Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

← AI and Network Operations practice sets

CCNA AI and Network Operations • Complete Question Bank

CCNA AI and Network Operations — All Questions With Answers

Complete CCNA AI and Network Operations question bank — all 0 questions with answers and detailed explanations.

255
Questions
Free
No signup
Certifications/CCNA/Practice Test/AI and Network Operations/All Questions
Question 1mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best contrasts YAML with JSON?

Question 2easymultiple choice
Read the full AI and Network Operations explanation →

Which statement accurately describes JSON?

Question 3mediummultiple choice
Read the full REST/YANG explanation →

What is the role of a YANG model in network programmability?

Question 4hardmultiple choice
Read the full REST/YANG explanation →

What is the main benefit of using a data model such as YANG in network automation?

Question 5mediummultiple choice
Read the full AI and Network Operations explanation →

What is the most likely purpose of a GET request in a RESTful network API?

Question 6hardmultiple choice
Read the full REST/YANG explanation →

Which statement best describes YANG in the context of network programmability?

Question 7mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes an API token in a network automation workflow?

Question 8mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes the relationship between REST and HTTP methods such as GET and POST?

Question 9mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why JSON is common in controller APIs?

Question 10hardmultiple choice
Read the full AI and Network Operations explanation →

Which statement best explains why APIs are useful in controller-based networking?

Question 11mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes HTTPS in network automation contexts?

Question 12hardmultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why a token might be used in an API request instead of sending a username and password with every request?

Question 13mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes the difference between a controller and a northbound API?

Question 14mediummultiple choice
Read the full AI and Network Operations explanation →

What is the main reason a controller API might return data in JSON rather than plain unstructured text?

Question 15mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why JSON is often easier for software tools to work with than unstructured text?

Question 16mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes the role of a token in an API-based workflow?

Question 17mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes the purpose of HTTPS in controller-based API communication?

Question 18mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why APIs are useful in controller-based networking?

Question 19mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why tokens are commonly used in API-based workflows?

Question 20mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best explains why JSON is often easier for software tools to process than free-form text?

Question 21mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes a southbound API in a controller-based architecture at a conceptual level?

Question 22mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why a REST API is easier for software to use than a human-oriented CLI screen output?

Question 23mediummultiple choice
Study the full virtualization explanation →

Which statement best describes NFV at a conceptual level?

Question 24mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes software-defined networking at a conceptual level?

Question 25mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why APIs are valuable in automation even when a CLI is still available?

Question 26mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why HTTPS is commonly used together with APIs in network automation?

Question 27mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best explains why structured API responses are valuable for network dashboards and automation systems?

Question 28mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why machine-readable state data is valuable for automation-based assurance?

Question 29mediummultiple choice
Read the full REST/YANG explanation →

Which statement best describes YANG at a basic CCNA automation level?

Question 30mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why tokens are commonly used in API-based automation environments?

Question 31mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why API endpoints and methods matter together in automation design?

Question 32mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best explains why structured state data is more useful than free-form text for automated compliance checks?

Question 33easymultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes an API endpoint?

Question 34mediummultiple choice
Read the full REST/YANG explanation →

Which statement best explains why data models such as YANG matter when building consistent automation workflows?

Question 35mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why an API token should be protected even if HTTPS is already used?

Question 36mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best explains why HTTPS and tokens are often used together in API-driven automation?

Question 37mediummultiple choice
Read the full REST/YANG explanation →

Which statement best describes why JSON and YANG are related but not the same thing in automation workflows?

Question 38mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best explains why methods such as GET and DELETE matter in API design?

Question 39mediummultiple choice
Read the full AI and Network Operations explanation →

Which statement best describes why a controller-based network platform benefits from northbound APIs?

Question 40mediummultiple choice
Read the full REST/YANG explanation →

Which statement best describes YANG in a network automation context?

Question 41mediummultiple choice
Read the full AI and Network Operations explanation →

An API client sends a valid GET request and receives an HTTP 200 response. What does that indicate?

Question 42mediummultiple choice
Read the full AI and Network Operations explanation →

Why is version control valuable for network automation files?

Question 43mediummultiple choice
Read the full AI and Network Operations explanation →

Why is version control useful for network automation scripts?

Question 44mediummultiple choice
Read the full AI and Network Operations explanation →

What is a main operational benefit of a controller-based networking architecture?

Question 45mediummultiple choice
Read the full AI and Network Operations explanation →

What is a northbound API in a controller-based network architecture?

Question 46easymultiple choice
Read the full AI and Network Operations explanation →

Which HTTP method is commonly used to retrieve information from a REST API without modifying the resource?

Question 47mediummulti select
Read the full AI and Network Operations explanation →

Which two tasks are strong candidates for network automation? (Choose two.)

Question 48hardmultiple choice
Read the full REST/YANG explanation →

Why are data models such as YANG important in network automation?

Question 49mediummultiple choice
Read the full AI and Network Operations explanation →

Given the JSON snippet below, what is the value of hostname?

{
  "device": {
    "hostname": "R1",
    "mgmt_ip": "192.0.2.10"
  }
}
Question 50easymultiple choice
Read the full AI and Network Operations explanation →

Which data format is commonly used with REST APIs to represent objects, arrays, and key-value pairs?

Question 51mediummultiple choice
Read the full AI and Network Operations explanation →

Which HTTP method is typically used to retrieve data from a REST API without modifying the resource?

Question 52mediummultiple choice
Read the full AI and Network Operations explanation →

Which pairing is correct?

Question 53mediummultiple choice
Read the full AI and Network Operations explanation →

Which tool type is most appropriate for turning a variable set of interface values into a reusable configuration template?

Question 54mediummultiple choice
Read the full AI and Network Operations explanation →

What is version control primarily used for in network automation workflows?

Question 55mediummulti select
Read the full AI and Network Operations explanation →

Which two statements about RESTful APIs are correct? (Choose two.)

Question 56mediummultiple choice
Read the full AI and Network Operations explanation →

A REST API query returns this JSON snippet:

{
  "interface": {
    "name": "GigabitEthernet1",
    "admin-status": "up",
    "oper-status": "down"
  }
}

What does this indicate?

Question 57easymultiple choice
Read the full AI and Network Operations explanation →

What data format is commonly used in REST API responses because it is lightweight and easy for applications to parse?

Question 58mediummultiple choice
Read the full AI and Network Operations explanation →

In a controller-based network architecture, what is a southbound API typically used for?

Question 59hardmulti select
Read the full AI and Network Operations explanation →

Which two practices most improve safety when automating network changes? (Choose two.)

Question 60hardmultiple choice
Read the full AI and Network Operations explanation →

Why is idempotency valuable in network automation?

Question 61mediummultiple choice
Read the full AI and Network Operations explanation →

A network automation script sends this HTTP request to a controller API:

POST /api/v1/devices

What does the POST method typically indicate in a RESTful API?

Question 62mediummultiple choice
Read the full AI and Network Operations explanation →

A controller API returns this data:

{
  "device": {
    "hostname": "Dist-1",
    "interfaces": [
      {"name": "Gig0/0", "status": "up"},
      {"name": "Gig0/1", "status": "down"}
    ]
  }
}

Which statement is correct?

Question 63hardmulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe REST-based APIs in a network automation context?

Question 64mediummultiple choice
Read the full AI and Network Operations explanation →

An automation script must retrieve the current configuration state of a device from a REST API without modifying anything. Which HTTP method should it use?

Exhibit

Goal: Read existing data only
Question 65mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe JSON?

Question 66easymatching
Read the full AI and Network Operations explanation →

Match each automation-related term to its most accurate description.

Question 67mediummatching
Read the full AI and Network Operations explanation →

Match each controller or API direction term to its most accurate meaning.

Question 68mediummatching
Read the full AI and Network Operations explanation →

Match each JSON concept to its most accurate description.

Question 69hardmultiple choice
Read the full AI and Network Operations explanation →

An API response returns a list of interface objects in JSON. Which structure most likely represents that list?

Question 70easymatching
Read the full AI and Network Operations explanation →

Match each automation or programmability term to its most accurate description.

Question 71mediummatching
Read the full AI and Network Operations explanation →

Match each HTTP method to the most accurate action it commonly represents in REST-style APIs.

