An enterprise network engineering team is evaluating configuration management mechanisms to automate switch provisioning across a campus infrastructure. The network security policy strictly mandates that the selected tool must not require client agent software installation on target devices, must execute configuration pushes on-demand directly from a centralized control node over standard secure transport protocols, and must utilize YAML formatting for configuration code files. Which tool and architectural combination satisfies all specified security and operational requirements?
- Ansible operating with an agentless push architecture using SSH or NETCONF transport and YAML playbooksCevap
- BPuppet operating with an agentless pull architecture using TCP 8140 transport and YAML manifests
- CChef operating with an agentless push architecture using TCP 443 transport and Ruby playbooks
- DAnsible operating with an agent-based pull architecture using a local daemon to poll playbooks over HTTPS
Cevap
Ansible operating with an agentless push architecture using SSH or NETCONF transport and YAML playbooks
The correct option accurately reflects Ansible's core architecture. Ansible is strictly agentless, requiring no software installation on network nodes. It relies on a centralized push execution model over standard management protocols such as SSH or NETCONF and uses human-readable YAML files structured as playbooks.
Adım Adım Çözüm
Anahtar Kavram
Capabilities and Operational Models of Configuration Management Tools (Ansible vs. Puppet vs. Chef)