CCNP Automation Practice Question
A network automation team is designing a solution to manage configuration changes across a fleet of Cisco IOS XE devices. They want to use model-driven programmability with YANG data models. Which two protocols can be used to programmatically retrieve and modify configuration using YANG models on these devices? (Choose two.)
⚠ Common exam trap
The trap here is assuming that any remote management protocol can use YANG models, when only NETCONF and RESTCONF are designed for model-driven programmability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
RESTCONF over HTTPS
NETCONF and RESTCONF are the two primary protocols for model-driven programmability using YANG models on Cisco IOS XE. NETCONF uses SSH and XML, while RESTCONF uses HTTPS and JSON/XML. Both allow structured configuration and state retrieval. SNMP, Telnet, and CLI-based SSH do not natively support YANG and are not considered model-driven.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
RESTCONF over HTTPS
Why this is correct
RESTCONF is a RESTful protocol that also uses YANG models. It maps YANG data to HTTP methods (GET, POST, PUT, PATCH, DELETE) and uses JSON or XML. Cisco IOS XE supports RESTCONF over HTTPS. It is ideal for web-based automation and integrates well with modern tooling. It is a valid protocol for model-driven configuration.
- ✓
NETCONF over SSH
Why this is correct
NETCONF is a standard protocol that uses YANG models to define configuration and state data. It operates over SSH (port 830) and provides operations like <get-config>, <edit-config>, and <copy-config>. Cisco IOS XE supports NETCONF, allowing programmatic configuration management using YANG. It is a primary choice for model-driven automation.
- ✗
SSH with CLI commands
Why it's wrong here
SSH with CLI commands is similar to Telnet but encrypted. It still relies on parsing CLI output and does not use YANG models. It is not model-driven and lacks the structured, programmatic interface of NETCONF or RESTCONF. Therefore, it cannot be used to programmatically modify configuration using YANG models.
- ✗
CLI over Telnet
Why it's wrong here
CLI over Telnet is a text-based interface that does not use YANG models. It requires screen scraping and is not model-driven. Telnet is also insecure. While it can be automated with tools like Expect, it does not provide structured, model-based access to configuration. Thus, it does not meet the requirement of using YANG models.
- ✗
SNMPv3 with YANG models
Why it's wrong here
SNMPv3 is a legacy management protocol that uses MIBs, not YANG models. While SNMP can retrieve statistics and some configuration, it does not natively support YANG. There is no standard mapping of YANG to SNMP. Therefore, SNMPv3 cannot be used to programmatically modify configuration using YANG models as required.
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.