Question 72mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe APIs in network automation?

Question 73hardmultiple choice
Read the full AI and Network Operations explanation →

In a controller-based design, which statement best describes a northbound API?

Question 74mediummatching
Read the full AI and Network Operations explanation →

Match each API or automation concept to the most accurate description.

Question 75mediummatching
Read the full AI and Network Operations explanation →

Match each automation-related data term to the most accurate description.

Question 76easymatching
Read the full AI and Network Operations explanation →

Match each basic JSON element to its most accurate description.

Question 77mediummatching
Read the full AI and Network Operations explanation →

Match each automation concept to its most accurate description.

Question 78mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe controller-based networking at the CCNA level?

Question 79mediummatching
Read the full AI and Network Operations explanation →

Match each API security or access term to its most accurate description.

Question 80mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe JSON arrays?

Question 81mediummatching
Read the full AI and Network Operations explanation →

Match each structured-data term to its most accurate meaning.

Question 82mediummatching
Read the full AI and Network Operations explanation →

Match each REST or API concept to its most accurate description.

Question 83hardmultiple choice
Read the full AI and Network Operations explanation →

Why is a northbound API especially useful in a controller-based network architecture?

Question 84easymatching
Read the full AI and Network Operations explanation →

Match each common automation term to its most accurate meaning.

Question 85mediummatching
Read the full AI and Network Operations explanation →

Match each automation transport or interaction term to its most accurate description.

Question 86hardmultiple choice
Read the full AI and Network Operations explanation →

Why might an automation script prefer a token-based API session over repeatedly prompting a human operator for credentials?

Question 87mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe APIs in controller-based networking?

Question 88hardmultiple choice
Read the full AI and Network Operations explanation →

Why is HTTPS usually preferred over HTTP when accessing controller APIs?

Question 89mediummatching
Read the full AI and Network Operations explanation →

Match each controller or automation term to its most accurate description.

Question 90easymatching
Read the full AI and Network Operations explanation →

Match each common API or data term to its most accurate meaning.

Question 91mediummatching
Read the full AI and Network Operations explanation →

Match each API interaction term to its most accurate description.

Question 92hardmultiple choice
Read the full AI and Network Operations explanation →

Why is a northbound API valuable to orchestration tools in a controller-based network?

Question 93mediummatching
Read the full AI and Network Operations explanation →

Match each HTTP method to the action it most commonly represents in a REST-style API.

Question 94hardmultiple choice
Read the full AI and Network Operations explanation →

Why might a controller return interface information as a JSON array instead of a single JSON object?

Question 95mediummatching
Read the full AI and Network Operations explanation →

Match each JSON term to its most accurate meaning.

Question 96hardmultiple choice
Read the full AI and Network Operations explanation →

Why would an orchestration platform prefer a northbound API over screen-scraping CLI output?

Question 97mediummultiple choice
Read the full AI and Network Operations explanation →

Why is HTTPS usually preferred over HTTP when accessing a controller API?

Question 98mediummatching
Read the full AI and Network Operations explanation →

Match each API or programmability term to its most accurate meaning.

Question 99mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe controller-based networking?

Question 100hardmultiple choice
Read the full AI and Network Operations explanation →

Why is HTTPS preferred over HTTP when accessing sensitive controller APIs?

Question 101mediummatching
Read the full AI and Network Operations explanation →

Match each programmability term to its most accurate meaning.

Question 102hardmultiple choice
Read the full AI and Network Operations explanation →

Why is a northbound API generally more useful to orchestration software than a human-readable CLI screen?

Question 103mediummultiple choice
Read the full AI and Network Operations explanation →

Why are tokens commonly used in API workflows instead of sending raw credentials with every request?

Question 104easymatching
Read the full AI and Network Operations explanation →

Match each basic automation term to its most accurate meaning.

Question 105hardmultiple choice
Read the full AI and Network Operations explanation →

Why is a northbound API valuable to orchestration systems in a controller-based architecture?

Question 106mediummatching
Read the full AI and Network Operations explanation →

Match each automation or API term to its most accurate role.

Question 107easymatching
Read the full AI and Network Operations explanation →

Match each basic controller or API term to its most accurate meaning.

Question 108mediummultiple choice
Read the full AI and Network Operations explanation →

Why is JSON often preferred over completely unstructured text in API responses?

Question 109mediummatching
Read the full AI and Network Operations explanation →

Match each REST-style method to the action it most commonly represents.

Question 110mediummatching
Read the full AI and Network Operations explanation →

Match each data-structure term to its most accurate meaning.

Question 111mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe JSON in network automation contexts?

Question 112mediummulti select
Study the full virtualization explanation →

Which two statements accurately describe software-defined networking and network virtualization concepts at a basic CCNA level?

Question 113mediummatching
Read the full AI and Network Operations explanation →

Match each term to the most appropriate description in an API context.

Question 114hardmultiple choice
Read the full AI and Network Operations explanation →

A JSON response from a controller contains a list of interfaces, each with its own name and status fields. Which JSON structure is most likely used to represent that list?

Question 115mediummatching
Read the full AI and Network Operations explanation →

Drag each automation or API concept from the left to its corresponding description on the right. Not all descriptions are used.

Concepts: - Northbound API - Southbound API - JSON - HTTPS

Question 116mediummatching
Read the full AI and Network Operations explanation →

Match each programmability term to its most accurate description.

Question 117mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe why APIs and human-oriented CLIs are both still useful in network operations?

Question 118hardmultiple choice
Read the full AI and Network Operations explanation →

A REST API call uses the GET method against a device inventory endpoint. What is the most likely intent of the call?

Question 119mediummatching
Read the full AI and Network Operations explanation →

Match each REST-style method to the most common intent.

Question 120easymultiple choice
Read the full AI and Network Operations explanation →

In a REST-style API, which method is most commonly associated with retrieving information?

Question 121mediummulti select
Read the full network assurance explanation →

Which two statements accurately describe why structured telemetry and APIs improve operational tooling?

Question 122mediummatching
Read the full AI and Network Operations explanation →

Match each automation-related term to the description that best fits it.

Question 123mediummatching
Read the full AI and Network Operations explanation →

Match each term to the role it most directly plays in an API workflow.

Question 124mediummatching
Read the full AI and Network Operations explanation →

Match each API workflow concept to the description that best fits it.

Question 125mediummultiple choice
Read the full AI and Network Operations explanation →

A network engineer sends an HTTP GET request to a controller API and receives status code 401. What does that response indicate?

Question 126mediummatching
Read the full AI and Network Operations explanation →

Match each automation term to the best description.

Question 127easymultiple choice
Read the full AI and Network Operations explanation →

Which data format is most commonly used in REST APIs because it is lightweight and easy for applications to parse?

Question 128easymultiple choice
Read the full AI and Network Operations explanation →

Which data format uses key-value pairs and is commonly returned by REST APIs?

Question 129mediummatching
Read the full AI and Network Operations explanation →

Match each HTTP method to the action it most commonly performs in a REST API.

Question 130mediummultiple choice
Read the full AI and Network Operations explanation →

An API call returns HTTP status code 401. What does that usually mean?

Exhibit

GET /api/v1/interfaces
Headers: Accept: application/json
Response: HTTP/1.1 401 Unauthorized
Question 131mediummulti select
Read the full AI and Network Operations explanation →

Which two statements accurately describe API authentication tokens? (Choose two.)

Question 132mediummultiple choice
Read the full AI and Network Operations explanation →

Exhibit: A script sends an HTTP GET request to a controller API endpoint. What is the usual purpose of the GET method?

Exhibit

Request:
GET /dna/intent/api/v1/network-device
Authorization: Bearer <token>
Question 133mediummultiple choice
Read the full AI and Network Operations explanation →

A network engineer queries a REST API and receives data in JSON format. Which statement about JSON is correct?

Question 134mediummatching
Read the full AI and Network Operations explanation →

Match each term to the best description.

Question 135easymatching
Read the full AI and Network Operations explanation →

Match each data format or model with the best description.

Question 136mediummultiple choice
Read the full AI and Network Operations explanation →

Exhibit: A controller returns an authentication token after a successful API login. Why does the client include that token in later requests?

