The answer is SSH connectivity to the switch. NETCONF is defined by RFC 6242 to operate exclusively over SSH as its secure transport layer, meaning that without an active SSH session, the NETCONF client cannot establish a connection to the NETCONF server running on the Nexus 9000. This requirement is fundamental because NETCONF relies on SSH for authentication, encryption, and session management, ensuring that all configuration automation traffic is protected. On the Cisco DCCOR 350-601 exam, this concept often appears in questions about NETCONF requirements for Nexus 9000, where a common trap is confusing NETCONF’s transport with HTTP or TLS—remember that NETCONF never uses HTTP directly. To succeed, you must also ensure YANG models are installed for the target configurations, but the non-negotiable prerequisite is SSH reachability. Memory tip: think “NETCONF rides on SSH” to recall that SSH is the mandatory carrier for all NETCONF operations.
350-601 Automation Practice Question
This 350-601 practice question tests your understanding of automation. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Which THREE components are required to successfully use NETCONF for configuration automation on a Nexus 9000 switch?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SSH connectivity must be established to the switch
B is correct because NETCONF operates over SSH as its transport protocol (RFC 6242), so SSH connectivity to the switch is mandatory for establishing the NETCONF session. Without SSH, the NETCONF client cannot connect to the NETCONF server running on the Nexus 9000.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
The NX-API must be enabled as a fallback
Why it's wrong here
NETCONF operates independently; NX-API is not required.
✓
SSH connectivity must be established to the switch
Why this is correct
NETCONF uses SSH as its transport protocol (RFC 6242).
Related concept
Read the scenario before looking for a memorised answer.
✓
The NETCONF agent must be enabled via 'feature netconf' configuration
Why this is correct
Without the feature, the NETCONF server will not listen for connections.
Related concept
Read the scenario before looking for a memorised answer.
✓
YANG models must be installed or supported for the target configurations
Why this is correct
NETCONF uses YANG as its data modeling language; the switch must support the models needed.
Related concept
Read the scenario before looking for a memorised answer.
✗
The switch must be running the NX-OS Essentials license
Why it's wrong here
NETCONF is available on all NX-OS versions without additional licensing.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Cisco often tests the misconception that NX-API is a prerequisite or fallback for NETCONF, but in reality they are independent automation interfaces with different transport and data encoding methods.
Detailed technical explanation
How to think about this question
NETCONF uses a client-server model where the client establishes an SSH connection to port 830 (default) on the switch, then exchanges XML-encoded messages over a session. The 'feature netconf' command enables the NETCONF agent, and YANG models define the data structures and operations that can be configured or retrieved, making all three components essential for automation.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A practitioner preparing for the 350-601 exam encounters this exact type of scenario on the job. The correct answer here is not the most general option — it is the best answer for the specific constraint described. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Real exam questions reward reading the full scenario before eliminating options, because the constraint defines which answer fits.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Automation — This question tests Automation — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: SSH connectivity must be established to the switch — B is correct because NETCONF operates over SSH as its transport protocol (RFC 6242), so SSH connectivity to the switch is mandatory for establishing the NETCONF session. Without SSH, the NETCONF client cannot connect to the NETCONF server running on the Nexus 9000.
What should I do if I get this 350-601 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.