CCNA AI and Network Operations Practice Test 17 — 15 Questions

Question 1

Which option performs the RESTCONF operations correctly?

Accepted Answer

GET /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/0 with Accept: application/yang-data+json; then PATCH same URI with Content-Type: application/yang-data+json and body {"ietf-interfaces:interface":{"duplex":"full"}}; expect 204 No Content.. The correct base URI for RESTCONF is /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/0. The Accept header must be application/yang-data+json. If the Content-Type header is incorrect (e.g., application/json), the router will return a 415 Unsupported Media Type error. Using the wrong YANG module path, such as Cisco-IOS-XE-native:interface/GigabitEthernet0/0, will result in a 404 Not Found because the data model does not match. After a successful GET, the PATCH request must include the same URI with Content-Type: application/yang-data+json and a JSON body specifying "duplex": "full". The response should be a 204 No Content if successful.

Answer

GET /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/0 with Accept: application/json; then PATCH same URI with Content-Type: application/json and body {"duplex":"full"}; expect 204 No Content.

Answer

GET /restconf/data/Cisco-IOS-XE-native:interface/GigabitEthernet0/0 with Accept: application/yang-data+json; then PATCH same URI with Content-Type: application/yang-data+json and body {"Cisco-IOS-XE-native:interface":{"duplex":"full"}}; expect 204 No Content.

Answer

GET /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/0 with Accept: application/yang-data+json; then PATCH same URI with Content-Type: application/yang-data+json and body {"duplex":"full"}; expect 200 OK.

Question 2

You are connected to SW1, a Cisco switch that is experiencing intermittent connectivity issues. The network administrator suspects a duplex mismatch between SW1 and the connected router R1. Use CDP to verify the status and check interface statistics.

Accepted Answer

The switch port is set to half duplex, and the router is set to full duplex, causing CRC errors and late collisions.. The switch port is manually set to half duplex while the router likely negotiates to full duplex, causing a mismatch. CDP output from the switch will show the router's duplex as full. Interface statistics will show increasing CRC errors and late collisions. The solution is to set the switch port to auto-negotiation or match the duplex setting with the router.

Answer

The switch port is set to full duplex, and the router is set to half duplex, causing runts and FCS errors.

Answer

The switch port and router are both set to half duplex, but the cable is faulty, causing CRC errors.

Answer

The switch port is set to auto-negotiation, and the router is set to half duplex, causing late collisions.

Question 3

You are connected to the console of R1, a Cisco router that is part of a larger network. The network operations team uses Ansible to manage configurations. You need to write an Ansible playbook that configures an interface description on R1. The playbook should use the ios_config module.

Accepted Answer

---
- name: Configure interface description
  hosts: R1
  gather_facts: no
  tasks:
    - name: Add description to Gi0/0
      ios_config:
        lines:
          - description Link to Core
        parents: interface GigabitEthernet0/0. The playbook uses the ios_config module to add the description line under the interface configuration. The 'parents' parameter sets the context to 'interface GigabitEthernet0/0'. The playbook must be saved as a .yml file and run with ansible-playbook.

Answer

---
- name: Configure interface description
  hosts: R1
  gather_facts: no
  tasks:
    - name: Add description to Gi0/0
      ios_config:
        lines:
          - interface GigabitEthernet0/0
          - description Link to Core

Answer

---
- name: Configure interface description
  hosts: R1
  gather_facts: no
  tasks:
    - name: Add description to Gi0/0
      ios_command:
        commands:
          - configure terminal
          - interface GigabitEthernet0/0
          - description Link to Core

Answer

---
- name: Configure interface description
  hosts: R1
  gather_facts: no
  tasks:
    - name: Add description to Gi0/0
      ios_config:
        lines:
          - description Link to Core
        parents: GigabitEthernet0/0

Question 4

You are connected to R1 via the console. R1 is a Cisco ISR 4321 router running IOS-XE. The network team has recently changed the routing protocol from EIGRP to OSPF, but some routes are missing from the routing table. You need to analyze the OSPF neighbor states and LSDB to identify the issue.

