Telemetry gRPC Dial-Out Encryption Requirements
Short answer
A TLS must be explicitly configured to encrypt telemetry data when using gRPC dial-out, as gRPC defaults to plaintext transmission.
Question
Key Takeaways
The trap is assuming gRPC inherently provides encryption; it does not. Encryption is an optional feature dependent on TLS configuration.
Learn why TLS configuration is mandatory for encrypting telemetry data pushed via gRPC dial-out in Huawei networks. Understand the difference between default plaintext and secure encrypted channels.
Common mistake: Candidates may mark this False, believing that gRPC's use of HTTP/2 implies built-in encryption or that other protocols handle security differently. They fail to recognize that gRPC dial-out defaults to unencrypted TCP unless TLS is manually enabled.
Expert Analysis
The question addresses the security requirements for gRPC dial-out telemetry in Huawei network devices (implied by the H12-891 exam context and iMaster NCE references). gRPC uses HTTP/2 as its transport protocol. By default, HTTP/2 connections are often plaintext unless explicitly secured.
To ensure data encryption during telemetry push via gRPC, TLS (Transport Layer Security) must be configured. Without TLS, the data is transmitted in clear text over TCP, exposing it to interception and tampering. Therefore, the statement "TLS must be configured for data encryption if data is pushed based on gRPC" is technically accurate because gRPC itself does not enforce encryption; it relies on the underlying transport layer configuration. If you want encrypted telemetry, you must configure TLS on the gRPC channel.
The comment provided supports this: "TLS is the only way to encrypt gRPC dial-out; default is plaintext TCP." This confirms that while gRPC can operate without TLS, if encryption is a requirement (as stated in the prompt), TLS is mandatory. The distinction lies between 'gRPC always encrypts' (False) and 'gRPC requires TLS for encryption' (True).
Therefore, the correct answer is A. True.
Exam Strategy
When answering questions about modern protocols like gRPC or RESTful APIs, always check if security features are enabled by default. In many enterprise implementations, security (like TLS) is opt-in, not opt-out. Distinguish between protocol capability and default behavior. For telemetry specifically, remember that 'push' models like gRPC dial-out require explicit security configuration to prevent eavesdropping.
Frequently Asked Questions
Does gRPC automatically encrypt data?
What is the default security state of gRPC dial-out telemetry?
Community Votes
67% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
megamind23 👍 1 Answered ATLS is the only way to encrypt gRPC dial-out; default is plaintext TCP. 'Must... for data encryption' = True. Distinguish from 'TLS must always be used' which would be False.
-
djegevara 👍 1B - TLS is optional
-
ProlificAlex 👍 1 Answered BTLS is optional
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.