Examkin

Soru

Zorluk: OrtaCapabilities of Configuration Management Mechanisms (Puppet, Chef, Ansible)

A network administrator must select a configuration management framework to automate configuration updates on enterprise Cisco IOS XE routers. The network security policy strictly prohibits installing third-party software packages or background client daemons directly on network device operating systems. Which configuration management tool fulfills this operational requirement by using an agentless architecture over standard transport protocols such as SSH?

  1. AnsibleCevap
  2. B
    Puppet
  3. C
    Chef
  4. D
    SaltStack

Cevap

Ansible is the correct choice because it functions agentlessly over SSH or NETCONF without installing client software on managed network nodes.
Ansible utilizes an agentless architecture. It connects to network devices using native management protocols (such as SSH, NETCONF, or RESTCONF) and pushes configuration changes directly. Because no persistent agent software or daemon needs to be installed on target network devices, it complies fully with restrictive security policies.

Adım Adım Çözüm

1
Analyze the operational constraint specified in the requirement.
The requirement mandates an agentless configuration tool that does not require client daemon installation on the router operating system.
Security directives prevent modifying the underlying network operating system image with third-party daemons.
2
Evaluate the architectural models of the configuration management tools.
Ansible uses an agentless push model via SSH/NETCONF, while Puppet, Chef, and SaltStack traditionally use agent daemons running locally on managed nodes.
Ansible executes playbooks remotely and parses device output without needing local agent software.

Anahtar Kavram

Agentless vs. Agent-Based Configuration Management Architectures
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Capabilities of Configuration Management Mechanisms (Puppet, Chef, Ansible)

Bu konudan daha fazla soru