Accepted Answer

Use 'show ip ospf neighbor' to check neighbor state; if not FULL, examine 'show ip ospf interface' for mismatched hello/dead intervals or network type.. When OSPF routes are missing, the first diagnostic step is to verify adjacency formation with 'show ip ospf neighbor'; a state other than FULL (e.g., EXSTART, EXCHANGE, or 2-WAY) points to a Layer 2/3 or parameter mismatch. The most common culprits are mismatched hello/dead intervals, area IDs, authentication, MTU, or network type, which are all visible via 'show ip ospf interface'. This methodical approach isolates whether the problem is adjacency or LSDB/route calculation.

Answer

Use 'show ip route ospf' to verify OSPF routes; if missing, re-enter the OSPF process and redistribute connected routes.

Answer

Use 'debug ip ospf events' to monitor OSPF packets; if no packets are seen, reconfigure OSPF router ID and clear the OSPF process.

Answer

Use 'show ip protocols' to verify OSPF process configuration; if incorrect, delete and recreate the OSPF process with the correct network statements.

Question 5

You are connected to the console of R1, a Cisco IOS-XE router. The network operations team needs to automate the backup of the running configuration to a TFTP server using a Python netmiko script. However, the script is failing. Your task is to write the correct netmiko commands to connect to R1 and save the configuration to the TFTP server at 192.168.1.100.

Accepted Answer

from netmiko import ConnectHandler

connection = ConnectHandler(device_type='cisco_ios', ip='192.168.1.1', username='admin', password='cisco')
connection.send_command('copy running-config tftp://192.168.1.100/r1-config', expect_string=r'$$confirm$$')
connection.send_command('\n')
connection.disconnect(). The 'copy running-config tftp://...' command in Cisco IOS prompts with '[confirm]'. To handle this interactively in netmiko, the expect_string must use a regular expression that matches the literal characters '[' and ']', which requires escaping them as '$$' and '$$'. The corrected script uses r'$$confirm$$' and then sends a newline to confirm, ensuring the backup completes. Options B and D fail to expect the prompt, and C uses an incorrect prompt match (expect_string=r'#' would only wait for the privileged EXEC prompt, missing the confirmation).

Answer

from netmiko import ConnectHandler

connection = ConnectHandler(device_type='cisco_ios', ip='192.168.1.1', username='admin', password='cisco')
connection.send_command('copy running-config tftp://192.168.1.100/r1-config')
connection.disconnect()

Answer

from netmiko import ConnectHandler

connection = ConnectHandler(device_type='cisco_ios', ip='192.168.1.1', username='admin', password='cisco')
connection.send_command('copy running-config tftp://192.168.1.100/r1-config', expect_string=r'#')

Answer

from netmiko import ConnectHandler

connection = ConnectHandler(device_type='cisco_ios', ip='192.168.1.1', username='admin', password='cisco')
connection.send_command('copy running-config tftp://192.168.1.100/r1-config
')
connection.disconnect()

Question 6

You are connected to R1 via the console. R1 is a Cisco IOS-XE router. The network manager wants to use an Ansible playbook to configure a loopback interface with IP address 10.0.0.1/24 on R1. You need to write the Ansible YAML playbook that connects to R1 and configures this interface. The playbook must not use the 'parents' argument in the ios_config module.

Accepted Answer

- name: Configure Loopback
  hosts: R1
  gather_facts: no
  connection: network_cli
  tasks:
    - name: Configure interface
      ios_config:
        lines:
          - interface Loopback0
          - ip address 10.0.0.1 255.255.255.0
          - no shutdown. It uses the network_cli connection type, applies the correct subnet mask (255.255.255.0), includes 'no shutdown' to enable the interface, and does not use the 'parents' argument, meeting the requirement. Option B is wrong because it uses an 'ssh' connection (not network_cli) and writes the IP address in CIDR notation (/24) instead of the required dotted-decimal mask. Option C is wrong because it uses 'shutdown' instead of 'no shutdown', which disables the interface. Option D is wrong because it uses the 'parents' argument, which the stem explicitly forbids, even though the configuration would otherwise be valid.

