Topic 15 Practice Test 2 covers Catalyst Center Workflows, NETCONF, and RESTCONF for Cisco 350-401 ENCOR. For broader exam preparation, review the Cisco 350-401 ENCOR Exam Dumps. Every option includes focused technical reasoning explaining both the Cisco enterprise networking concept and its fit to the scenario.
Question 1
A management host must establish a NETCONF session to an IOS XE device using the protocol’s default secure transport. Which destination should the firewall permit?
- SSH TCP port 830
- TCP port 443 only
- UDP port 69
- UDP port 161
Correct Answer(s)
A
Rationale
- NETCONF on IOS XE uses SSH as its transport and defaults to TCP port 830, so that destination must be reachable for the standard session. Context: “a management host must establish a netconf session to an”. This answer directly implements “SSH TCP port 830”. Evidence: “ios xe device using the protocol s default”.
- HTTPS is associated with REST-style management such as RESTCONF, not the default NETCONF SSH port. Context: “a management host must establish a netconf session to an”. The controlling choice is “SSH TCP port 830”. Evidence: “ios xe device using the protocol s default”.
- UDP 69 is used by TFTP and cannot establish a NETCONF RPC session. Context: “a management host must establish a netconf session to an”. The controlling choice is “SSH TCP port 830”. Evidence: “ios xe device using the protocol s default”.
- UDP 161 is commonly used for SNMP queries, not the default NETCONF SSH transport. Context: “a management host must establish a netconf session to an”. The controlling choice is “SSH TCP port 830”. Evidence: “ios xe device using the protocol s default”.
Question 2
A client opens a NETCONF session successfully. Which message model should the automation expect when manipulating configuration?
- Unstructured CLI prompts over Telnet
- XML-encoded RPC requests and replies
- Only JSON documents over UDP
- Binary SNMP traps only
Correct Answer(s)
B
Rationale
- NETCONF is model-driven RPC communication, not screen scraping of an interactive CLI. Context: “a client opens a netconf session successfully which message model”. The controlling choice is “XML-encoded RPC requests and replies”. Evidence: “should the automation expect when manipulating configuration”.
- NETCONF uses XML-based encoding and an RPC request/reply mechanism for configuration and operational data exchanges. Context: “a client opens a netconf session successfully which message model”. This answer directly implements “XML-encoded RPC requests and replies”. Evidence: “should the automation expect when manipulating configuration”.
- NETCONF does not use UDP as its normal transport and its protocol messages are XML-based. Context: “a client opens a netconf session successfully which message model”. The controlling choice is “XML-encoded RPC requests and replies”. Evidence: “should the automation expect when manipulating configuration”.
- SNMP traps are a different management protocol and do not provide NETCONF configuration RPCs. Context: “a client opens a netconf session successfully which message model”. The controlling choice is “XML-encoded RPC requests and replies”. Evidence: “should the automation expect when manipulating configuration”.
Question 3
An automation team wants a machine-readable definition of the configuration and operational data exposed by an IOS XE device. Which technology supplies that schema?
- TFTP option negotiation
- Spanning Tree Protocol
- BGP communities
- YANG data models
Correct Answer(s)
D
Rationale
- TFTP transfers files and does not define model-driven configuration schemas. Context: “an automation team wants a machine readable definition of the”. The controlling choice is “YANG data models”. Evidence: “configuration and operational data exposed by an ios”.
- STP prevents Layer 2 loops and does not define management data schemas. Context: “an automation team wants a machine readable definition of the”. The controlling choice is “YANG data models”. Evidence: “configuration and operational data exposed by an ios”.
- Communities tag routing information and do not model device configuration trees. Context: “an automation team wants a machine readable definition of the”. The controlling choice is “YANG data models”. Evidence: “configuration and operational data exposed by an ios”.
- YANG defines the structured data model that NETCONF and RESTCONF clients use to understand configuration and operational nodes. Context: “an automation team wants a machine readable definition of the”. This answer directly implements “YANG data models”. Evidence: “configuration and operational data exposed by an ios”.
