Your change script must apply a new QoS policy to twelve IOS XE switches in one maintenance window: each switch must accept the policy at commit time, or revert by itself if nobody confirms within five minutes. The team already has YANG models and SSH access. Which configuration protocol gives the script per-switch apply with automatic rollback?
Select an answer to reveal the explanation.
Short Explanation
Exactly—you need a confirmed commit so each switch can apply the policy and revert it automatically if you don’t confirm in time. NETCONF over SSH supports that per-switch workflow, including the five-minute timeout. Think of it as a return window: miss the deadline and the switch restores its prior configuration.
Full Explanation
NETCONF over SSH with a confirmed commit meets the requirement because the script can apply the policy separately on each switch and start a confirmation timer for that device. If the change is not confirmed within five minutes, the switch automatically restores its prior configuration; the script can confirm after checking the result. RESTCONF over HTTPS with PATCH can update YANG-modeled configuration, but PATCH followed by checking the running configuration does not provide the required confirmed-commit timeout and automatic rollback. NETCONF candidate editing, validation, and a standard commit can check and apply a proposed configuration, but a standard commit is final; validation does not trigger a later rollback if nobody confirms. Ansible ios_config over network_cli can apply the policy, but compensating commands run only if the automation executes them, so they do not make each switch revert autonomously when no confirmation arrives. Exam caveat: distinguish a successful configuration commit from a confirmed commit, which remains provisional until confirmed; support can depend on the device’s software and capabilities. Practical check: before the maintenance window, query each switch’s NETCONF capabilities for confirmed-commit support and test the five-minute timeout on a lab device, verifying that the policy reverts without confirmation.