Courseiva
← 300-410
Full test
hardMultiple SelectObjective-mapped

300-410 Practice Question: Which TWO configuration steps are required to…

Which TWO configuration steps are required to enable NETCONF over SSH on a Cisco IOS-XE device? (Choose TWO.)

⚠ Common exam trap

Cisco often tests the distinction between enabling the NETCONF YANG service ('netconf-yang') and binding it to SSH ('netconf ssh'), leading candidates to mistakenly think only one command is needed or that 'netconf' alone is sufficient.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Issue the command 'netconf ssh' in global configuration mode.

'netconf ssh' is the command that enables the NETCONF-over-SSH subsystem on a Cisco IOS-XE device, binding the NETCONF protocol to the SSH transport. Option C is correct because 'netconf-yang' in global configuration mode enables the NETCONF YANG data model service, which is a prerequisite for NETCONF operations. Both steps are required: the feature must be enabled, and the SSH transport must be explicitly configured.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Configure 'netconf-yang' under the 'router' configuration mode.

    Why it's wrong here

    The 'netconf-yang' feature is enabled globally, not under router configuration mode.

  • ✓

    Issue the command 'netconf ssh' in global configuration mode.

    Why this is correct

    This command enables the NETCONF SSH subsystem.

  • ✓

    Enable the 'netconf-yang' feature using the command 'netconf-yang' in global configuration mode.

    Why this is correct

    This is the global command to enable the NETCONF/YANG feature set.

  • ✗

    Configure 'ip ssh version 2' to ensure SSH is available.

    Why it's wrong here

    While SSHv2 is needed, this is a general SSH step, not specific to NETCONF.

  • ✗

    Issue the command 'netconf' in global configuration mode.

    Why it's wrong here

    The 'netconf' command alone does not specify SSH transport; 'netconf ssh' is required.

About these practice questions

One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.