Exam 350-501 topic 1 question 41 discussion

I'd say it's C as in B you only _enable that keychain to be used there for that neighbor_, but you have to actually _configure_ it in the global..

Correct answer is B, BGP keychain is configured under nbr config modes https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/bgp/63x/b-bgp-cg-ncs5500-63x/b-bgp-cg-ncs5500-63x_chapter_010.html#task_81A7295F447946F880AB22C5D647CFF8

to config BGP keychain : RP/0/RP0/CPU0:ios(config)# key chain <keychain-name> RP/0/RP0/CPU0:ios(config-keychain)# key <key-id> RP/0/RP0/CPU0:ios(config-keychain-key)# key-string <key-string> RP/0/RP0/CPU0:ios(config-keychain-key)# send-lifetime <start-time> <end-time> RP/0/RP0/CPU0:ios(config-keychain-key)# accept-lifetime <start-time> <end-time> to enable BGP keychain : RP/0/RP0/CPU0:ios(config)# router bgp <asn> RP/0/RP0/CPU0:ios(config-bgp)# neighbor <neighbor-ipv4/ipv6> RP/0/RP0/CPU0:ios(config-bgp-nbr)# password keychain <keychain-name>

B because they are asking for BGP ...

Key chain is a General mode configuration applicable for other services, in the BGP mode we're enabling the keychain, which was preconfigured before

I guess answer is "c": https://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs-r6-4/system-security/configuration/guide/b-system-security-cg-crs-64x/b-system-security-cg-crs-64x_chapter_0100.pdf

Answer is C https://www.cisco.com/c/en/us/td/docs/routers/xr12000/software/xr12k_r3-9/security/configuration/guide/sc39kcm.html#wp1074457 https://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs-r6-2/system-security/command/reference/b-system-security-cr-62x-crs/m-keychain-management-commands-asr9k-ncs6k-crs.html#wp2210940733

It is: B. SUMMARY STEPS configure router bgp [as-number] neighbor [ip-address] remote-as [as-number] keychain [name] Use the [commit] or [end] command. So, "Keychain Configuration" actually takes place from here: key chain <keychain_name> key <key_id> accept-lifetime <start-time> <end-time> key-string <master-key> send-lifetime <start-time> <end-time> cryptographic-algorithm <algorithm> ! https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/bgp/63x/b-bgp-cg-ncs5500-63x/b-bgp-cg-ncs5500-63x_chapter_010.html#id_77358

B according to Cisco XR guide below: configure router bgp as-number neighbor ip-address remote-as as-number keychain name https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/bgp/63x/b-bgp-cg-ncs5500-63x/b-bgp-cg-ncs5500-63x_chapter_010.html#:~:text=override%20inherited%20values.-,SUMMARY%20STEPS,-configure

I would say the answer is B. In the global configuration mode you can create a keychain, which can be used for BGP but also for ISIS or OSPF. The question is asking specifically for a BGP keychain which can be configured under the BGP neighbor configuration mode. For this reason I would say B is a more specific answer

C is correct. It is the keychain, not bop password.