File Transfer Protocol) does not provide the required encryption and authentication for secure file transfer.
C. The checkpoint feature is incorrect for file synchronization, and HTTP does not provide the required encryption and authentication for secure transfer.

References

1. Cisco, "Cisco Nexus 9000 Series NX-OS Programmability Guide, Release 10.2(x)", Guest Shell, Section: "Guest Shell High Availability". "To synchronize the rootfs of the guestshell from the active supervisor to the standby supervisor, use the guestshell sync command."

2. Cisco, "Cisco Nexus 9000 Series NX-OS Programmability Guide, Release 10.2(x)", Writing and Running a Python Script on the Switch. The guide provides examples of using the guest shell, which is a standard Linux environment where cron and scp are available utilities for scheduling and secure file transfer.

Scroll to Top