...

hostname R1
!
interface Ethernet1
 description Uplink
 ip address 10.0.0.1/24
 no shutdown
!
interface Ethernet2
 description LAN
 ip address 192.168.1.1/24
 no shutdown
!
router ospf
 router-id 1.1.1.1
 network 10.0.0.0/24 area 0
!
ntpip server access-list standard MANAGEMENT
 permit 10.0.0.10
ntp server 100 0.0.0.11255
! ip ssh version 2
service password-encryptiondeny any

Note: The Compliance engine can validate MCP automation outputs in addition to device configurations. To validate an automation output, select Source → Mass Config Push Result. The same condition types and matching principles described in this article apply when evaluating automation output.

...

(?m)^interface^ip Ethernet[0-9]+$
access-list standard MANAGEMENT$
(?m)^ descriptionpermit .+$
10\.0\.0\.0 0\.0\.0\.255$
(?m)^ ip address ([0-9]{1,3}\.){3}[0-9]{1,3}/[0-9]+$

...

deny any$

This verifies that the MANAGEMENT access list contains the required entries with no additional configuration between them

Choosing the Right Match Mode

...