CCNA AI and Network Operations Practice Test 12 — 15 Questions

Question 1

Drag and drop the syslog and NTP items on the left to the correct descriptions on the right.

Accepted Answer

Syslog facility: Identifies the type of system or process that generated the log message. These pairings match syslog and NTP items to their correct descriptions.

Question 2

A network engineer is tasked with monitoring a large enterprise network that requires high-frequency, real-time data collection from thousands of routers and switches. The engineer needs a solution that minimizes CPU overhead on the network devices and supports push-based data delivery. Which technology should the engineer choose for this requirement?

Accepted Answer

Streaming telemetry. Streaming telemetry uses a push model where devices continuously send structured data (e.g., via gRPC or UDP) to collectors, reducing the need for polling and lowering CPU impact. SNMPv2c uses pull-based polling (get requests) which increases CPU load with high-frequency queries. NetFlow and IPFIX are flow-based and better suited for traffic analysis, not real-time device metrics like CPU or memory.

Answer

SNMPv2c with frequent polling intervals

Answer

NetFlow

Answer

IPFIX

Question 3

A network engineer is evaluating monitoring technologies for a large enterprise network that requires high-frequency, low-latency traffic data collection with support for custom fields. The solution must also support encryption and authentication to prevent tampering. Which technology best meets these requirements?

Accepted Answer

Implement streaming telemetry using gRPC with TLS and YANG data models.. Streaming telemetry using gRPC with TLS and YANG data models is correct because it provides high-frequency, low-latency push-based data collection, supports custom fields via YANG models, and ensures encryption and authentication through TLS. This meets all the requirements, unlike polling-based or unencrypted alternatives.

Answer

Configure SNMPv2c with community strings and polling every 30 seconds.

Answer

Deploy NetFlow v9 with custom flow records and SNMPv3 for encryption.

Answer

Use IPFIX with UDP export and add authentication via MD5 hashing.

Question 4

Which TWO statements correctly describe characteristics of SNMPv2c and SNMPv3 for network monitoring?

Accepted Answer

SNMPv3 supports authentication and encryption for secure network monitoring.. SNMPv3 is correct because it introduces authentication (MD5/SHA) and encryption (DES/AES) for secure monitoring. SNMPv2c is correct because it uses community strings transmitted in cleartext, lacking security. Option C is wrong: SNMPv3 is more secure than v2c, not the same. Option D is wrong: SNMPv2c supports traps in addition to GET and SET. Option E is wrong: SNMPv3 uses usernames and security models, not community strings.

Answer

SNMPv3 provides the same security level as SNMPv2c but with additional trap support.

Answer

SNMPv2c supports only GET and SET operations, but not traps.

Answer

SNMPv3 uses community strings to authenticate agents and managers.

Question 5

Drag and drop the monitoring protocols and features on the left to their correct descriptions on the right.

Accepted Answer

SNMP - Used to collect and organize information about managed devices on IP networks. These pairs correctly match monitoring protocols and features with their descriptions as covered in network monitoring and management topics.

Answer

NetFlow - Provides real-time traffic analysis and packet-level inspection

Answer

Syslog - Used to collect and store network device configuration backups

Answer

SPAN - Used to mirror traffic from one switch port to another for analysis

Question 6

Drag and drop the network monitoring technologies on the left to their correct descriptions on the right.

Accepted Answer

SNMP: Protocol for collecting and organizing information about managed devices on IP networks. These pairings match network monitoring technologies to their correct descriptions.

Question 7

A network engineer needs to automate the configuration of multiple Cisco IOS XE routers in a data center. The team requires a standard, vendor-neutral data modeling language to define the configuration parameters, and they need a protocol that uses XML-based remote procedure calls over SSH for secure, reliable configuration transactions. Which combination of technologies best meets these requirements?

Accepted Answer

Use YANG data models combined with NETCONF over SSH.. Option B is correct because YANG is a standard, vendor-neutral data modeling language (RFC 6020) for defining configuration parameters, and NETCONF (RFC 6241) uses XML-based remote procedure calls (RPCs) over SSH for secure, reliable configuration transactions. This combination directly satisfies the requirement for a standard data model and XML-based RPCs over SSH, unlike RESTCONF which uses HTTPS and JSON/XML but not SSH.

Answer

Use YANG data models combined with RESTCONF over HTTPS.

Answer

Use CLI commands combined with NETCONF over SSH.

Answer

Use CLI commands combined with RESTCONF over HTTPS.

Question 8

A network engineer is automating the configuration of a new branch office router. The engineer needs a protocol that uses a YANG data model, supports both configuration and operational state retrieval, and operates over SSH for secure transport. Which protocol should the engineer use?