Question 4
A NETCONF client must determine which models and protocol capabilities a device supports before sending model-specific operations. What should the client use?
- The NETCONF capability exchange/monitoring information
- The STP root bridge ID
- The BGP AS_PATH of the management prefix
- The device ARP table
Correct Answer(s)
A
Rationale
- NETCONF advertises capabilities during session establishment, and monitoring information can identify supported models and revisions so the client can adapt requests safely. Context: “a netconf client must determine which models and protocol capabilities”. This answer directly implements “The NETCONF capability exchange/monitoring information”. Evidence: “a device supports before sending model specific operations”.
- STP topology state gives no information about model-driven management capabilities. Context: “a netconf client must determine which models and protocol capabilities”. The controlling choice is “The NETCONF capability exchange/monitoring information”. Evidence: “a device supports before sending model specific operations”.
- Routing attributes do not describe NETCONF protocol capabilities or YANG models. Context: “a netconf client must determine which models and protocol capabilities”. The controlling choice is “The NETCONF capability exchange/monitoring information”. Evidence: “a device supports before sending model specific operations”.
- ARP maps IP addresses to link-layer addresses and does not advertise NETCONF model support. Context: “a netconf client must determine which models and protocol capabilities”. The controlling choice is “The NETCONF capability exchange/monitoring information”. Evidence: “a device supports before sending model specific operations”.
Question 5
A client discovers a supported YANG model and needs the schema definition from a device that supports schema retrieval. Which NETCONF capability is relevant?
- The ping command
- The BGP network statement
- An SNMP coldStart trap
- The get-schema RPC
Correct Answer(s)
D
Rationale
- ICMP reachability testing cannot download a YANG schema. Context: “a client discovers a supported yang model and needs the”. The controlling choice is “The get-schema RPC”. Evidence: “schema definition from a device that supports schema”.
- A BGP advertisement does not retrieve device data models. Context: “a client discovers a supported yang model and needs the”. The controlling choice is “The get-schema RPC”. Evidence: “schema definition from a device that supports schema”.
- An SNMP notification cannot return a requested YANG schema definition. Context: “a client discovers a supported yang model and needs the”. The controlling choice is “The get-schema RPC”. Evidence: “schema definition from a device that supports schema”.
- The NETCONF monitoring model can advertise schemas, and get-schema is used where supported to retrieve the model definition for client use. Context: “a client discovers a supported yang model and needs the”. This answer directly implements “The get-schema RPC”. Evidence: “schema definition from a device that supports schema”.
Question 6
An IOS XE router accepts SSH logins on port 22 but refuses NETCONF connections on port 830. The network path and ACL permit 830. What configuration area should be verified first?
- Whether the access VLAN uses Rapid PVST+
- Whether HSRP preemption is enabled
- Whether a default BGP community is set
- Whether NETCONF/YANG services are enabled on the device
Correct Answer(s)
D
Rationale
- The spanning-tree flavor does not cause IOS XE to listen for NETCONF. Context: “an ios xe router accepts ssh logins on port 22”. The controlling choice is “Whether NETCONF/YANG services are enabled on the device”. Evidence: “but refuses netconf connections on port 830 the”.
- FHRP election behavior is unrelated to the local NETCONF server state. Context: “an ios xe router accepts ssh logins on port 22”. The controlling choice is “Whether NETCONF/YANG services are enabled on the device”. Evidence: “but refuses netconf connections on port 830 the”.
- BGP policy does not activate the NETCONF management service. Context: “an ios xe router accepts ssh logins on port 22”. The controlling choice is “Whether NETCONF/YANG services are enabled on the device”. Evidence: “but refuses netconf connections on port 830 the”.
