Designing and Implementing Cisco Network Programmability

Answer: A, D A dedicated VRF separates management routing from production traffic, while ACLs restrict management-plane access to authorized source addresses, protocols, and ports. Cisco ACI applies this principle through granular management contracts and communication filters that limit the traffic allowed to reach APIC management interfaces. **Learn more:** [Cisco ACI Hardening — Restricting Management Access Using Contracts](https://www.cisco.com/c/en/us/td/docs/dcn/whitepapers/cisco-aci-hardening.html) · [Cisco APIC Basic Configuration Guide, Release 6.2(x) — Management](https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/basic-configuration/cisco-apic-basic-configuration-guide-62x/management-62x.html)

Answer: B, C YANG data nodes include `leaf` and `container`. A leaf holds a single typed value and has no child nodes, whereas a container groups child nodes and has no value of its own. Groupings and modules are modeling constructs rather than data-node types. **Learn more:** [RFC 7950: The YANG 1.1 Data Modeling Language](https://datatracker.ietf.org/doc/html/rfc7950)

Answer: A, B RESTCONF exposes YANG configuration and state data through the `/restconf/data` resource and exposes data-model-specific RPC operations through `/restconf/operations`. RFC 8040 defines these as RESTCONF API resources. **Learn more:** [RFC 8040: RESTCONF Protocol](https://datatracker.ietf.org/doc/html/rfc8040)