Exhibit

POST /auth -> token received
Subsequent GET /devices uses Authorization header
Question 137easymultiple choice
Read the full AI and Network Operations explanation →

Which HTTP method is normally used by a REST API client to retrieve data from a resource without changing it?

Question 138mediummatching
Read the full AI and Network Operations explanation →

Match each HTTP method to the most common API action.

Question 139easymultiple choice
Read the full AI and Network Operations explanation →

An engineer receives API output that starts with curly braces and contains name-value pairs. Which data format is being used?

Question 140hardmultiple choice
Read the full AI and Network Operations explanation →

Exhibit: A script sends an API request and receives HTTP status code 401. What does that code indicate?

Exhibit

POST /dna/intent/api/v1/template-programmer/project HTTP/1.1
Host: controller.example.com
X-Auth-Token: expired-token

HTTP/1.1 401 Unauthorized
Question 141mediummulti select
Read the full AI and Network Operations explanation →

Which two statements correctly describe a RESTful API used by network controllers? Choose two.

Question 142easymulti select
Read the full AI and Network Operations explanation →

A network engineer is reviewing REST API behavior. Which two statements are true?

Question 143mediummulti select
Read the full REST/YANG explanation →

Which two statements about YANG are correct?

Question 144easymultiple choice
Read the full AI and Network Operations explanation →

Which term describes a string or credential passed to an API to prove the client is allowed to access a resource?

Question 145easymatching
Read the full AI and Network Operations explanation →

Match each data format or API term to its best description.

Question 146easymulti select
Read the full AI and Network Operations explanation →

Which two statements correctly describe JSON?

Question 147hardmulti select
Read the full REST/YANG explanation →

A controller exposes a YANG-modeled interface configuration through an API. Which two statements correctly describe the purpose of YANG in that workflow?

Question 148mediummulti select
Read the full AI and Network Operations explanation →

An engineer is comparing data serialization formats used by controllers and automation tools. Which two statements correctly describe JSON?

Exhibit

Snippet:
{
  "hostname": "R1",
  "enabled": true,
  "vlans": [10,20,30]
}
Question 149easymulti select
Read the full AI and Network Operations explanation →

A developer is interacting with a REST API exposed by a network controller. Which two statements correctly describe common REST behavior?

Question 150mediummulti select
Read the full AI and Network Operations explanation →

A script authenticates to a controller API and receives a token that it presents in later requests. Which two statements about that token-based workflow are correct?

Question 151mediummultiple choice
Read the full NAT/PAT explanation →

A network administrator at a large enterprise notices that the network monitoring system frequently generates false positive alerts for unusual traffic patterns during normal business hours. The administrator wants to reduce these false positives while still detecting genuine security threats. Which AI/ML concept would best address this requirement?

Question 152mediummultiple choice
Read the full AI and Network Operations explanation →

A network engineer at a large enterprise observes repeated spikes in latency on the core network every weekday at 10:00 AM, but no corresponding increase in overall bandwidth utilization. The engineer wants to use AI/ML to automatically identify the root cause and take corrective action without manual intervention. Which concept best describes this approach?

Question 153mediummulti select
Read the full AI and Network Operations explanation →

Which TWO of the following are core applications of AI and ML in network operations as described in CCNA 200-301 v2.0 objective 5.1?

Question 154mediummulti select
Read the full AI and Network Operations explanation →

Which TWO statements accurately describe how AI and ML concepts are applied to network operations?

Question 155mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the AI/ML concepts on the left to the correct descriptions on the right.

Question 156mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the AI/ML concepts on the left to the correct descriptions on the right.

Question 157mediummultiple choice
Read the full NAT/PAT explanation →

A network operations team is implementing an AI-driven automation system that uses an agentic AI agent to handle routine network issues. The agent is configured to detect high CPU utilization on a core router, then automatically execute a series of diagnostic commands and, if a specific pattern is found, trigger a configuration change to reduce load. After the change, the agent re-checks CPU utilization and, if still high, escalates the issue to a human engineer. Which of the following best describes the workflow being used?

Question 158mediummultiple choice
Read the full NAT/PAT explanation →

A network operations team is implementing an automated system to detect and remediate interface flapping on core switches. The system must be able to query the network device for interface status and execute commands to disable or reconfigure the interface if a pattern of flapping is detected. Which protocol or technology enables the system to programmatically interact with the network device for both monitoring and configuration changes?

Question 159mediummulti select
Read the full AI and Network Operations explanation →

Which THREE of the following best describe how agentic AI is used in network automation, specifically regarding AI agents, tool-calling, and closed-loop remediation workflows?

Question 160mediummulti select
Read the full AI and Network Operations explanation →

Which THREE statements accurately describe the role of AI agents in closed-loop remediation workflows for network automation?

Question 161mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the AI/automation concepts on the left to the correct descriptions on the right.

Question 162hardmultiple choice
Review the full routing breakdown →

A network administrator notices that the NTP server on Router R1 is not synchronizing with the upstream NTP server at 192.0.2.1. The router is configured as an NTP client, but show ntp status indicates the clock is unsynchronized and the stratum is 16. There is no firewall between R1 and 192.0.2.1. What is the most likely cause of this issue?

Exhibit

R1# show ntp status
Clock is synchronized, stratum 16, reference is 0.0.0.0
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**10
ntp uptime is 100 minutes, resolution is 4000 msec
reference time is D8C4E1C0.00000000 (12:34:56.000 UTC Mon Mar 15 2021)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec

R1# show ntp associations
  address         ref clock     st  when  poll reach  delay  offset   disp
*~192.0.2.1      0.0.0.0       16    -    64    0     0.000  0.000   16000.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
Question 163hardmultiple choice
Read the full network assurance explanation →

A network engineer notices that the system clock on a Cisco IOS-XE router is incorrect, causing syslog timestamps to be unreliable. The router is configured as an NTP client to synchronize with a remote NTP server at 192.168.1.10. However, the show ntp status command indicates the clock is unsynchronized. What is the most likely cause of this issue?

Exhibit

Router# show ntp status
Clock is synchronized, stratum 16, reference is 0.0.0.0
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**10
reference time is 0.0.0.0
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec

Router# show ntp associations

  address         ref clock     st  when  poll reach  delay  offset   disp
*~192.168.1.10    .INIT.          16    -    64    0     0.0    0.00  16000.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

Router# show running-config | include ntp
ntp server 192.168.1.10
Question 164mediummulti select
Read the full network assurance explanation →

Which TWO statements correctly describe NTP stratum levels and syslog severity levels in a Cisco IOS-XE environment?

Question 165mediummatching
Read the full network assurance explanation →

Drag and drop the syslog severity levels and NTP concepts on the left to their correct descriptions on the right.

Question 166mediummatching
Read the full network assurance explanation →

Drag and drop the syslog and NTP items on the left to the correct descriptions on the right.

Question 167mediummultiple choice
Review the full routing breakdown →

A network engineer is tasked with monitoring a large enterprise network that requires high-frequency, real-time data collection from thousands of routers and switches. The engineer needs a solution that minimizes CPU overhead on the network devices and supports push-based data delivery. Which technology should the engineer choose for this requirement?

Question 168mediummultiple choice
Read the full AI and Network Operations explanation →

A network engineer is evaluating monitoring technologies for a large enterprise network that requires high-frequency, low-latency traffic data collection with support for custom fields. The solution must also support encryption and authentication to prevent tampering. Which technology best meets these requirements?

Question 169mediummulti select
Read the full network assurance explanation →

Which TWO statements correctly describe characteristics of SNMPv2c and SNMPv3 for network monitoring?

Question 170mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the monitoring protocols and features on the left to their correct descriptions on the right.

Question 171mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the network monitoring technologies on the left to their correct descriptions on the right.

Question 172mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer needs to automate the configuration of multiple Cisco IOS XE routers in a data center. The team requires a standard, vendor-neutral data modeling language to define the configuration parameters, and they need a protocol that uses XML-based remote procedure calls over SSH for secure, reliable configuration transactions. Which combination of technologies best meets these requirements?

