CCNA AI and Network Operations Practice Test 13 — 15 Questions

Question 1

A network engineer is reviewing REST API behavior. Which two statements are true?

Accepted Answer

GET is commonly used to retrieve information from an API. GET is used to retrieve data without changing server state, while POST commonly creates a new resource or submits data for processing. PUT is usually for full replacement, and DELETE removes a resource.

Answer

DELETE is used to encrypt a payload before transport

Answer

PUT always retrieves a list of resources

Answer

GET requires a token in every API design

Question 2

Which two statements about YANG are correct?

Accepted Answer

It defines structured models for configuration and state data. YANG is a data modeling language used to describe configuration and operational state. It is commonly used with NETCONF and RESTCONF, but it is not itself the transport protocol.

Answer

It is a replacement for OSPF adjacency formation

Answer

It is the same thing as JSON syntax

Answer

It automatically discovers neighbors on a LAN

Question 3

Which term describes a string or credential passed to an API to prove the client is allowed to access a resource?

Accepted Answer

Token. A token is commonly used for API authorization. It is often included in an HTTP header and lets the server verify the caller has permission.

Answer

Metric

Answer

Lease

Answer

Tuple

Question 4

Which term refers to a lightweight data-interchange format that is easy for humans to read and write, and easy for machines to parse and generate?

Accepted Answer

JSON. JSON (JavaScript Object Notation) is a lightweight data-interchange format that is easy for humans to read and write, and easy for machines to parse and generate. It is commonly used in REST APIs. XML (eXtensible Markup Language) is also a data format but it is more verbose and uses tags; it is typically associated with SOAP rather than being the best match for the description given. REST (Representational State Transfer) is an architectural style, not a data format, and SOAP (Simple Object Access Protocol) is a protocol, not a data format. Therefore, only JSON correctly matches the description of a lightweight data format.

Answer

XML

Answer

REST

Answer

SOAP

Question 5

Which two statements correctly describe JSON?

Accepted Answer

It commonly represents data as key-value pairs. JSON is a lightweight data-interchange format commonly used in APIs. It represents data using key-value pairs and arrays. It is not the same as XML, which uses angle-bracket tags. JSON is not a routing protocol. JSON can carry various data types including strings, numbers, booleans, arrays, objects, and null, not only integers.

Answer

It requires angle-bracket tags around every field

Answer

It is a routing protocol used by controllers

Answer

It can only carry integer values

Question 6

A controller exposes a YANG-modeled interface configuration through an API. Which two statements correctly describe the purpose of YANG in that workflow?

Accepted Answer

It provides a structured data model for configuration and operational data. YANG is a modeling language. It defines the structure of network data so controllers and devices can exchange information consistently through APIs such as RESTCONF or NETCONF.

Answer

It replaces IP addressing on routed interfaces

Answer

It is a spanning-tree optimization mechanism

Question 7

An engineer is comparing data serialization formats used by controllers and automation tools. Which two statements correctly describe JSON?

Accepted Answer

It represents data as key-value pairs and arrays. JSON structures data using key-value pairs (objects) and ordered lists (arrays), which are fundamental to its syntax. Option B is correct as JSON is the standard payload format for REST API requests and responses due to its lightweight nature and ease of parsing. Option C is incorrect because JSON does not use closing tags; instead, it relies on curly braces {} for objects and square brackets [] for arrays. Option D is incorrect because JSON supports multiple data types beyond numeric values, including strings, booleans, null, arrays, and nested objects.

Answer

It requires closing tags like XML

Answer

It can only represent numeric values

Question 8

A developer is interacting with a REST API exposed by a network controller. Which two statements correctly describe common REST behavior?

Accepted Answer

GET is commonly used to retrieve resource data. REST APIs commonly use HTTP methods such as GET, POST, PUT, and DELETE, and JSON is one of the most common payload formats.

Answer

POST always replaces an existing resource completely

Answer

REST requires SNMP as the transport mechanism

Question 9

A script authenticates to a controller API and receives a token that it presents in later requests. Which two statements about that token-based workflow are correct?

Accepted Answer

The token is often sent in an HTTP header in subsequent requests. After authentication, many APIs issue a token that the client includes in later HTTP requests. That token acts as proof that the client already authenticated successfully.

Answer

The token changes the API from REST to SNMP

Answer

The token must be stored in the router startup-config

Question 10

A network administrator at a large enterprise notices that the network monitoring system frequently generates false positive alerts for unusual traffic patterns during normal business hours. The administrator wants to reduce these false positives while still detecting genuine security threats. Which AI/ML concept would best address this requirement?