- General SSH availability does not prove that the NETCONF server is enabled. The model-driven management service must be configured and listening for NETCONF sessions. Context: “an ios xe router accepts ssh logins on port 22”. This answer directly implements “Whether NETCONF/YANG services are enabled on the device”. Evidence: “but refuses netconf connections on port 830 the”.
Question 7
A NETCONF `<edit-config>` request reaches the device but references an invalid node and the operation fails. What response should the client be prepared to interpret?
- A DHCP NAK
- A BGP notification message
- A NETCONF rpc-error response
- An STP topology-change notification only
Correct Answer(s)
C
Rationale
- DHCP responses concern address assignment, not NETCONF configuration transactions. Context: “a netconf edit config request reaches the device but references”. The controlling choice is “A NETCONF rpc-error response”. Evidence: “an invalid node and the operation fails what”.
- BGP session notifications do not carry NETCONF RPC error details. Context: “a netconf edit config request reaches the device but references”. The controlling choice is “A NETCONF rpc-error response”. Evidence: “an invalid node and the operation fails what”.
- NETCONF reports protocol or operation failures in structured RPC error information, allowing the client to identify why the requested edit was rejected. Context: “a netconf edit config request reaches the device but references”. This answer directly implements “A NETCONF rpc-error response”. Evidence: “an invalid node and the operation fails what”.
- STP events do not report model-driven configuration syntax or node errors. Context: “a netconf edit config request reaches the device but references”. The controlling choice is “A NETCONF rpc-error response”. Evidence: “an invalid node and the operation fails what”.
Question 8
An IOS XE device’s RESTCONF HTTPS service is reachable, but the design requires centrally controlled user authentication and authorization before model-driven configuration is allowed. Which control should be configured?
- Increase the switch spanning-tree priority
- Use the device AAA framework for RESTCONF authentication and authorization
- Set a higher BGP local preference
- Enable an unrelated GRE tunnel
Correct Answer(s)
B
Rationale
- Spanning-tree election values do not authenticate model-driven management clients. Context: “an ios xe device s restconf https service is reachable”. The controlling choice is “Use the device AAA framework for RESTCONF authentication and authorization”. Evidence: “but the design requires centrally controlled user authentication”.
- IOS XE RESTCONF connections are authenticated through the device’s AAA framework. Central AAA policy is therefore the relevant control for deciding which management users can access model-driven operations. The ios device restconf https constraints make this the appropriate restconf aaa authentication outcome for the design.
- BGP local preference changes path selection and does not grant RESTCONF access. Context: “an ios xe device s restconf https service is reachable”. The controlling choice is “Use the device AAA framework for RESTCONF authentication and authorization”. Evidence: “but the design requires centrally controlled user authentication”.
- GRE encapsulation does not establish user identity or authorization for RESTCONF. Context: “an ios xe device s restconf https service is reachable”. The controlling choice is “Use the device AAA framework for RESTCONF authentication and authorization”. Evidence: “but the design requires centrally controlled user authentication”.
Question 9
A RESTCONF client needs only HTTP response headers for a YANG resource and does not need the resource representation body. Which supported HTTP method best matches that request?
- PATCH
- HEAD
- DELETE
- POST
Correct Answer(s)
B
Rationale
- PATCH updates part of a resource; it is not a metadata-only read. Context: “a restconf client needs only http response headers for a”. The controlling choice is “HEAD”. Evidence: “yang resource and does not need the resource”.
- RESTCONF follows HTTP semantics, and HEAD retrieves header metadata without returning the normal response body. It is the focused method when only response metadata is required. Context: “a restconf client needs only http response headers for a”. This answer directly implements “HEAD”. Evidence: “yang resource and does not need the resource”.
- DELETE requests removal of the addressed resource and would be destructive rather than metadata-only. Context: “a restconf client needs only http response headers for a”. The controlling choice is “HEAD”. Evidence: “yang resource and does not need the resource”.
- POST is used for creation or operations and does not specifically request headers without a body. Context: “a restconf client needs only http response headers for a”. The controlling choice is “HEAD”. Evidence: “yang resource and does not need the resource”.