Question 173mediummultiple choice
Read the full REST/YANG explanation →

A network engineer is automating the configuration of a new branch office router. The engineer needs a protocol that uses a YANG data model, supports both configuration and operational state retrieval, and operates over SSH for secure transport. Which protocol should the engineer use?

Question 174mediummulti select
Read the full REST/YANG explanation →

Which THREE statements accurately describe the characteristics of NETCONF and RESTCONF for programmatic network configuration?

Question 175mediummatching
Read the full REST/YANG explanation →

Drag and drop the YANG, NETCONF, and RESTCONF terms on the left to their correct descriptions on the right.

Question 176mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the protocols/technologies on the left to the descriptions on the right.

Question 177mediumdrag order
Read the full network assurance explanation →

Drag and drop the following steps into the correct order to implement a basic network monitoring workflow using telemetry and streaming analytics on Cisco IOS-XE.

Question 178mediumdrag order
Read the full AI and Network Operations explanation →

Drag and drop the following steps into the correct order to implement an AI/ML-based network operations workflow for proactive anomaly detection and automated remediation on a Cisco IOS-XE device.

Question 179mediumdrag order
Read the full AI and Network Operations explanation →

Drag and drop the following steps into the correct order to troubleshoot an end-to-end connectivity issue using a bottom-up approach.

Question 180mediummulti select
Read the full AI and Network Operations explanation →

Which TWO statements accurately describe how AI/ML concepts are applied to network operations in modern enterprise networks?

Question 181mediumdrag order
Read the full AI and Network Operations explanation →

Drag and drop the following steps into the correct order to describe the general workflow for AI-assisted network configuration automation: receive intent, decompose into sub-tasks, call tools, validate output, and apply closed-loop remediation.

Question 182mediumdrag order
Read the full REST/YANG explanation →

Drag and drop the following steps into the correct order to sequence the actions an automation system performs when automating the remediation of a network configuration drift detected via NETCONF/YANG.

Question 183mediumdrag order
Read the full AI and Network Operations explanation →

Drag and drop the following steps into the correct order for an agentic AI system that receives a network intent, decomposes it into sub-tasks, calls tools, validates output, and applies closed-loop remediation.

Question 184harddrag order
Read the full AI and Network Operations explanation →

Drag and drop the following steps into the correct order for an agentic AI system to remediate a network performance issue using Cisco IOS-XE CLI commands.

Question 185mediumdrag order
Read the full network assurance explanation →

Drag and drop the following steps into the correct order to configure an IOS-XE device as an NTP client and ensure its syslog messages are sent to a remote server with correct timestamps.

Question 186mediumdrag order
Read the full network assurance explanation →

Drag and drop the following steps into the correct order to sequence NTP stratum hierarchy and configure an IOS-XE NTP client with syslog message processing from event to log server.

Question 187mediumdrag order
Read the full network assurance explanation →

Drag and drop the following steps into the correct order to configure an IOS-XE device as an NTP client and set up syslog reporting of NTP events to a remote log server.

Question 188mediummatching
Read the full network assurance explanation →

Drag and drop the syslog severity levels on the left to their corresponding names and meanings on the right.

Question 189mediumdrag order
Read the full network assurance explanation →

Drag and drop the following steps into the correct order to set up gRPC streaming telemetry subscription on a Cisco IOS-XE device.

Question 190mediumdrag order
Read the full network assurance explanation →

Drag and drop the following steps into the correct order to configure gRPC streaming telemetry subscription on a Cisco IOS-XE device, from initial setup to data collection.

Question 191mediumdrag order
Read the full network assurance explanation →

Drag and drop the following phases into the correct order to configure gRPC streaming telemetry subscription setup and then the NetFlow data path sequence.

Question 192mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the monitoring technologies on the left to the correct data model and transport descriptions on the right.

Question 193mediumdrag order
Read the full REST/YANG explanation →

Drag and drop the following steps into the correct order to retrieve a specific interface's configuration via RESTCONF and apply a change to the interface description.

Question 194mediumdrag order
Read the full REST/YANG explanation →

Drag and drop the following steps into the correct order to retrieve a specific interface configuration via RESTCONF and apply a change to the interface description.

Question 195mediumdrag order
Review the full OSPF breakdown →

Drag and drop the following steps into the correct order to retrieve the current OSPF configuration via RESTCONF and apply a change to the OSPF process ID on a Cisco IOS-XE device.

Question 196mediumdrag order
Read the full REST/YANG explanation →

Drag and drop the following steps into the correct order to send a RESTCONF GET request to retrieve interface configuration from a Cisco IOS-XE device and apply a configuration change based on the response.

Question 197mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the protocol/model on the left to the correct description on the right.

Question 198hardScenario
Open the full VLAN trunking answer →

You are connected to R1 via the console. The network operations center (NOC) has asked you to configure R1 as an NTP client of the NTP server at 192.0.2.10 (reachable via VLAN 100, SVI 192.168.1.1/24). They also need all system messages of level 'debug' (level 7) and higher forwarded to the syslog server at 203.0.113.50. The current configuration shows that NTP is not working (stratum 16) and syslog is only sending critical and higher messages. Fix both issues.

Exhibit

R1#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 250.00000 Hz, actual freq is 250.00000 Hz, precision is 2**10
reference time is 0.0.0.0 (00:00:00.000 UTC Mon Jan 1 2000)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
loopfilter state is 'CTRL' (Normal Controlled Loop)

R1#show ntp associations
  address         ref clock     st  when  poll reach  delay  offset   disp
*~0.0.0.0         0.0.0.0       16   -     64    0     0.00   0.00   16000.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

R1#show logging
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: level debugging, 0 messages logged
    Monitor logging: level debugging, 0 messages logged
    Buffer logging: level debugging, 0 messages logged
    Trap logging: level critical, 0 messages logged

Logging to: 203.0.113.50 (udp port 514, audit disabled, link up)

R1#show running-config | section ntp
ntp server 192.0.2.10
!

R1#show running-config | section logging
logging host 203.0.113.50
!
Question 199hardScenario
Read the full network assurance explanation →

You are connected to R1. Configure R1 as an NTP client to synchronize with NTP server 203.0.113.10, using its Loopback0 interface (192.168.1.1/32) as the source for NTP packets. Additionally, configure logging to syslog server 192.0.2.100 with a trap level that captures events from level 5 (notice) and above. The current configuration shows that NTP is not synchronized (stratum 16) and only debugging messages are being sent to the syslog server. Correct these issues so that R1 is synchronized and important system messages are logged.

Exhibit

R1#show running-config | include ntp|logging
logging host 192.0.2.100
logging trap debugging
!
R1#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**10
ntp uptime is 0 minutes, resolution 4000 ms
reference time is 0x00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
loopfilter state is 'NC' (No Connection)
R1#show ntp associations
  address         ref clock     st  when  poll reach  delay  offset   disp
*~0.0.0.0          .INIT.       16   -     64    0     0.000  0.000   16000.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
Question 200hardScenario
Read the full network assurance explanation →

You are connected to R1 via console. The NTP server 198.51.100.10 is already configured on R1, but R1 is not synchronizing because the NTP packets are sourced from the wrong interface. Configure R1 to source NTP packets from its loopback0 interface (IP 10.0.0.1/32). Additionally, configure syslog logging to the remote server 203.0.113.5, ensuring that only messages at severity 'notifications' (level 5) and above are sent. The current configuration shows that syslog is sending all messages (including debug-level) to the server, wasting bandwidth. Fix both issues.

Exhibit

R1# show running-config | section ntp|logging
ntp server 198.51.100.10
logging host 203.0.113.5
logging trap debugging
!
R1# show ntp status
Clock is unsynchronized, stratum 16, no reference clock
R1# show ntp associations
  address         ref clock       st  when  poll reach  delay  offset   disp
*~198.51.100.10    .INIT.          16    -   1024    0     0.0    0.0   16000.
~ (synchronized), * (candidate), # (selected), + (peer), - (outlier)
R1# show logging
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited)
    Console logging: level debugging, 0 messages logged
    Monitor logging: level debugging, 0 messages logged
    Buffer logging: level debugging, 0 messages logged
    Trap logging: level debugging, 0 message lines logged
Logging to 203.0.113.5 (udp port 514, audit disabled)
          0 message lines logged
Question 201hardScenario
Read the full network assurance explanation →

You are connected to R1. Configure NTP client to synchronize with the NTP server at 203.0.113.10, using the loopback0 interface (192.168.1.1/32) as the source. Also configure syslog to send messages of severity level 5 (notifications) and below to the syslog server at 198.51.100.20. Currently, NTP shows stratum 16 (unsynchronized) and important syslog messages are being missed.