Accepted Answer

Implement an anomaly detection system that uses machine learning to establish baseline behavior and flag deviations.. Anomaly detection using machine learning establishes a dynamic baseline of normal network behavior, allowing the system to flag only significant deviations. This reduces false positives during normal business hours while still detecting genuine threats that deviate from the learned baseline, unlike static thresholds that trigger alerts on routine traffic variations.

Answer

Deploy a predictive analytics model to forecast future traffic volumes and adjust thresholds accordingly.

Answer

Apply intent-based networking to automatically enforce security policies based on high-level business intent.

Answer

Use deep packet inspection to examine all traffic and create static rules for known threats.

Question 11

A network engineer at a large enterprise observes repeated spikes in latency on the core network every weekday at 10:00 AM, but no corresponding increase in overall bandwidth utilization. The engineer wants to use AI/ML to automatically identify the root cause and take corrective action without manual intervention. Which concept best describes this approach?

Accepted Answer

Intent-based networking. Intent-based networking (IBN) is correct because it describes a closed-loop system where the network continuously validates that its operational state matches the desired business intent. In this scenario, the engineer wants the network to automatically detect the latency anomaly, correlate it with other telemetry (e.g., routing changes, queue drops), and take corrective action (e.g., reroute traffic, adjust QoS) without human intervention — which is the core promise of IBN, often implemented via Cisco's DNA Center with Assurance and AI/ML capabilities.

Answer

Anomaly detection

Answer

Predictive analytics

Answer

Machine learning classification

Question 12

Which TWO statements accurately describe how AI and ML concepts are applied to network operations?

Accepted Answer

Intent-based networking translates business intent into network policies and continuously validates that the network meets those intentions.. Intent-based networking (IBN) captures business intent in a declarative model, translates it into network policies (e.g., via Cisco DNA Center), and continuously validates that the network state matches the intended outcome using assurance and closed-loop analytics. Option B is correct because anomaly detection leverages ML models to establish a baseline of normal traffic and then flags deviations, which can indicate security threats or performance issues. Option C is incorrect because predictive analytics forecasts future network conditions but does not automatically reconfigure devices; that requires closed-loop automation. Option D is false because ML models in network operations are not trained exclusively on labeled data; unsupervised learning can detect unknown patterns without labeled datasets. Option E is false because rule-based systems cannot adapt to new, unknown patterns without manual updates, whereas ML models are better suited for anomaly detection due to their ability to learn and generalize from data.

Answer

Predictive analytics uses historical data to forecast future network conditions and automatically reconfigures network devices to prevent issues.

Answer

ML models in network operations are trained exclusively on labeled datasets to detect known attack signatures.

Answer

Rule-based systems are preferred over ML for anomaly detection because they can adapt to new, unknown patterns without manual updates.

Question 13

Drag and drop the AI/ML concepts on the left to the correct descriptions on the right.

Accepted Answer

Anomaly detection: Identifies deviations from normal network behavior, such as unusual traffic spikes or security threats.. Supervised learning uses labeled data, unsupervised finds hidden patterns, reinforcement learning uses rewards, neural networks mimic brain structure, training data is for learning, and inference is applying the model to new data.

Question 14

A network operations team is implementing an AI-driven automation system that uses an agentic AI agent to handle routine network issues. The agent is configured to detect high CPU utilization on a core router, then automatically execute a series of diagnostic commands and, if a specific pattern is found, trigger a configuration change to reduce load. After the change, the agent re-checks CPU utilization and, if still high, escalates the issue to a human engineer. Which of the following best describes the workflow being used?

Accepted Answer

A closed-loop remediation workflow. The scenario describes a closed-loop remediation workflow, where the AI agent detects an issue, takes action, verifies the result, and escalates if the problem persists. Tool-calling refers to the agent's ability to invoke specific functions (e.g., diagnostic commands, configuration changes), but the overall process is a closed loop. AI agents are the autonomous entities, but the workflow is the key concept.

Answer

A static automation script that runs on a schedule without feedback

Answer

A tool-calling mechanism for executing network commands

Answer

An AI agent that uses reinforcement learning to optimize network performance

Question 15

A network operations team is implementing an automated system to detect and remediate interface flapping on core switches. The system must be able to query the network device for interface status and execute commands to disable or reconfigure the interface if a pattern of flapping is detected. Which protocol or technology enables the system to programmatically interact with the network device for both monitoring and configuration changes?

Accepted Answer

NETCONF. NETCONF is the correct choice because it is a standardized network configuration protocol that allows automated systems to retrieve operational data and push configuration changes securely. In this scenario, the system would use NETCONF to query interface status and then apply remediation configurations. SNMP can monitor but has limited configuration capabilities, CLI scripting is non-programmatic and error-prone, and Syslog is only for logging.

Answer

SNMP

Answer

CLI scripting

Answer

Syslog