Question 10
A RESTCONF application team prefers JSON payloads. Which statement best describes RESTCONF data encoding?
- RESTCONF can represent YANG-modeled data using JSON or XML as supported
- RESTCONF requires ASN.1 BER only
- RESTCONF must encapsulate every request in a NETCONF `<rpc>` element
- RESTCONF accepts only unstructured CLI text
Correct Answer(s)
A
Rationale
- RESTCONF maps YANG data to structured HTTP representations and commonly supports JSON as well as XML, unlike NETCONF’s XML protocol messages. Context: “a restconf application team prefers json payloads which statement best”. This answer directly implements “RESTCONF can represent YANG-modeled data using JSON or XML as supported”. Evidence: “describes restconf data encoding”.
- ASN.1 BER is associated with protocols such as SNMP, not RESTCONF’s YANG resource encoding. Context: “a restconf application team prefers json payloads which statement best”. The controlling choice is “RESTCONF can represent YANG-modeled data using JSON or XML as supported”. Evidence: “describes restconf data encoding”.
- RESTCONF uses HTTP methods and resource URIs rather than requiring NETCONF RPC envelopes. Context: “a restconf application team prefers json payloads which statement best”. The controlling choice is “RESTCONF can represent YANG-modeled data using JSON or XML as supported”. Evidence: “describes restconf data encoding”.
- RESTCONF is model-driven and does not rely on CLI screen scraping. Context: “a restconf application team prefers json payloads which statement best”. The controlling choice is “RESTCONF can represent YANG-modeled data using JSON or XML as supported”. Evidence: “describes restconf data encoding”.
Question 11
A RESTCONF URI addresses a configuration object defined in a YANG module. Why is the YANG model important to the client?
- It selects the physical Ethernet speed
- It assigns BGP AS numbers automatically
- It defines the resource hierarchy, data types, and valid nodes
- It replaces HTTPS encryption
Correct Answer(s)
C
Rationale
- A data model does not negotiate physical link speed. Context: “a restconf uri addresses a configuration object defined in a”. The controlling choice is “It defines the resource hierarchy, data types, and valid nodes”. Evidence: “yang module why is the yang model important”.
- YANG can model BGP configuration, but the schema itself does not choose autonomous-system policy values. Context: “a restconf uri addresses a configuration object defined in a”. The controlling choice is “It defines the resource hierarchy, data types, and valid nodes”. Evidence: “yang module why is the yang model important”.
- YANG supplies the schema behind RESTCONF resources, allowing the client to form valid paths and values instead of guessing device-specific text commands. Context: “a restconf uri addresses a configuration object defined in a”. This answer directly implements “It defines the resource hierarchy, data types, and valid nodes”. Evidence: “yang module why is the yang model important”.
- YANG defines data; it does not provide the transport security supplied by HTTPS. Context: “a restconf uri addresses a configuration object defined in a”. The controlling choice is “It defines the resource hierarchy, data types, and valid nodes”. Evidence: “yang module why is the yang model important”.
Question 12
A device has YANG models available but RESTCONF HTTPS requests are refused locally. Routing to the device is correct. What should the engineer verify?
- The OSPF router ID matches the client
- The device is STP root
- RESTCONF and the required HTTPS/HTTP server services are enabled
- A GRE tunnel exists
Correct Answer(s)
C
Rationale
- OSPF identities do not control whether RESTCONF listens for HTTPS requests. Context: “a device has yang models available but restconf https requests”. The controlling choice is “RESTCONF and the required HTTPS/HTTP server services are enabled”. Evidence: “are refused locally routing to the device is”.
- Spanning-tree root status does not enable an HTTP management service. Context: “a device has yang models available but restconf https requests”. The controlling choice is “RESTCONF and the required HTTPS/HTTP server services are enabled”. Evidence: “are refused locally routing to the device is”.
