ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 444 - 350-601 discussion

Report
Export

An engineer must automate the provisioning of Cisco ACI objects using the Terraform tool. The engineer must ensure that APIC counts the authentication login requests against the threshold to avoid a DOS attack. Which configuration must be used in Terraform to accomplish these goals?

A.

resources with user ID and password

Answers
A.

resources with user ID and password

B.

resources with signature-based authentication

Answers
B.

resources with signature-based authentication

C.

provider with user ID and password

Answers
C.

provider with user ID and password

D.

provider with signature-based authentication

Answers
D.

provider with signature-based authentication

Suggested answer: D

Explanation:

To automate the provisioning of Cisco ACI objects using Terraform while ensuring that APIC counts the authentication login requests against the threshold to avoid a DOS attack, signature-based authentication should be used. This method involves obtaining an authentication token from Cisco APIC, which will use the token to authenticate. However, APIC counts these authentication requests and applies a threshold to prevent DOS attacks. After too many attempts, the user ID and password authentication method may fail as the threshold is exceeded. To circumvent this issue, signature-based authentication is recommended, where a signature is calculated using a private key and passed with the request. This signature is then used to authenticate the user without being counted against the threshold, thus avoiding the risk of exceeding it and failing authentication.

asked 10/10/2024
Valerio Lorenzani
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first