nerdexam
Cisco

350-501 · Question #181

Which statement about TLS is accurate when using RESTCONF to write configurations on network devices'?

The correct answer is A. It requires certificates for authentication. When using RESTCONF to securely write configurations, TLS is essential for encrypting communication and requires certificates for authenticating the server and optionally the client.

Automation and Assurance

Question

Which statement about TLS is accurate when using RESTCONF to write configurations on network devices'?

Options

  • AIt requires certificates for authentication.
  • BIt is provided using NGINX acting as a proxy web server
  • CIt is used for HTTP and HTTPS requests.
  • DIt is not supported on Cisco devices

How the community answered

(37 responses)
  • A
    86% (32)
  • B
    3% (1)
  • C
    8% (3)
  • D
    3% (1)

Why each option

When using RESTCONF to securely write configurations, TLS is essential for encrypting communication and requires certificates for authenticating the server and optionally the client.

AIt requires certificates for authentication.Correct

TLS (Transport Layer Security) inherently relies on digital certificates to establish trust and authenticate the server (and optionally the client) in a secure communication channel, which is crucial for protecting configuration changes via RESTCONF over HTTPS.

BIt is provided using NGINX acting as a proxy web server

While NGINX can be used as a reverse proxy, it is not a requirement or an inherent part of how TLS itself is provided in the context of RESTCONF on a network device; the device itself typically acts as the TLS server.

CIt is used for HTTP and HTTPS requests.

TLS is used to secure HTTP, resulting in HTTPS, and RESTCONF typically runs over HTTPS; it is not directly used for unencrypted HTTP requests.

DIt is not supported on Cisco devices

Cisco devices widely support TLS for secure management interfaces, including RESTCONF, making this statement false.

Concept tested: TLS and RESTCONF security

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1610/b_1610_prog_config_guide/restconf_overview.html

Topics

#TLS#RESTCONF#Network Security#Certificates

Community Discussion

No community discussion yet for this question.

Full 350-501 Practice