- Reachability alone is insufficient. IOS XE must have the RESTCONF service and supporting secure HTTP service configured to accept requests. Context: “a device has yang models available but restconf https requests”. This answer directly implements “RESTCONF and the required HTTPS/HTTP server services are enabled”. Evidence: “are refused locally routing to the device is”.
- GRE is not a prerequisite for local RESTCONF service availability. Context: “a device has yang models available but restconf https requests”. The controlling choice is “RESTCONF and the required HTTPS/HTTP server services are enabled”. Evidence: “are refused locally routing to the device is”.
Question 13
An architect compares NETCONF and RESTCONF for the same YANG-modeled device data. Which distinction is accurate?
- RESTCONF cannot use YANG models
- NETCONF commonly uses SSH and XML RPCs, while RESTCONF uses HTTP(S) REST operations
- NETCONF requires SNMP MIBs instead of YANG
- NETCONF is Layer 2 only while RESTCONF is Layer 3 only
Correct Answer(s)
B
Rationale
- RESTCONF is explicitly designed around YANG-modeled resources. Context: “an architect compares netconf and restconf for the same yang”. The controlling choice is “NETCONF commonly uses SSH and XML RPCs, while RESTCONF uses HTTP(S) REST operations”. Evidence: “modeled device data which distinction is accurate”.
- Both protocols can operate on YANG-modeled data, but NETCONF uses an RPC protocol commonly over SSH whereas RESTCONF maps model data to web-style HTTP operations. Context: “an architect compares netconf and restconf for the same yang”. This answer directly implements “NETCONF commonly uses SSH and XML RPCs, while RESTCONF uses HTTP(S) REST operations”. Evidence: “modeled device data which distinction is accurate”.
- NETCONF uses YANG-based models on IOS XE rather than being limited to SNMP MIBs. Context: “an architect compares netconf and restconf for the same yang”. The controlling choice is “NETCONF commonly uses SSH and XML RPCs, while RESTCONF uses HTTP(S) REST operations”. Evidence: “modeled device data which distinction is accurate”.
- Both are application-layer management protocols carried over IP transports. Context: “an architect compares netconf and restconf for the same yang”. The controlling choice is “NETCONF commonly uses SSH and XML RPCs, while RESTCONF uses HTTP(S) REST operations”. Evidence: “modeled device data which distinction is accurate”.
Question 14
A configuration automation system must reduce the risk that two NETCONF clients modify the same writable datastore at the same time. Which NETCONF concept is relevant?
- Locking the target datastore where the capability is supported
- Increasing BGP weight
- Changing the STP hello timer
- Sending additional ICMP echo requests
Correct Answer(s)
A
Rationale
- NETCONF provides datastore locking operations so a client can coordinate exclusive modification when the device and datastore support that capability. Context: “a configuration automation system must reduce the risk that two”. This answer directly implements “Locking the target datastore where the capability is supported”. Evidence: “netconf clients modify the same writable datastore at”.
- Routing preference has no effect on transaction concurrency in a management datastore. Context: “a configuration automation system must reduce the risk that two”. The controlling choice is “Locking the target datastore where the capability is supported”. Evidence: “netconf clients modify the same writable datastore at”.
- STP timers cannot serialize NETCONF configuration clients. Context: “a configuration automation system must reduce the risk that two”. The controlling choice is “Locking the target datastore where the capability is supported”. Evidence: “netconf clients modify the same writable datastore at”.
- Reachability tests do not reserve or lock a configuration datastore. Context: “a configuration automation system must reduce the risk that two”. The controlling choice is “Locking the target datastore where the capability is supported”. Evidence: “netconf clients modify the same writable datastore at”.
Question 15
A NETCONF client has completed all required operations and wants to terminate its own session cleanly rather than abruptly dropping the SSH transport. Which NETCONF operation should it send?
