5.7 Configure Dial-In/out, TCP, TLS and mTLS Certificates Using gRPC and gNMI 350-501 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In an mTLS setup for gNMI, what is required for the client (collector) to authenticate to the server (network device)?

   • AA client certificate and its private key
   • BThe server's public certificate
   • COnly a username and password
   • DA shared secret key
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A service provider is configuring gNMI dial-out from a router to a collector. The collector's IP address is 192.0.2.10 and it listens on port 57400. The router must also send telemetry to a backup collector at 192.0.2.11 on the same port. The operator wants to configure both destinations in a single gNMI dial-out configuration. What is the correct approach?

   • AConfigure two separate gNMI dial-out destinations, one for each collector
   • BConfigure a single gNMI dial-out destination with a multicast address
   • CConfigure one gNMI dial-out destination and rely on the collector to forward data to the backup
   • DConfigure a single gNMI dial-out destination with both IP addresses in the target field
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A service provider is setting up secure gNMI dial-in on a router. The router will act as the gRPC server, and the management station will connect to it. The operator has generated a private key and a certificate signing request (CSR) on the router. What is the next step to complete the TLS server certificate installation?

   • ASubmit the CSR to a CA, then install the returned certificate and the private key on the router
   • BInstall the private key on the management station and the CSR on the router
   • CConfigure the router to use the CSR directly as its server certificate
   • DGenerate a new self-signed certificate and ignore the CSR
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network operator is configuring gNMI dial-out from a router to a collector. The telemetry data is high-volume, and the operator wants to ensure the TCP session can handle the throughput without packet loss. Which TCP transport parameter should be adjusted on the router?

   • AIncrease the TCP keepalive interval
   • BIncrease the TCP receive buffer size
   • CDecrease the TCP connection timeout
   • DEnable TCP keepalives on the session
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A service provider is deploying gNMI telemetry from a fleet of edge routers to a central collector. The collector is behind a NAT device and cannot accept inbound connections from the routers. The network team needs the routers to establish the telemetry sessions themselves. Which configuration approach should the team use on the routers?

   • AEnable TCP keepalives on the router's management interface
   • BConfigure gNMI dial-in with the collector's public IP address and port 57400
   • CConfigure gNMI dial-out with the collector's address and subscription parameters
   • DInstall a self-signed certificate on the router for the collector to validate
   Reveal Solution Discussion Select an answer first