Discuss Cisco 350-401 Exam Topic 1 Question 5

Which statement about TLS is true when using RESTCONF to write configurations on network devices?

AIt is provided using NGINX acting as a proxy web server.

BIt is no supported on Cisco devices.

CIt required certificates for authentication.

DIt is used for HTTP and HTTPs requests.

Suggested Answer: A

When a device boots up with the startup configuration, the nginx process will be running. NGINX

is an internal webserver that acts as a proxy webserver. It provides Transport Layer

Security (TLS)-based HTTPS. RESTCONF request sent via HTTPS is first received by the NGINX

proxy web server, and the request is transferred to the confd web server for further

syntax/semantics check.

ios/prog/configuration/168/b_168_programmability_cg/RESTCONF.html

The https-based protocol-RESTCONF (RFC 8040), which is a stateless protocol, uses secure HTTP

methods to provide CREATE, READ, UPDATE and DELETE (CRUD) operations on a conceptual

datastore containing YANG-defined data -> RESTCONF only uses HTTPs.

Get Premium 350-401 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

11 comments · newest first

Fabiola 12 months ago

A is misleading, NGINX isn't the only way to implement TLS.

Lauran 12 months ago

Wait, is it really not supported on Cisco devices?

Patti 1 year ago

Agree, C is the correct answer!

Jenise 1 year ago

I thought TLS was only for HTTPS, not HTTP?

Fannie 1 year ago

TLS definitely requires certificates for authentication.

Isaiah 1 year ago

Option B seems promising - using Route 53 weighted routing to distribute the load across the new CloudFormation stack. That could be a good way to safely roll out the new version.

Kyoko 1 year ago

Hmm, I'm a bit unsure about some of these rules. I'll need to review the DRM documentation to refresh my memory.

Henriette 1 year ago

Hmm, this seems like a tricky one. I'll need to think carefully about the differences between the ordinal, interval, and ratio data levels.

Nana 1 year ago

I'm a bit confused on this one. Without any port-access roles configured, I'm not sure what the authenticator would allow. Maybe it's just RADIUS traffic? Or DHCP and DNS? Hmm, I'll have to think it through step-by-step.

Judy 1 year ago

I think non-normalized carbon steel might not have an endurance limit, but I'm not completely sure.

Tijuana 1 year ago

I feel pretty good about this question. The instructions are clear, and the options provided seem straightforward. I think I can systematically go through the choices and identify the three correct actions to automatically create the purchase order for the stereo receiver.

Cisco 350-401 Exam - Topic 1 Question 5 Discussion