exam questions

Exam 350-401 All Questions

View all questions & answers for the 350-401 exam

Exam 350-401 topic 1 question 907 discussion

Actual exam question from Cisco's 350-401
Question #: 907
Topic #: 1
[All 350-401 Questions]



Refer to the exhibit. An engineer must configure router R1 to allow only NETCONF connections from the management VLAN. Which command completes this configuration?

  • A. R1(config-if)# ip access-group netconfacl in
  • B. R1(config)# netconf-yang ipv4 access-list name netconfacl
  • C. R1(config)#ip http secure-server
    R1(config)# ip http accounting commands 12 default
  • D. R1(config-if)#ip access-group netconfacl out
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
gorillaenhanced
Highly Voted 1 year, 2 months ago
Selected Answer: B
B, but it is missing the 'ssh' keyword : netconf-yang ssh {{ipv4 | ipv6 }access-list name access-list-name} | port port-number}
upvoted 7 times
...
peugeotdude
Highly Voted 1 year, 3 months ago
Selected Answer: B
It's B see https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/1612/b_1612_programmability_cg/netconf_and_restconf_service_level_acls.pdf
upvoted 7 times
...
[Removed]
Most Recent 10 months, 3 weeks ago
Selected Answer: B
it´s B
upvoted 1 times
...
Mizuchan
1 year, 3 months ago
Selected Answer: D
In a typical scenario where the goal is to restrict NETCONF connections from a specific VLAN (such as the management VLAN), using an access control list (ACL) applied outbound on the interface connected to that VLAN is a common approach.
upvoted 1 times
COLONEL_MAJOR
1 year, 2 months ago
enable 2. configure terminal 3. • ip access-list {standard | extended} access-list-name • ipv6 access-list access-list-name 4. permit {host-address | host-name | any} [wildcard] 5. deny {host-address | host-name | any} [wildcard] 6. exit 7. netconf-yang ssh {{ipv4 | ipv6 }access-list name access-list-name} | port port-number} 8. end go study
upvoted 1 times
...
...
Tadese
1 year, 3 months ago
Selected Answer: B
: Configuring an ACL for a NETCONF Session Device# enable Device# configure terminal Device(config)# ip access-list standard acl1_permit Device(config-std-nacl)# permit 192.168.255.0 0.0.0.255 Device(config-std-nacl)# deny any Device(config-std-nacl)# exit Device(config)# netconf-yang ssh ipv4 access-list name acl1_permit Device(config)# end
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago