5.7 Configure Dial-In/out, TCP, TLS and mTLS Certificates Using gRPC and gNMI 350-501 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the key difference between TLS and mutual TLS (mTLS) in a gNMI session?

   • AmTLS is only used for dial-out connections, while TLS is used for dial-in
   • BmTLS uses a different encryption algorithm than TLS
   • CmTLS does not encrypt data, while TLS does
   • DmTLS requires both the client and the server to present certificates, while TLS only requires the server to present a certificate
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When configuring TLS for gNMI, what does 'referencing' a certificate mean in the device configuration?

   • ACopying the certificate to all connected collectors
   • BConverting the certificate to a different format
   • CDeleting the certificate after use
   • DPointing the gRPC server configuration to the installed certificate and key
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of certificate revocation in the context of gNMI security?

   • ATo convert a certificate to a different format
   • BTo invalidate a certificate before its expiration date, typically due to compromise or loss
   • CTo extend the validity period of a certificate
   • DTo encrypt the certificate for secure storage
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A network operator is configuring gNMI between a router and a management station. The security policy requires that the management station prove its identity to the router, and the router prove its identity to the management station, using X.509 certificates. Which configuration must be applied to enable this mutual authentication?

   • AInstall the CA certificate on both devices and configure the router to request and validate a client certificate
   • BGenerate a pre-shared key and configure it on both the router and the management station
   • CInstall a server certificate on the router and configure the management station to trust the router's CA
   • DDisable certificate validation on the router to allow the management station to connect
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An engineer is troubleshooting intermittent gNMI dial-out telemetry drops between a router and a collector. The sessions drop after periods of inactivity, and the engineer suspects an intermediate firewall is closing idle TCP sessions. Which TCP transport parameter should be configured on the router to proactively prevent the firewall from terminating the session?

   • ADecrease the TCP keepalive interval
   • BIncrease the TCP receive buffer size
   • CIncrease the TCP connection timeout
   • DDisable TCP keepalives on the gNMI session
   Reveal Solution Discussion Select an answer first