nerdexam
Cisco

350-501 · Question #359

After troubleshooting multiple outages on the network due to repeated configuration errors, the network architect asked an engineer to enable NETCONF to facilitate future configurations. The…

The correct answer is C. netconf-yang username ciscotesttaker privilege 15 password 0 ciscotest aaa new-model aaa. To enable NETCONF and ensure syslog messaging for its notifications, the engineer must activate the NETCONF-YANG subsystem and configure appropriate user authentication.

Automation and Assurance

Question

After troubleshooting multiple outages on the network due to repeated configuration errors, the network architect asked an engineer to enable NETCONF to facilitate future configurations. The configuration must enable syslog messaging to record NETCONF notifications from each of the numerous devices on the network. Which configuration must the engineer apply?

Options

  • Ausername cisco test taker privilege 15 password 0 cisco test aaa new-model aaa authorization
  • Busername cisco test taker privilege 15 password 0 ciscotest aaa new-model aaa authorization
  • Cnetconf-yang username ciscotesttaker privilege 15 password 0 ciscotest aaa new-model aaa
  • Dnetconf-yang username ciscotesttaker privilege 15 password 0 ciscotest snmp-server community

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    75% (24)
  • D
    16% (5)

Why each option

To enable NETCONF and ensure syslog messaging for its notifications, the engineer must activate the NETCONF-YANG subsystem and configure appropriate user authentication.

Ausername cisco test taker privilege 15 password 0 cisco test aaa new-model aaa authorization

This option configures a local username and enables AAA, but it does not include the `netconf-yang` command, which is required to activate the NETCONF/YANG subsystem on the device.

Busername cisco test taker privilege 15 password 0 ciscotest aaa new-model aaa authorization

Similar to option A, this choice configures a local username and enables AAA but fails to include the `netconf-yang` command necessary for enabling NETCONF.

Cnetconf-yang username ciscotesttaker privilege 15 password 0 ciscotest aaa new-model aaaCorrect

The `netconf-yang` command is essential to enable the NETCONF and YANG subsystems on a device, allowing for programmatic configuration. Creating a username and configuring AAA (`aaa new-model aaa authorization`) provides the necessary authentication and authorization for secure NETCONF access. Once NETCONF is enabled, the device automatically generates syslog messages for NETCONF events, which can be collected by a syslog server if logging is properly configured.

Dnetconf-yang username ciscotesttaker privilege 15 password 0 ciscotest snmp-server community

While this option correctly enables `netconf-yang` and creates a user, it then configures `snmp-server community`, which is for SNMP management and unrelated to enabling syslog for NETCONF notifications.

Concept tested: NETCONF-YANG enablement and authentication

Source: https://www.cisco.com/c/en/us/td/docs/routers/xr12000/software/xr12k_r4-2/program_net/configuration/guide/prog_net_cli_cg42_chapter1.html

Topics

#NETCONF#Network Automation#Cisco Configuration#Authentication (AAA)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 350-501 Practice