Accepted Answer

NETCONF. NETCONF (Network Configuration Protocol) is the correct choice because it uses YANG data models for configuration and operational state retrieval, and it operates over SSH (RFC 6242) for secure transport. Unlike SNMP, NETCONF provides transactional configuration changes and separates configuration from operational state data, making it ideal for automated router configuration.

Answer

SNMP

Answer

RESTCONF

Answer

CLI scripting

Question 9

Which THREE statements accurately describe the characteristics of NETCONF and RESTCONF for programmatic network configuration?

Accepted Answer

NETCONF uses XML-encoded RPCs over a secure transport such as SSH or TLS.. NETCONF uses XML-encoded Remote Procedure Calls (RPCs) over a secure transport such as SSH or TLS, making option B correct. RESTCONF supports both XML and JSON encoding and uses standard HTTP methods (GET, POST, PUT, PATCH, DELETE), so option C is correct. Both NETCONF and RESTCONF rely on YANG data models to define the structure of configuration and operational data, confirming option D. Option A is incorrect because NETCONF does not use HTTP methods; that is a characteristic of RESTCONF. Option E is wrong because RESTCONF does not use a separate commit operation; changes are applied immediately with each HTTP request, unlike NETCONF's candidate config and commit model.

Answer

NETCONF uses HTTP methods such as GET, POST, PUT, and DELETE to manipulate configuration data.

Answer

NETCONF uses a separate commit operation to apply changes, while RESTCONF uses a similar commit mechanism.

Question 10

Drag and drop the YANG, NETCONF, and RESTCONF terms on the left to their correct descriptions on the right.

Accepted Answer

YANG: A data modeling language used to define configuration and state data for network devices.. YANG is the modeling language, NETCONF uses XML RPCs over SSH, RESTCONF uses HTTP and YANG models. The pairs match each term to its core function.

Question 11

Drag and drop the protocols/technologies on the left to the descriptions on the right.

Accepted Answer

SSH: Provides secure remote access to network devices using encryption, typically on TCP port 22.. NETCONF uses XML-encoded RPCs over SSH (port 830) for device configuration. RESTCONF uses HTTP/HTTPS methods with JSON or XML. YANG is a data modeling language defining structure of configuration/state data. gRPC is a high-performance RPC framework using Protocol Buffers over HTTP/2. OpenConfig provides vendor-neutral YANG models. These pairings reflect their primary characteristics as tested on the CCNA.

Answer

Telnet: Provides secure remote access to network devices using encryption, typically on TCP port 23.

Answer

HTTP: Provides secure remote access to network devices using encryption, typically on TCP port 80.

Answer

FTP: Provides secure remote access to network devices using encryption, typically on TCP port 21.

Question 12

Drag and drop the following steps into the correct order to implement a basic network monitoring workflow using telemetry and streaming analytics on Cisco IOS-XE.

Accepted Answer

Collect data via telemetry from network devices. The workflow begins with collecting telemetry data from devices, then streams it to an analytics platform for processing. The data is visualized on dashboards for monitoring, and finally alerts are generated when predefined thresholds are exceeded to enable a response.

Question 13

Drag and drop the following steps into the correct order to implement an AI/ML-based network operations workflow for proactive anomaly detection and automated remediation on a Cisco IOS-XE device.

Accepted Answer

Data Collection. The workflow starts with data collection, then streaming, model training, deployment, and finally automated remediation based on detection.

Answer

Model Training

Answer

Automated Remediation

Answer

Data Streaming

Question 14

Drag and drop the following steps into the correct order to troubleshoot an end-to-end connectivity issue using a bottom-up approach.

Accepted Answer

Check physical layer connectivity and interface status. The correct troubleshooting order follows the OSI model bottom-up: start with physical connectivity (A), then verify Layer 3 addressing (B), use diagnostic tools (C) to isolate the failure, and finally implement the solution and verify restoration (D). Skipping layers can lead to misdiagnosis.

Question 15

Which TWO statements accurately describe how AI/ML concepts are applied to network operations in modern enterprise networks?

Accepted Answer

Supervised machine learning models can be used to classify network traffic into predefined categories, such as identifying whether traffic is voice, video, or data.. Option A is correct because supervised learning uses labeled data to classify traffic (e.g., voice, video, data). Option B is correct because anomaly detection often uses unsupervised learning to identify deviations from normal behavior. Option C is wrong because reinforcement learning is not used for spam classification; that task uses supervised learning. Option D is wrong because clustering groups data but cannot predict exact bandwidth usage; prediction requires regression models. Option E is wrong because predictive analytics in network operations leverages machine learning models, not solely static thresholds defined by administrators.

Answer

Reinforcement learning is primarily used to automatically classify email traffic as spam or not spam based on a labeled dataset.

Answer

Clustering algorithms, a type of unsupervised learning, are used to predict the exact bandwidth usage of a specific application over the next hour.

Answer

Predictive analytics in network operations relies solely on static thresholds defined by network administrators to forecast potential failures.