- `get-schema`
- `kill-session` against its own session as the normal close method
- `edit-config`
- `close-session`
Correct Answer(s)
D
Rationale
- Get-schema retrieves a model definition where supported and leaves the session active. Context: “a netconf client has completed all required operations and wants”. The controlling choice is “`close-session`”. Evidence: “to terminate its own session cleanly rather than”.
- Kill-session is intended to terminate another NETCONF session by session ID, not as the ordinary graceful close for the current client. Context: “a netconf client has completed all required operations and wants”. The controlling choice is “`close-session`”. Evidence: “to terminate its own session cleanly rather than”.
- Edit-config changes datastore content and does not terminate the management session. Context: “a netconf client has completed all required operations and wants”. The controlling choice is “`close-session`”. Evidence: “to terminate its own session cleanly rather than”.
- NETCONF provides the close-session operation for a client to request an orderly termination of its own management session. It is preferable to simply abandoning the underlying transport. Context: “a netconf client has completed all required operations and wants”. This answer directly implements “`close-session`”. Evidence: “to terminate its own session cleanly rather than”.
Question 16
A NETCONF automation workflow must copy configuration from one supported source to a supported target datastore or configuration target without reconstructing every node as separate edits. Which operation is designed for this purpose?
- `close-session`
- HTTP HEAD
- `get`
- `copy-config`
Correct Answer(s)
D
Rationale
- Close-session ends the NETCONF session and performs no configuration copy. Context: “a netconf automation workflow must copy configuration from one supported”. The controlling choice is “`copy-config`”. Evidence: “source to a supported target datastore or configuration”.
- HEAD is an HTTP metadata method associated with REST-style management, not a NETCONF configuration-copy RPC. Context: “a netconf automation workflow must copy configuration from one supported”. The controlling choice is “`copy-config`”. Evidence: “source to a supported target datastore or configuration”.
- Get retrieves data and does not copy configuration into a target. Context: “a netconf automation workflow must copy configuration from one supported”. The controlling choice is “`copy-config`”. Evidence: “source to a supported target datastore or configuration”.
- NETCONF defines copy-config to copy an entire configuration from a specified source to a target supported by the device. It avoids expressing the task as many individual edit-config changes.
Question 17
A NETCONF reply is much larger than needed. The client only requires interface data from the device. What mechanism should the client use?
- Increase the OSPF cost
- Change the MTU until the reply becomes shorter
- A NETCONF filter that limits the requested subtree or fields
- Disable YANG models unrelated to interfaces
Correct Answer(s)
C
Rationale
- Routing metrics do not affect which model nodes a NETCONF server returns. Context: “a netconf reply is much larger than needed the client”. The controlling choice is “A NETCONF filter that limits the requested subtree or fields”. Evidence: “only requires interface data from the device what”.
- MTU influences packetization, not the logical amount of requested management data. Context: “a netconf reply is much larger than needed the client”. The controlling choice is “A NETCONF filter that limits the requested subtree or fields”. Evidence: “only requires interface data from the device what”.
- NETCONF filtering constrains returned data so the client can request the relevant portion of the model rather than retrieving an unnecessarily large data tree. Context: “a netconf reply is much larger than needed the client”. This answer directly implements “A NETCONF filter that limits the requested subtree or fields”. Evidence: “only requires interface data from the device what”.
- Removing models is unnecessary and can break other clients; a query filter is the targeted solution. Context: “a netconf reply is much larger than needed the client”. The controlling choice is “A NETCONF filter that limits the requested subtree or fields”. Evidence: “only requires interface data from the device what”.
Question 18
A RESTCONF client receives an HTTP 401 response when reading a resource. Network reachability and TLS negotiation succeed. What should be investigated first?
- The BGP MED value
- The OSPF DR election
- Authentication credentials or authorization setup for the RESTCONF request
- The switch CAM table aging timer
Correct Answer(s)
C
Rationale
- MED influences routing decisions and does not authorize RESTCONF users. Context: “a restconf client receives an http 401 response when reading”. The controlling choice is “Authentication credentials or authorization setup for the RESTCONF request”. Evidence: “a resource network reachability and tls negotiation succeed”.