Exhibit

R1# show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**10
reference time is 0.0.0.0 (00:00:00.000 UTC Mon Jan 1 2000)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
loopfilter state is 'CTRL' (Normal Controlled Loop)

R1# show run | section ntp
ntp server 203.0.113.10

R1# show run | include logging
logging host 198.51.100.20
no logging console

R1# show logging
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 0 flushes)
    Console logging: disabled
    Monitor logging: level debugging, 0 messages logged
    Buffer logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
        Logging to 198.51.100.20 (udp port 514, audit disabled,
                link up)
Question 202hardScenario
Read the full network assurance explanation →

You are connected to R1. Configure NTP client so that R1 synchronizes with the NTP server at 198.51.100.10, using its Loopback0 (10.0.0.1/32) as the source interface. Also configure syslog to send messages of severity 5 (notifications) and above to 192.0.2.20. The current configuration shows a misconfigured NTP server address and an incorrect logging trap level. Verify with 'show ntp status' (stratum should not be 16) and 'show logging'.

Exhibit

R1#show running-config | include ntp|logging
ntp server 203.0.113.5
logging host 192.0.2.20
logging trap debugging
!
R1#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
R1#show ip interface brief | include Loopback0
Loopback0               10.0.0.1       YES manual up                    up
R1#
Question 203hardScenario
Read the full network assurance explanation →

You are connected to R1 via the console. R1 is a router acting as an NTP client to an external NTP server at 203.0.113.10. The NTP source interface must be Loopback0 (192.0.2.1/32). Additionally, configure R1 to send syslog messages of severity 'critical' and higher to a syslog server at 198.51.100.50. Currently, R1 shows 'Clock is unsynchronized, stratum 16'. Verify that NTP synchronizes and that only critical syslog messages are sent. The existing running configuration already has some NTP and syslog commands that need correction.

Exhibit

R1#show running-config | section ntp|logging
ntp server 203.0.113.10
logging host 198.51.100.50
logging trap debugging
!
interface Loopback0
 ip address 192.0.2.1 255.255.255.255
!

R1#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq: 250.0000 Hz, actual freq: 250.0000 Hz, precision: 2**10
reference time: 0.0.0.0 00:00:00.000 UTC Mon Jan 1 2000
clock offset: 0.0000 msec, root delay: 0.00 msec
root dispersion: 0.00 msec, peer dispersion: 0.00 msec
loopfilter state: 'CTRL' (Normal Controlled), drift: 0.00000000 s/s
system poll interval: 64, last update was 0 sec ago.

R1#show ntp associations
  address         ref clock     st  when  poll reach  delay  offset   disp
*~203.0.113.10    .INIT.          16     -    64    0     0.00    0.00  16000.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

R1#show logging | include Logging
Syslog logging: enabled
    Console logging: level debugging, 0 messages logged
    Monitor logging: level debugging, 0 messages logged
    Buffer logging: level debugging, 0 messages logged
    Trap logging: level debugging, 0 messages logged
    Logging to 198.51.100.50 (udp port 514, audit disabled, link up),
             2 messages logged, level debugging
Question 204hardScenario
Read the full network assurance explanation →

You are connected to R1, a branch router connected to a central NTP server at 203.0.113.10 and a syslog server at 198.51.100.20. Configure R1 as an NTP client using its Loopback0 interface (192.168.1.1/32) as the source, and ensure syslog messages of severity 'informational' and above are sent to the syslog server. Currently, R1 shows 'Clock is unsynchronized, stratum 16'. Identify and fix the NTP issue, then apply the syslog configuration.

Exhibit

R1#show ntp status
Clock is synchronized, stratum 16, reference is 127.127.7.1
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**10
reference time is D3A4B2C1.00000000 (00:00:00.000 UTC Mon Jan 1 2024)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
loopfilter state is 'CTRL' (Normal), drift is 0.000000000 s/s
system poll interval is 64, last update was 0 sec ago.

R1#show ntp associations
  address         ref clock     st  when  poll reach  delay  offset   disp
*~127.127.7.1     .LOCL.        16    25    64   377   0.000  0.000   0.000
 * sys_peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

R1#show running-config | include ntp|logging
ntp server 203.0.113.10
logging host 198.51.100.20
logging trap warnings
Question 205hardScenario
Read the full network assurance explanation →

You are connected to R1 via the console. R1 should synchronize its clock with the NTP server 192.0.2.10 using its loopback0 interface (IP 10.0.0.1) as the source. Additionally, syslog messages of severity 'notification' (level 5) and above must be sent to the syslog server at 198.51.100.20. Currently, R1 shows NTP stratum 16 (unsynchronized) and syslog messages are not being forwarded. Identify and resolve the issues.

Exhibit

R1#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 250.0000 Hz, actual freq is 250.0000 Hz, precision is 2**10
reference time is 0.0.0.0 (00:00:00.000 UTC Mon Jan 1 2000)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.00 msec, peer dispersion is 0.00 msec
loopfilter state is 'CTRL' (Normal Controlled Loop)
system poll interval is 64, last update was 0 sec ago.

R1#show ntp associations
  address         ref clock     st  when  poll reach  delay  offset   disp
*~0.0.0.0         0.0.0.0       16    -    64   0     0.00   0.00   16000.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

R1#show run | section logging
logging host 198.51.100.20
logging trap informational
Question 206hardScenario
Read the full network assurance explanation →

You are connected to R1, a branch router that must synchronize time with the NTP server at 198.51.100.1 (reachable via G0/0) and send critical syslog messages (severity 0-4) to the logging server at 203.0.113.10. The current configuration has NTP pointing to a wrong server and syslog set to debug level, flooding the server. Correct the NTP server, set the NTP source interface to Loopback0 (10.10.10.1/32), and adjust the syslog trap level so that only emergencies through warnings are logged.

Exhibit

R1#show running-config | include ntp|logging
ntp server 192.0.2.1
logging host 203.0.113.10
logging trap debugging
!
R1#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
R1#show ntp associations
  address         ref clock     st   when   poll reach  delay  offset   disp
*~192.0.2.1       .INIT.          16    -    64    0     0.0    0.0    0.0
~198.51.100.1     .INIT.          16    -    64    0     0.0    0.0    0.0
Question 207hardScenario
Read the full network assurance explanation →

You are connected to R1 via the console. SNMP v2c community strings (public RO, private RW) are already configured. The network has a management server at 10.1.1.100 and a NetFlow collector at 10.1.1.200. Configure SNMP traps to the management server for link status changes. Also configure NetFlow on interface GigabitEthernet0/0 to export version 9 to the collector, with a source interface of Loopback0 (10.255.255.1/32).

Exhibit

R1#show running-config | section snmp|flow
Building configuration...

Current configuration : 1234 bytes
!
snmp-server community public RO
snmp-server community private RW
!
! No trap or NetFlow configuration exists
!
interface GigabitEthernet0/0
 ip address 10.0.0.1 255.255.255.252
 duplex auto
 speed auto
 media-type rj45
!
interface Loopback0
 ip address 10.255.255.1 255.255.255.255
!
end
Question 208hardScenario
Read the full network assurance explanation →

You are connected to R1 via the console. R1 is a Cisco ISR 4331 router. Your task is to configure SNMPv2c and SNMPv3 traps, and NetFlow export, so that SNMP traps are sent to the NMS at 192.0.2.100 using SNMPv2c with community string 'PublicTrap', and also using SNMPv3 with user 'Admin' (authentication SHA, encryption AES) to the same NMS. Additionally, configure NetFlow to export version 9 flow records to 192.0.2.200 on UDP port 2055. Finally, verify your configurations.

Exhibit

R1#show running-config | include snmp
Building configuration...

Current configuration : 1234 bytes
!
snmp-server community public RO
!
end

R1#show running-config | include flow
Building configuration...

