300-435 Question 103
Select 3You are tasked with automating the configuration of a Cisco device using RESTCONF. During the process, you need to ensure secure communication between your automation script and the device. Which steps should you take to establish a secure RESTCONF connection?
- A
Generate an SSL/TLS certificate and configure it on the Cisco device
- B
Ensure the device has RESTCONF enabled using the 'restconf' command
- C
Use HTTP instead of HTTPS to simplify the connection setup
- D
Include authentication credentials (username and password) in the RESTCONF requests
- E
Manually configure the RESTCONF port to 80 for compatibility
Show answer and explanation
Correct answers: A, B, D
Explanation
To establish a secure RESTCONF connection, you must ensure encryption using SSL/TLS by generating and configuring the appropriate certificates on the Cisco device. Additionally, RESTCONF must be explicitly enabled, and authentication credentials must be included in the requests. The use of HTTPS instead of HTTP ensures the confidentiality and integrity of the data being transferred. Avoid using insecure configurations such as port 80.
- A. Correct.
Generating an SSL/TLS certificate and configuring it on the device ensures encrypted communication, which is essential for secure RESTCONF operations.
- B. Correct.
RESTCONF must be enabled on the Cisco device for any RESTCONF-based communication to occur.
- C. Incorrect.
HTTP does not provide encryption, making it insecure for RESTCONF communication. HTTPS must be used instead.
- D. Correct.
Providing authentication credentials in the RESTCONF requests is necessary for secure and authenticated communication with the device.
- E. Incorrect.
Manually setting the RESTCONF port to 80 would compromise security since port 80 is associated with unencrypted HTTP communication.