- Routing-protocol election state is unrelated to an application-layer 401 response. Context: “a restconf client receives an http 401 response when reading”. The controlling choice is “Authentication credentials or authorization setup for the RESTCONF request”. Evidence: “a resource network reachability and tls negotiation succeed”.
- HTTP 401 indicates that the request lacks valid authentication for the resource. The transport path already works, so credentials/token handling is the first issue to correct. Context: “a restconf client receives an http 401 response when reading”. This answer directly implements “Authentication credentials or authorization setup for the RESTCONF request”. Evidence: “a resource network reachability and tls negotiation succeed”.
- MAC aging does not produce HTTP authentication status codes. Context: “a restconf client receives an http 401 response when reading”. The controlling choice is “Authentication credentials or authorization setup for the RESTCONF request”. Evidence: “a resource network reachability and tls negotiation succeed”.
Question 19
A RESTCONF client sends a JSON body but labels it with an unrelated media type. The server rejects the request despite valid JSON syntax. What should be corrected?
- Increase the Ethernet frame size
- Use the RESTCONF media type/content headers expected for the YANG JSON payload
- Change the switch root bridge
- Add a BGP community to the HTTPS packets
Correct Answer(s)
B
Rationale
- Frame size does not correct application-layer media metadata. Context: “a restconf client sends a json body but labels it”. The controlling choice is “Use the RESTCONF media type/content headers expected for the YANG JSON payload”. Evidence: “with an unrelated media type the server rejects”.
- REST APIs rely on content negotiation and media types. The body must be identified using the RESTCONF/YANG JSON content type expected by the endpoint. Context: “a restconf client sends a json body but labels it”. This answer directly implements “Use the RESTCONF media type/content headers expected for the YANG JSON payload”. Evidence: “with an unrelated media type the server rejects”.
- STP topology is unrelated to RESTCONF request-body interpretation. Context: “a restconf client sends a json body but labels it”. The controlling choice is “Use the RESTCONF media type/content headers expected for the YANG JSON payload”. Evidence: “with an unrelated media type the server rejects”.
- BGP attributes cannot change an HTTP request’s content type. Context: “a restconf client sends a json body but labels it”. The controlling choice is “Use the RESTCONF media type/content headers expected for the YANG JSON payload”. Evidence: “with an unrelated media type the server rejects”.
Question 20
An engineer enabled NETCONF and wants to confirm whether clients currently have active NETCONF sessions on an IOS XE device. Which verification approach is most appropriate?
- Use the device’s NETCONF/YANG session verification command
- Inspect only `show spanning-tree`
- Inspect only the BGP table
- Clear the ARP table and wait
Correct Answer(s)
A
Rationale
- IOS XE provides operational commands for checking NETCONF/YANG sessions, which directly verifies whether management clients are connected. Context: “an engineer enabled netconf and wants to confirm whether clients”. This answer directly implements “Use the device’s NETCONF/YANG session verification command”. Evidence: “currently have active netconf sessions on an ios”.
- Spanning-tree output contains Layer 2 topology state, not NETCONF client sessions. Context: “an engineer enabled netconf and wants to confirm whether clients”. The controlling choice is “Use the device’s NETCONF/YANG session verification command”. Evidence: “currently have active netconf sessions on an ios”.
- BGP routes do not show model-driven management sessions. Context: “an engineer enabled netconf and wants to confirm whether clients”. The controlling choice is “Use the device’s NETCONF/YANG session verification command”. Evidence: “currently have active netconf sessions on an ios”.
- Clearing ARP is disruptive and does not directly verify NETCONF session state. Context: “an engineer enabled netconf and wants to confirm whether clients”. The controlling choice is “Use the device’s NETCONF/YANG session verification command”. Evidence: “currently have active netconf sessions on an ios”.