Current configuration : 1234 bytes
!
!
end

R1#show ip flow export
Flow export v9 is disabled for main cache
  Export source and destination details :
  No Flow Export destinations configured
  This is a main cache

R1#show ip cache flow
IP packet size distribution (0 total packets):
    ...
  (output truncated – no flows captured)
Question 209hardScenario
Read the full network assurance explanation →

You are connected to R1 via console. R1 is a Cisco ISR 4321 running IOS-XE 17.3. The initial configuration on R1 already includes the SNMPv2c community string 'CourseivaRO' with read-only access and a corresponding SNMPv2c trap host for 192.0.2.100 (these are already in place and do not need to be reconfigured). Your task is to add the following additional configurations: (a) [already configured] (b) Create an SNMPv3 user 'monitor' with SHA authentication and AES 128-bit encryption, using authentication password 'AuthPass123' and privacy password 'PrivPass456'; (c) Configure SNMP traps (linkUp, linkDown, authenticationFailure) to be sent to the NMS server at 192.0.2.100 using SNMPv3 with only authentication (no privacy). (d) Enable NetFlow on GigabitEthernet0/0/0, with flow export to collector 203.0.113.50 using UDP port 2055, NetFlow version 9, and set the source interface to Loopback0 (IP 10.0.0.1/32). Finally, verify your configuration with show snmp and show ip cache flow.

Exhibit

Current running-config (relevant sections):
!
hostname R1
!
interface GigabitEthernet0/0/0
 ip address 192.168.1.1 255.255.255.252
 duplex auto
 speed auto
 media-type rj45
 no shutdown
!
interface Loopback0
 ip address 10.0.0.1 255.255.255.255
!
ip route 0.0.0.0 0.0.0.0 192.168.1.2
!
snmp-server community CourseivaRO RO
!
snmp-server enable traps snmp authentication linkdown linkup
!
snmp-server host 192.0.2.100 version 2c CourseivaRO
!
! Note: SNMPv3 user 'monitor' is not yet configured. NetFlow not configured.
!
Question 210hardScenario
Read the full network assurance explanation →

You are connected to R1. Configure SNMP v2c with a read-only community string 'monitorRO' and a read-write community string 'controlRW', and enable SNMP traps for link status to the management server at 203.0.113.100. Additionally, configure NetFlow to export version 9 flow records to the same server on UDP port 2055, and ensure that only traffic from the 10.10.10.0/24 network is monitored. Finally, verify your configurations with the appropriate show commands.

Exhibit

R1#show running-config | section snmp|ip flow
Building configuration...

Current configuration : 1234 bytes
!
ip flow-export source Loopback0
ip flow-export destination 203.0.113.100 2055
!
end

R1#show ip cache flow
IP packet size distribution (96 total packets):
   1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
   .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000 .0000

   ... (no flow records shown)
Question 211hardScenario
Read the full network assurance explanation →

You are connected to R1, a router that must send SNMP traps to a management server at 203.0.113.10 and export NetFlow data to a collector at 203.0.113.20. Currently, SNMPv2c traps are not being sent, and SNMPv3 is not configured for read-only access with authentication and privacy. Additionally, NetFlow export is missing the destination and version configuration. Configure the necessary commands on R1 to enable SNMPv2c traps (community string 'public'), configure SNMPv3 user 'admin' with SHA authentication and AES 128 encryption (password 'cisco123' for both auth and priv), and set NetFlow export to version 9.

Exhibit

R1# show running-config | section snmp|ip flow
!
ip flow-export destination 203.0.113.20 2055
!
snmp-server community public RO
!
R1# show snmp
Chassis: SNMPv2c
Community strings: public (read-only)
No SNMPv3 users configured.
No trap configuration.
R1# show ip cache flow
IP packet size distribution:
...
No NetFlow export information configured.
Question 212hardScenario
Read the full network assurance explanation →

You are connected to R1, a Cisco router running IOS-XE. Configure SNMP v2c with a read-only community string 'publicRW' (note: the string is intentionally misnamed for the task), and SNMP v3 with user 'admin' using MD5 authentication (password 'cisco123') and DES encryption (password 'cisco456'). Ensure SNMP traps for linkUp/linkDown are sent to the management server at 192.0.2.100. Additionally, configure NetFlow export to send version 9 flow records to 192.0.2.200 on UDP port 2055, and ensure that only inbound traffic on GigabitEthernet0/0 is monitored. Finally, verify your configuration using 'show snmp' and 'show ip cache flow'.

Exhibit

R1#show running-config | section snmp
snmp-server community publicRW RO
snmp-server location Datacenter
snmp-server contact admin@example.com
!
R1#show running-config | include ip flow
i
R1#show ip cache flow
No flow cache configured.
Question 213hardScenario
Read the full network assurance explanation →

You are connected to R1, a Cisco ISR 4321 running IOS-XE. Configure SNMPv2c with a read-only community string 'public' and SNMPv3 with user 'admin' using SHA authentication and AES encryption. Ensure SNMP traps are sent to the management server at 203.0.113.10. Additionally, configure NetFlow export to destination 203.0.113.20 on UDP port 2055 using version 9. Verify your configuration with appropriate show commands. The current running-config is incomplete; you must add the missing commands.

Exhibit

R1#show running-config | section snmp|ip flow
!
! No SNMP or NetFlow configuration currently exists
! Only the following lines are present:
!
snmp-server community public RO
!
Question 214hardScenario
Read the full network assurance explanation →

You are connected to R1, a Cisco ISR 4331 router running IOS-XE. Your task is to enable SNMP v2c with community string 'public' (read-only) and 'private' (read-write), and configure SNMP v3 with a user 'admin' using SHA authentication (password 'Cisco123') and AES 128 encryption (password 'Cisco456'). Additionally, configure SNMP traps to be sent to a management server at 203.0.113.10 for both v2c and v3. Finally, enable NetFlow export to a collector at 203.0.113.20, using version 9. Verify your configuration using 'show snmp' and 'show ip cache flow'.

Exhibit

Current running-config of R1 (relevant sections):
!
hostname R1
!
interface GigabitEthernet0/0
 ip address 192.0.2.1 255.255.255.252
 no shut
!
interface GigabitEthernet0/1
 ip address 198.51.100.1 255.255.255.0
 no shut
!
ip route 0.0.0.0 0.0.0.0 192.0.2.2
!
end
Question 215hardScenario
Read the full network assurance explanation →

You are connected to R1. Configure SNMPv3 with authentication (SHA) and encryption (AES-128) for user 'monitor' in group 'AdminGroup', and also configure SNMPv2c read-only community string 'cisco123' to send traps to the management server at 192.0.2.100. Additionally, configure NetFlow on interface GigabitEthernet0/0 to export flow data to 198.51.100.50 using version 9. Verify your configuration using the appropriate show commands.

Exhibit

R1#show running-config | section snmp
snmp-server community public RO
snmp-server community private RW
!
R1#show running-config | include flow-export
no ip flow-export destination
no ip flow-export version
!
R1#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0     10.0.0.1        YES NVRAM  up                    up
GigabitEthernet0/1     203.0.113.1     YES NVRAM  up                    up
Loopback0              192.0.2.1       YES NVRAM  up                    up
!
Question 216hardScenario
Read the full network assurance explanation →

You are connected to R1, a Cisco IOS-XE router. Configure SNMP v2c with read-only community 'NetOpsRO' and SNMP v3 with user 'AdminUser' using SHA authentication (password: AuthPass1) and AES-128 encryption (password: PrivPass2). Also enable SNMP traps to the NMS at 192.0.2.10 with community 'TrapComm'. Additionally, configure NetFlow export to 192.0.2.20 using version 9, and ensure the flow exporter is applied to GigabitEthernet0/0. Verify your configuration using 'show snmp' and 'show ip cache flow'.

