Free Access to Cisco.300-435.v2025-11-03.q158 with Valid Practice Test (Page 31)

Question 146

Management protocols like NETCONF access network elements on well-known ports.
Which design practice hardens a network device implementation?

A.Specify the source interface for SSH .
B.Limit access to port 830, well-known clients, and SSH VTY.
C.Enable CoPP.
D.Configure ip http secure-server.

Question 147

Refer to the exhibit. A RESTCONF GET request is sent to a Cisco IOS XE device. The base URL of the request and the response in XML format are shown in the exhibit. What are the two YANG data nodes and modules referenced in the response? (Choose two.)

A.ipv4 is a container defined in the ietf-ip module
B.The ethernetCsmacd type is imported from the iana-if-type module
C.interface has the YANG data node type of container
D.description is a key field defined in the interface list
E.address is a container defined in the ietf-interfaces module

Question 148

What are two benefits of leveraging Ansible for automation of Cisco IOS XE Software? (Choose two.)

A.Ansible playbooks are packaged and installed on IOS XE devices for automatic execution when an IOS device reboots.
B.All IOS XE operating systems include Ansible playbooks for basic system administration tasks.
C.It is a device-independent method for automation and can be used with any type of device or operating system.
D.Ansible playbooks can be written from the IOS XE EXEC command line to configure the device itself.
E.It does not require any modules of software except SSH to be loaded on the network device.

Question 149

Which curl command is used to update the SNMP community of network ID "1234567" to read-only?

A.Option A
B.Option B
C.Option C
D.Option D

Question 150

Drag and drop the characteristic from the left onto the monitoring type described on the right

Question 146

Question 147

Question 148

Question 149

Question 150

Download PDF File