5.7 Configure Dial-In/out, TCP, TLS and mTLS Certificates Using gRPC and gNMI 350-501 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of configuring TCP keepalives for a gRPC/gNMI connection?

   • ATo encrypt the data transmitted over the connection
   • BTo compress the data to reduce bandwidth usage
   • CTo detect and close stale or broken connections
   • DTo authenticate the remote peer
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of installing a TLS certificate on a network device for gNMI?

   • ATo define the YANG data model for the device
   • BTo specify the gNMI subscription paths
   • CTo compress the telemetry data before transmission
   • DTo encrypt the gRPC communication between the device and the collector
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A service provider is configuring gNMI dial-out from a router to a collector. The connection must be secure, and the operator has configured TLS with a server certificate on the collector. The router is configured to connect to the collector's address. When the router attempts to connect, the TLS handshake fails because the router does not trust the collector's certificate. What is the most likely missing configuration on the router?

   • AThe router is configured for dial-in instead of dial-out
   • BThe CA that signed the collector's certificate is not in the router's trust store
   • CThe router's client certificate is not installed
   • DThe collector's certificate has expired
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which TCP transport parameter would you adjust to control how long the device waits for a response before considering a gRPC request failed?

   • AKeepalive interval
   • BTimeout
   • CBuffer size
   • DWindow size
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A router is configured for gNMI dial-in with mTLS. The router's server certificate is about to expire. The operator has generated a new key pair and a new CSR, and the new certificate has been issued by the CA. The operator installs the new certificate and key on the router. What additional step is required to ensure uninterrupted mTLS sessions?

   • ARestart the gNMI service on the router to load the new certificate
   • BUpdate the management station's trust store with the new certificate
   • CConfigure the router to use the old certificate until the new one is requested
   • DRegenerate the management station's client certificate
   Reveal Solution Discussion Select an answer first