Exhibit

R1#show running-config | section snmp|flow
Building configuration...
!
ip flow-export source GigabitEthernet0/0
ip flow-export version 9
!
snmp-server community NetOpsRO RO
snmp-server enable traps snmp
snmp-server host 192.0.2.10 version 2c TrapComm
!
end

R1#show ip cache flow
IP packet size distribution (0 total packets):
    (No flow data yet)

R1#
Question 217hardScenario
Read the full REST/YANG explanation →

You are connected to R1 (192.0.2.1/24, management IP). The network team needs to automate interface configuration using RESTCONF. Construct a valid RESTCONF GET request to retrieve the operational status of GigabitEthernet0/1 using the ietf-interfaces YANG module, and a PATCH request to set the description of that interface to 'Link to R2' using the Cisco-IOS-XE-native YANG module. Identify the error that occurs if the Accept header is set to application/json instead of application/yang-data+json.

Exhibit

R1#show running-config | section interface GigabitEthernet0/1
interface GigabitEthernet0/1
 ip address 10.0.0.1 255.255.255.252
 duplex auto
 speed auto
 media-type rj45
!

R1#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0     192.0.2.1       YES NVRAM  up                    up      
GigabitEthernet0/1     10.0.0.1        YES NVRAM  up                    up      
Loopback0              203.0.113.1     YES NVRAM  up                    up
Question 218hardScenario
Read the full REST/YANG explanation →

You are connected to R1. Use RESTCONF to retrieve all operational interface statistics from the ietf-interfaces YANG module, then modify the description of GigabitEthernet0/1 to 'Link to R2 via RESTCONF' using a PATCH request. The device is reachable at 203.0.113.1 with port 443, username 'admin', password 'cisco123'. Identify the error that would occur if you used a PATCH with Content-Type: application/json instead of application/yang-data+json.

Exhibit

R1# show running-config | section interface GigabitEthernet0/1
interface GigabitEthernet0/1
 description Original description
 ip address 192.0.2.1 255.255.255.252
 no shutdown
!
R1# show ip interface brief
Interface              IP-Address      Status     Protocol
GigabitEthernet0/0     203.0.113.1     up         up
GigabitEthernet0/1     192.0.2.1       up         up
Loopback0              10.1.1.1        up         up
Question 219hardScenario
Read the full REST/YANG explanation →

You are connected to R1 (192.168.1.1). Using RESTCONF, you need to retrieve the current operational status of GigabitEthernet0/0 using the ietf-interfaces YANG module, then change its description to 'WAN Link to R2' via a PATCH request. The device is reachable via HTTPS on port 443, with credentials admin/admin. Identify the correct base URI, YANG path, HTTP headers, and interpret the JSON response. Also, diagnose the error when an incorrect Content-Type or YANG path is used.

Exhibit

R1#show running-config | section interface GigabitEthernet0/0
interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.252
 description Link to R2
 no shutdown
!

R1#show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0         192.168.1.1     YES NVRAM  up                    up
GigabitEthernet0/1         192.168.2.1     YES NVRAM  up                    up

R1#show restconf
RESTCONF enabled on port 443
Question 220hardScenario
Read the full REST/YANG explanation →

You are connected to R1. Using RESTCONF, you need to retrieve the current IP address of interface GigabitEthernet0/0 using the ietf-interfaces YANG model, then change it to 192.0.2.1/24 using a PATCH request. The device is reachable at 10.1.1.1 with port 443 and credentials admin/cisco. Identify the correct URIs and required HTTP headers, and explain why a GET with Accept: application/json would fail.

Exhibit

R1# show running-config | section interface GigabitEthernet0/0
interface GigabitEthernet0/0
 ip address 10.0.0.1 255.255.255.252
 duplex auto
 speed auto
 media-type rj45
 no shutdown
!

R1# show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0     10.0.0.1        YES NVRAM  up                    up
GigabitEthernet0/1     unassigned      YES NVRAM  administratively down down
Loopback0              10.0.0.11       YES NVRAM  up                    up
Question 221hardScenario
Read the full REST/YANG explanation →

You are connected to R1 (10.0.0.1/30). You need to use RESTCONF to verify the current administrative status of interface GigabitEthernet0/1 on R1, then change it to 'down'. The YANG data model is ietf-interfaces, and the base URI is https://10.0.0.1/restconf. Provide the correct GET and PATCH request URIs with appropriate HTTP headers. Also identify what error would occur if you used 'application/xml' as the Accept header or if you used the path 'Cisco-IOS-XE-native:native/interface/GigabitEthernet' instead of the correct ietf-interfaces path.

Exhibit

R1#show running-config | section interface GigabitEthernet0/1
interface GigabitEthernet0/1
 ip address 192.0.2.1 255.255.255.0
 shutdown
!

R1#show ip interface brief | include Gig0/1
GigabitEthernet0/1  192.0.2.1  YES manual administratively down  down
Question 222hardScenario
Read the full REST/YANG explanation →

You are connected to R1 (192.0.2.1/24). Use RESTCONF to query the operational state of GigabitEthernet0/0 using the ietf-interfaces YANG module. Then, send a PATCH request to disable the interface (set 'enabled' to false) using the Cisco-IOS-XE-native YANG module. Identify the error when a PATCH request is sent with the wrong Content-Type header (application/json instead of application/yang-data+json) and when the PATCH URI uses an incorrect YANG path (ietf-interfaces instead of Cisco-IOS-XE-native).

Exhibit

R1#show running-config | section interface GigabitEthernet0/0
interface GigabitEthernet0/0
 ip address 192.0.2.1 255.255.255.0
 no shutdown
!

R1#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0     192.0.2.1       YES manual up                    up

RESTCONF base URI: https://192.0.2.1/restconf

Example GET URI (correct):
  GET /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/0
  Accept: application/yang-data+json

Example PATCH URI (correct):
  PATCH /restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=0/0
  Content-Type: application/yang-data+json
  Body: {"Cisco-IOS-XE-native:interface":{"GigabitEthernet":[{"name":"0/0","shutdown":true}]}}
Question 223hardScenario
Read the full REST/YANG explanation →

Which option performs the RESTCONF operations correctly?

Exhibit

R1#show running-config | section interface GigabitEthernet0/0
interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.252
 duplex auto
 speed auto
!

R1#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0     192.168.1.1     YES NVRAM  up                    up
Question 224hardScenario
Read the full REST/YANG explanation →

You are connected to R1 (192.168.1.1/24, GigabitEthernet0/0). Using RESTCONF, you need to retrieve the operational status of interface GigabitEthernet0/0 and then change its description to 'Uplink to R2'. The correct base URI is https://192.168.1.1/restconf. Provide the GET and PATCH request URIs, required HTTP headers, and identify the error that occurs if you use Accept: application/json instead of application/yang-data+json.

Exhibit

R1#show running-config | section interface GigabitEthernet0/0
interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 description To_R2
 no shutdown
!

R1#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0     192.168.1.1     YES NVRAM  up                    up
Question 225hardScenario
Read the full REST/YANG explanation →

You are connected to R1 (198.51.100.1/24). Using RESTCONF, you need to retrieve the current operational status of GigabitEthernet0/0/0 via the ietf-interfaces YANG model, then update its description to 'WAN-Link-to-R2' using a PATCH request with the Cisco-IOS-XE-native YANG model. The candidate must identify the correct base URI, YANG module path, HTTP headers (Accept: application/yang-data+json), interpret the JSON response, and recognize the error that occurs when an incorrect Content-Type header or wrong YANG path is used.

Exhibit

R1#show running-config | section interface GigabitEthernet0/0/0
interface GigabitEthernet0/0/0
 ip address 198.51.100.1 255.255.255.0
 description Link-to-R2
 no shutdown
!

R1#show ip interface brief | include GigabitEthernet0/0/0
GigabitEthernet0/0/0  198.51.100.1  YES manual up                    up

RESTCONF base URI: https://198.51.100.1:443/restconf

Curl attempt (GET) — correct:
curl -k -u admin:cisco -H "Accept: application/yang-data+json" https://198.51.100.1/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0%2F0%2F0

Curl attempt (PATCH) — incorrect (wrong YANG path):
curl -k -u admin:cisco -X PATCH -H "Content-Type: application/yang-data+json" -d '{"Cisco-IOS-XE-native:description":"WAN-Link-to-R2"}' https://198.51.100.1/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0%2F0%2F0/description

Response to PATCH above: 400 Bad Request - "YANG path does not match data: expected 'Cisco-IOS-XE-native:interface' at root"

Curl attempt (PATCH) — correct:
curl -k -u admin:cisco -X PATCH -H "Content-Type: application/yang-data+json" -d '{"Cisco-IOS-XE-native:description":"WAN-Link-to-R2"}' https://198.51.100.1/restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=GigabitEthernet0%2F0%2F0/description

Response to correct PATCH: 204 No Content
Question 226mediumScenario
Read the full REST/YANG explanation →

You are connected to R1 via the console. R1 is a Cisco ISR 4321 router running IOS-XE. The network manager wants to monitor interface utilization changes. Use RESTCONF to retrieve the operational state of GigabitEthernet0/0/0 on R1. The device has RESTCONF enabled with username 'admin' and password 'cisco'. The management IP is 192.168.1.1.

