N10-009 Question 241
Single answerConnection methods: SSH, Graphical user interface (GUI), API, Console, Jump box/host, In-band vs. out-of-band managementA network administrator is troubleshooting a core switch after a bad ACL change cut off remote access from the production network. The switch still has power, but it no longer responds to SSH or its web-based management page. The administrator is on-site in the data center and needs to restore access as quickly as possible without relying on the production network. Which connection method should the administrator use FIRST?
- A
Connect a laptop to the switch's console port and access the CLI with a terminal emulator
- B
Use SSH from a jump box on the server VLAN to log in to the switch
- C
Open the switch's GUI from the management IP address using HTTPS
- D
Send configuration commands to the switch through its REST API
Show answer and explanation
Correct answer: A
Explanation
The key concept is the difference between in-band and out-of-band management. SSH, HTTPS/GUI, and APIs are typically in-band methods because they require the network and management IP path to be working. A console connection is an out-of-band method in the practical sense tested on Network+, because it provides direct local access even when the production network is misconfigured or unavailable. In real-world operations, best practice is to maintain out-of-band recovery access for critical infrastructure devices so configuration mistakes, routing failures, or ACL errors do not completely lock out administrators. Vendor documentation from major network equipment providers consistently treats the console port as the primary recovery method when remote management is unavailable.
- A. Correct.
Correct. A console connection is a direct, local management method that does not depend on the device's in-band network connectivity. Because the ACL change broke remote access over the production network, using the console port is the fastest and most reliable way to regain control. This is a classic out-of-band management approach for initial recovery and emergency access.
- B. Incorrect.
Incorrect. SSH is an in-band management method because it relies on IP connectivity across the network. In this scenario, the bad ACL change already prevented remote access, so a jump box on the server VLAN would still depend on the very network path that is failing. A jump box improves security and centralizes access, but it does not solve a loss of network reachability to the device.
- C. Incorrect.
Incorrect. The web GUI also depends on in-band IP connectivity to the switch's management interface. Since the administrator can no longer reach the device over the production network, the GUI will not be available. Candidates may choose this if they associate GUIs with ease of use, but usability does not help when the underlying path is unavailable.
- D. Incorrect.
Incorrect. An API-based connection also requires IP reachability and a functioning management service on the device. If SSH and the web management page are already unreachable due to the ACL issue, the API is unlikely to be accessible either. APIs are useful for automation, but not for recovering a device when in-band access has been cut off.