Exam 350-401 All QuestionsBrowse all questions from this exam
Go to Exam
Question 611

    Correct Answer: C

    To enable a successful login to router R1 and to support NETCONF/YANG data modeling, the configuration must include setting up AAA (Authentication, Authorization, and Accounting) using the 'aaa new-model' command. The username must be created with privilege 15 and a secret password specified. Additionally, the 'netconf-yang' command is required to support NETCONF/YANG, as it registers NETCONF capabilities on the device. Therefore, the correct configuration is: 'netconf-yang', 'username admin privilege 15 secret cisco123', 'aaa new-model', and 'aaa authorization exec default local'.

Discussion
MO_2022

An engineer tries to log in to router R1. Which configuration enables a successful login?

JochenStacker

Can confirm this from another dump.

iEpsilonOption: C

Provided answer is not correct, because you cannot use "aaa" unless you create aaa new-model. https://www.cisco.com/c/en/us/support/docs/storage-networking/management/200933-YANG-NETCONF-Configuration-Validation.html#:~:text=Configure-,1.%20Basic%20Configuration%20of%20a%20Catalyst%203850%20Running%20IOS%2DXE%2016.3.3%20Software%20to%20Support%20NETCONF/YANG%20Data%20Modeling,-3850%2D1%23

Tacolicious

Don't know what the question is, but the example is taken from your link and the config of C seems to line up with Step 1, so i'm inclined to agree with you.

AndreasThornus

The link here is excellent but to my mind suggests D assuming we are using a minimal config, you can configure AAA to use a local database as per the text below. This matches D. "If it is desired to enable AAA (authentication, authorization, and accounting) by configuring "aaa new-model" then this configuration is also required at a minimum. You can also expand this to use AAA with a TACACS+ or RADIUS configuration but this is beyond the scope of this example. aaa new-model aaa authorization exec default local -------------> Required for NETCONF-SSH connectivity and edit-config op"

Vip44000

The moderator should take acton to fix wrong answers. We didn't payed for so many wrong answers in this dump

dancott

Looks like the question is missing?

SeMo0o0oOption: C

C is correct username admin privilege 15 secret cisco123 aaa new-model

TacoliciousOption: C

I think it's C, See iEpsilon's comment

KrausmiesterOption: C

C is correct

CCNPWILLOption: C

You see netconf/XML output and the only answer choice dealing with netconf yang is C ... Gimme question guys.

djedeenOption: C

C: global cmd 'netconf-yang' is required for NETCONF/YANG support, good description at the link: https://networkop.co.uk/blog/2017/01/25/netconf-intro/

Cesar12345Option: C

https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/10384-security.html#anc15 says that until aaa-new model is used other aaa commands are hidden.