Question 227mediumScenario
Review the full routing breakdown →

You are connected to SW1, a Cisco switch that is experiencing intermittent connectivity issues. The network administrator suspects a duplex mismatch between SW1 and the connected router R1. Use CDP to verify the status and check interface statistics.

Question 228mediumScenario
Study the full Python automation breakdown →

You are connected to R1, a Cisco IOS-XE router that provides connectivity for the 192.168.10.0/24 network. The network operations team uses a Python script with netmiko to push configuration changes. However, the script fails to connect to R1. You need to verify the SSH configuration on R1.

Question 229hardScenario
Read the full Ansible explanation →

You are connected to the console of R1, a Cisco router that is part of a larger network. The network operations team uses Ansible to manage configurations. You need to write an Ansible playbook that configures an interface description on R1. The playbook should use the ios_config module.

Question 230hardScenario
Review the full OSPF breakdown →

You are connected to R1 via the console. R1 is a Cisco ISR 4321 router running IOS-XE. The network team has recently changed the routing protocol from EIGRP to OSPF, but some routes are missing from the routing table. You need to analyze the OSPF neighbor states and LSDB to identify the issue.

Question 231hardScenario
Study the full Python automation breakdown →

You are connected to the console of R1, a Cisco IOS-XE router. The network operations team needs to automate the backup of the running configuration to a TFTP server using a Python netmiko script. However, the script is failing. Your task is to write the correct netmiko commands to connect to R1 and save the configuration to the TFTP server at 192.168.1.100.

Question 232mediumScenario
Read the full Ansible explanation →

You are connected to R1 via the console. R1 is a Cisco IOS-XE router. The network manager wants to use an Ansible playbook to configure a loopback interface with IP address 10.0.0.1/24 on R1. You need to write the Ansible YAML playbook that connects to R1 and configures this interface. The playbook must not use the 'parents' argument in the ios_config module.

Question 233mediumScenario
Open the full VLAN trunking answer →

You are connected to R1 via the console. R1 is a Cisco ISR 4321 router running IOS-XE 17.3. The network team has reported intermittent connectivity issues between VLAN 10 hosts and the server at 10.0.0.100. You suspect a routing problem and need to analyze the IP routing table, ARP cache, and interface status to identify the cause. Use the provided outputs to diagnose the issue.

Question 234mediummulti select
Read the full AI and Network Operations explanation →

Which three of the following are key applications of AI in network operations? (Choose three.)

Question 235mediummulti select
Read the full AI and Network Operations explanation →

Which three options best describe how machine learning models are trained for network anomaly detection? (Choose three.)

Question 236mediummulti select
Read the full AI and Network Operations explanation →

Which three of the following are benefits of integrating AI into network operations? (Choose three.)

Question 237mediummulti select
Read the full AI and Network Operations explanation →

Which three statements accurately describe the role of Cisco's AI-powered security features (such as Cisco AI Network Analytics, Stealthwatch, or DNA Center's AI-Enhanced Analytics) in network security operations? (Choose three.)

Question 238mediummulti select
Read the full AI and Network Operations explanation →

Which three of the following are common challenges when deploying AI in network operations? (Choose three.)

Question 239mediummulti select
Read the full AI and Network Operations explanation →

Which three options describe how AI contributes to network automation and orchestration? (Choose three.)

Question 240mediummulti select
Read the full AI and Network Operations explanation →

Which four of the following are common use cases or features of AI and Machine Learning in network operations? (Choose all that apply.)

Question 241mediummulti select
Read the full AI and Network Operations explanation →

Which four of the following correctly describe how AI/ML techniques can improve network operations in a modern enterprise? (Choose all that apply.)

Question 242mediummulti select
Read the full AI and Network Operations explanation →

Which three of the following are key benefits of integrating AI into network operations? (Choose three.)

Question 243mediummulti select
Read the full network assurance explanation →

Which three options describe common applications of AI/ML in network telemetry and monitoring? (Choose three.)

Question 244mediummulti select
Read the full AI and Network Operations explanation →

Which three statements accurately describe the role of AI in software-defined networking (SDN) and intent-based networking (IBN)? (Choose three.)

Question 245mediummulti select
Read the full AI and Network Operations explanation →

Which three of the following are typical use cases for automation in network security operations? (Choose three.)

Question 246mediummulti select
Study the full QoS explanation →

Which three options correctly describe how AI can optimize network performance and quality of service (QoS)? (Choose three.)

Question 247mediummulti select
Read the full AI and Network Operations explanation →

Which three of the following are key applications of AI and machine learning in modern network operations? (Choose three.)

Question 248mediummulti select
Read the full AI and Network Operations explanation →

A network engineer is implementing AIOps to improve network reliability. Which four of the following are core capabilities that AIOps platforms typically provide? (Choose four.)

Question 249mediummulti select
Read the full AI and Network Operations explanation →

Which TWO statements about network automation tools are true?

Question 250mediummulti select
Read the full AI and Network Operations explanation →

Which TWO of the following statements correctly describe REST API operations?

Question 251mediumdrag order
Read the full AI and Network Operations explanation →

Drag and drop the following steps into the correct order to retrieve network device information using a REST API call that requires authentication and returns JSON data.

Question 252mediumdrag order
Read the full Ansible explanation →

Drag and drop the following steps into the correct order to select and implement a network automation solution using the appropriate tool based on the use cases and differences between Puppet, Chef, Ansible, and Python.

Question 253mediumdrag order
Read the full REST/YANG explanation →

Drag and drop the following steps into the correct order to retrieve the operational status of interface GigabitEthernet0/0 using NETCONF and the ietf-interfaces YANG model.

Question 254mediummultiple choice
Open the full VLAN trunking answer →

A network administrator needs to configure VLANs and access ports on 200 managed switches across multiple locations. The administrator requires a solution that uses a push‑based deployment model, does not require any agent software to be installed on the switches, and can be executed from a central control node. Which automation tool is most suitable for this task?

Question 255mediummatching
Read the full AI and Network Operations explanation →

Drag and drop the items on the left to the correct descriptions on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Tool employing a pull mechanism for node configuration using a proprietary DSL

Framework that uses Ruby-coded recipes within a client-server deployment model

Solution providing agentless orchestration via SSH and YAML-written playbooks

High-level programming language utilized for scripting network automation tasks

Web-based interface for programmatic device management using HTTP methods

Practice tests

Scored 10-question sessions with instant feedback and explanations.

CCNA Practice Test 1 — 10 Questions→CCNA Practice Test 2 — 10 Questions→CCNA Practice Test 3 — 10 Questions→CCNA Practice Test 4 — 10 Questions→CCNA Practice Test 5 — 10 Questions→CCNA Practice Exam 1 — 20 Questions→CCNA Practice Exam 2 — 20 Questions→CCNA Practice Exam 3 — 20 Questions→CCNA Practice Exam 4 — 20 Questions→Free CCNA Practice Test 1 — 30 Questions→Free CCNA Practice Test 2 — 30 Questions→Free CCNA Practice Test 3 — 30 Questions→CCNA Practice Questions 1 — 50 Questions→CCNA Practice Questions 2 — 50 Questions→CCNA Exam Simulation 1 — 100 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Network Infrastructure and ConnectivitySwitching and Network AccessIP RoutingNetwork Services and SecurityAI and Network Operations

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios→

Continue studying

All AI and Network Operations setsAll AI and Network Operations questionsCCNA Practice Hub