nerdexam
Huawei

H12-891_V1.0 · Question #169

There are many protocols that can change or obtain network device data. Which of the following protocols cannot be used to change network device data?

The correct answer is B. IPsec. IPsec is a security protocol designed to encrypt and authenticate IP traffic in transit - it protects how data moves between devices, but provides no mechanism to read or modify device configuration data. It has no management plane capability whatsoever. The other three are all…

SDN and Network Automation

Question

There are many protocols that can change or obtain network device data. Which of the following protocols cannot be used to change network device data?

Options

  • ASNMP
  • BIPsec
  • CNETCONF
  • DRESTCONF

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    85% (22)
  • C
    8% (2)
  • D
    4% (1)

Explanation

IPsec is a security protocol designed to encrypt and authenticate IP traffic in transit - it protects how data moves between devices, but provides no mechanism to read or modify device configuration data. It has no management plane capability whatsoever.

The other three are all management protocols with write capability: SNMP (Simple Network Management Protocol) uses SET operations to push configuration changes to devices; NETCONF is an IETF protocol that uses XML over SSH specifically to install, manipulate, and delete network device configuration; RESTCONF is a REST-based companion to NETCONF that provides HTTP-based read/write access to the same data models.

Memory tip: Think of IPsec as a security guard for the highway - it secures the road but doesn't touch the vehicles or their destinations. The other three (SNMP, NETCONF, RESTCONF) are mechanics - they can open the hood and change things.

Topics

#Network Management Protocols#Device Configuration#IPsec Security#SNMP/NETCONF/RESTCONF

Community Discussion

No community discussion yet for this question.

Full H12-891_V1.0 Practice