350-401 Question 231
Select 3You are tasked with configuring a Cisco device to use RESTCONF for network automation. You have already enabled the RESTCONF feature on the device. Which of the following steps are required to complete the configuration and allow RESTCONF-based access?
- A
Ensure the HTTPS server is enabled on the device.
- B
Create and apply an access control list (ACL) to limit RESTCONF access.
- C
Verify that the device is running a supported version of NETCONF.
- D
Generate a self-signed certificate or install a trusted certificate for secure communication.
- E
Enable SSH on the device for RESTCONF functionality.
Show answer and explanation
Correct answers: A, B, D
Explanation
To enable RESTCONF access on a Cisco device, you must ensure the HTTPS server is enabled since RESTCONF uses HTTPS for secure communication. It is also important to apply an ACL to restrict access and secure the communication channel by using a certificate. SSH is not required for RESTCONF, and RESTCONF does not depend on NETCONF versions as they are separate protocols.
- A. Correct.
Correct. RESTCONF requires HTTPS for secure communication. Enabling the HTTPS server ensures secure access to the RESTCONF API.
- B. Correct.
Correct. Applying an ACL is a best practice to restrict RESTCONF access to authorized clients.
- C. Incorrect.
Incorrect. While NETCONF and RESTCONF are related, RESTCONF does not depend on the NETCONF version. They are separate protocols.
- D. Correct.
Correct. Secure communication via HTTPS requires the use of a certificate. You can generate a self-signed certificate or install a trusted one.
- E. Incorrect.
Incorrect. RESTCONF does not depend on SSH. SSH is primarily used for NETCONF or CLI-based access.