How to Enable RESTCONF Access on Cisco Routers?
Refer to the exhibit. An administrator must enable RESTCONF access to a router. Which two commands or command sets must be added to the existing configuration? (Choose two.) - 
Community Votes
100% of anonymous learners picked answer AB. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Evaluates the candidate's ability to differentiate RESTCONF prerequisites from NETCONF, emphasizing that RESTCONF depends on the explicit restconf global command paired with AAA authentication rather than transport-layer CLI configurations.
This question tests the mandatory configuration steps to activate RESTCONF on Cisco IOS XE platforms. The community overwhelmingly agrees that enabling the RESTCONF service and configuring AAA authentication are the two required components.
Many test-takers incorrectly choose netconf-yang alongside restconf, confusing the two YANG-based management protocols and overlooking that RESTCONF specifically requires AAA authentication setup for HTTPS access.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Core Concept: RESTCONF Prerequisites
RESTCONF is a web-based protocol that provides a programmatic interface for accessing configuration data, operational state data, and executing remote procedure calls on network devices. On Cisco IOS XE, enabling RESTCONF is not automatic; it requires specific global configuration commands and authentication methods.Why Options A and B Are Correct
- restconf: This global configuration command explicitly enables the RESTCONF service. Without it, the router will not listen for RESTCONF requests on port 443, even if HTTPS is enabled.
- aaa authentication login default local: RESTCONF mandates AAA authentication. By configuring this command, the router is instructed to validate incoming RESTCONF credentials against the local user database. While enterprise environments might use TACACS+ or RADIUS, the local method is the standard baseline for certification labs and direct router access.
Why Other Options Are Incorrect
- line vty 0 15: Configures virtual terminal lines for CLI access (SSH/Telnet). RESTCONF operates over HTTPS at the application layer and does not rely on VTY sessions.
- netconf-yang: Enables NETCONF over SSH (port 830). Although both RESTCONF and NETCONF leverage YANG data models, they are distinct protocols with different transport mechanisms and authentication workflows. Selecting this indicates a fundamental confusion between the two standards.
- username restconf privilege 0: There is no requirement to create a dedicated system user named "restconf". Any locally defined user with appropriate privileges can authenticate via RESTCONF once AAA is properly configured.
Community Consensus & Verification
The 88% vote distribution strongly supports AB. As noted by community contributor babanaber, Cisco’s official programmability configuration guides confirm that the restconf command and an AAA authentication method list are the foundational requirements. The dissenting AD vote likely stems from mistaking netconf-yang for a generic YANG dependency, which is incorrect for RESTCONF-specific deployment.Official Reference
Exam Strategy
When troubleshooting or configuring network automation protocols, always verify the transport layer and authentication requirements first. RESTCONF relies on HTTPS and AAA, while NETCONF uses SSH; memorizing these distinct prerequisites will prevent protocol confusion during the exam.
Related Analysis
Practice All 350-401 Questions
Access 218 questions with complete answers and detailed explanations.
View Full 350-401 Practice Test →