350-401 Infrastructure Practice Question
A network engineer is configuring a Cisco IOS XE router to support NETCONF over SSH. The requirement is to allow a remote management station to retrieve and modify the router's configuration using NETCONF. Which command must be used to enable the NETCONF subsystem on the router?
⚠ Common exam trap
Candidates often confuse NETCONF with RESTCONF or assuming that enabling the HTTP server is sufficient for NETCONF access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
netconf-yang
To enable NETCONF over SSH on a Cisco IOS XE router, the 'netconf-yang' command must be configured. This command starts the NETCONF server and allows the router to be managed using NETCONF. It is a prerequisite for establishing NETCONF sessions and is essential for automated configuration and monitoring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
netconf-yang
Why this is correct
The command 'netconf-yang' enables the NETCONF subsystem on a Cisco IOS XE router. It starts the NETCONF server and allows the router to be managed via NETCONF over SSH. This command is essential for enabling programmatic access to the router's configuration and operational data using YANG models. Without this command, the router will not accept NETCONF sessions, even if SSH is configured.
- ✗
restconf
Why it's wrong here
The command 'restconf' enables the RESTCONF protocol, which is an HTTP-based protocol for accessing YANG-modeled data. While RESTCONF can also be used for programmatic management, the scenario specifically requires NETCONF over SSH. Enabling RESTCONF does not enable NETCONF, and the two are distinct protocols. Therefore, this command does not meet the requirement.
- ✗
ip http server
Why it's wrong here
The command 'ip http server' enables the HTTP server on the router, which is used for web-based management and RESTCONF if configured. It does not enable NETCONF. NETCONF operates over SSH, not HTTP. Enabling the HTTP server alone will not allow NETCONF sessions, and it may introduce additional security considerations. Thus, it is not the correct command for this scenario.
- ✗
ssh server netconf
Why it's wrong here
The command 'ssh server netconf' is not a valid Cisco IOS XE command. NETCONF is enabled using the 'netconf-yang' command, which starts the NETCONF subsystem. There is no command that combines SSH server configuration with NETCONF in this manner. Therefore, this option is incorrect and would not enable NETCONF on the router.
Go deeper
Related to this question
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.