Which three statements about nxapi_auth are true? (Choose three.)
Click on the arrows to vote for the correct answer
A. B. C. D. E. F.BEF.
NX-API supports HTTPS.
All communication to the device is encrypted when you use HTTPS.
NX-API is integrated into the authentication system on the device.
Users must have appropriate accounts to access thedevice through NX-API.
NX-API uses HTTP basic authentication.
All requests must contain the username and password in the HTTP header.
Note You should consider using HTTPS to secure your user's login credentials.
You can enable NX-API by using the feature manager CLI command.
NX-API is disabled by default.
NX-API provides a session-based cookie, nxapi_auth when users first successfully authenticate.
With the session cookie, the username and password are included in all subsequent NX-API requests that are sent to the device.
The username and password are used with the session cookie to bypass performing the full authentication process again.
If the session cookie is not included with subsequent requests, another session cookie is required and is provided by the authentication process.
Avoiding unnecessary use of the authentication process helps to reduce the workload on the device.
Note A nxapi_auth cookie expires in 600 seconds (10 minutes)
This value is a fixed and cannot be adjusted.
NX-API performs authentication through a programmable authentication module (PAM) on the switch.
Use cookies to reduce the number of PAM authentications, which reduces the load on the PAM.
NX-API ( Cisco Nexus API) is a RESTful API interface that enables programmable access to Cisco Nexus switches. The nxapi_auth feature provides a method for authenticating with NX-API using a session cookie to reduce authentication time and reduce load on the programmable authentication module (PAM) on the switch. Here are the explanations for each statement:
A. Use of nxapi_auth is optional. This feature can be disabled to reduce authentication time and support large number of API calls. This statement is true. nxapi_auth is an optional feature in NX-API. It can be enabled or disabled as required. When enabled, the nxapi_auth cookie is used to store the session information for a user and subsequent requests can use this cookie to bypass the full authentication process, which can help to reduce authentication time and support a large number of API calls.
B. After the first successful authentication, the username and password are used with the session cookie to bypass performing the full authentication process again. This statement is true. When nxapi_auth is enabled, after the first successful authentication, the username and password are used with the session cookie to bypass performing the full authentication process again. This helps to reduce the authentication time and load on the switch.
C. Expiration time of the nxapi_auth cookie can be changed up to the maximum of 1200 seconds. This statement is true. The expiration time of the nxapi_auth cookie can be changed using the "nxapi auth session timeout" command. The maximum expiration time is 1200 seconds (20 minutes), and the default is 600 seconds (10 minutes).
D. After the first successful authentication, the username and password are NOT included in subsequent NX-API requests that are sent to the device. This statement is false. After the first successful authentication, the username and password are included in subsequent NX-API requests that are sent to the device, along with the session cookie. This helps to bypass performing the full authentication process again.
E. NX-API performs authentication through a programmable authentication module on the switch. Using cookies reduces the number of PAM authentications, which reduces the load on the PAM. This statement is true. NX-API performs authentication through a programmable authentication module (PAM) on the switch. When nxapi_auth is enabled, the session cookie is used to store the session information for a user, and subsequent requests can use this cookie to bypass the full authentication process, which can help to reduce the load on the PAM.
F. The nxapi_auth cookie expires in 600 seconds. This statement is true. The default expiration time for the nxapi_auth cookie is 600 seconds (10 minutes). However, this value can be changed using the "nxapi auth session timeout" command, as mentioned in statement C.