Answer

- name: Configure Loopback
  hosts: R1
  gather_facts: no
  connection: ssh
  tasks:
    - name: Configure interface
      ios_config:
        lines:
          - interface Loopback0
          - ip address 10.0.0.1/24
          - no shutdown

Answer

- name: Configure Loopback
  hosts: R1
  gather_facts: no
  connection: network_cli
  tasks:
    - name: Configure interface
      ios_config:
        lines:
          - interface Loopback0
          - ip address 10.0.0.1 255.255.255.0
          - shutdown

Answer

- name: Configure Loopback
  hosts: R1
  gather_facts: no
  connection: network_cli
  tasks:
    - name: Configure interface
      ios_config:
        lines:
          - interface Loopback0
          - ip address 10.0.0.1 255.255.255.0
          - no shutdown
        parents: interface Loopback0

Question 7

Which three options best describe how machine learning models are trained for network anomaly detection? (Choose three.)

Accepted Answer

Applying unsupervised clustering to identify deviations without predefined labels. Machine learning models for network anomaly detection are effectively trained using historical baseline traffic data to learn normal behavior patterns, which allows the model to identify deviations that may indicate anomalies. Labeled datasets with known attack signatures enable supervised learning, where the model learns to classify traffic as normal or malicious based on examples. Unsupervised clustering techniques, such as k-means or DBSCAN, can identify deviations without predefined labels by grouping similar data points and flagging outliers as potential anomalies. The three incorrect options—manual threshold configuration, training exclusively on synthetic data, and reliance on SNMP polling—are not characteristic of ML training methods. Manual threshold configuration is a rule‑based approach that does not involve learning from data. Training exclusively on synthetic data is not representative of real‑world traffic patterns and would not generalize well. Relying solely on SNMP polling intervals is a traditional monitoring method, not a machine learning technique.

Answer

Training exclusively on synthetic data generated by simulation tools

Answer

Requiring manual threshold configuration for every monitored metric

Answer

Relying solely on SNMP polling intervals to detect anomalies

Question 8

Which three of the following are benefits of integrating AI into network operations? (Choose three.)

Accepted Answer

Automated enforcement of security policies based on real-time risk analysis. AI reduces mean time to repair (MTTR) by rapidly diagnosing incidents through automated correlation of telemetry and logs. It improves capacity planning by analyzing traffic patterns and predicting future demands, enabling proactive scaling. Automated security policy enforcement uses real-time risk analysis to adjust rules dynamically. The three distractors are wrong because AI cannot guarantee complete elimination of network downtime (unexpected hardware failures still occur), zero configuration for new devices (initial setup and integration still require human input), or total removal of human engineers (AI augments but does not replace strategic oversight and complex problem-solving).

Answer

Zero configuration required for new network devices

Answer

Total removal of human network engineers from operations

Answer

Complete elimination of network downtime

Question 9

Which three statements accurately describe the role of Cisco's AI-powered security features (such as Cisco AI Network Analytics, Stealthwatch, or DNA Center's AI-Enhanced Analytics) in network security operations? (Choose three.)

Accepted Answer

AI models can detect zero-day exploits by analyzing behavioral anomalies. Cisco's AI-powered security features detect zero-day exploits by analyzing behavioral anomalies and deviations from learned baselines, without relying on signatures. These systems correlate logs from multiple Cisco products (e.g., firewalls, endpoints, cloud) to uncover multi-step attack chains. AI can also automate responses such as blocking malicious IPs via Cisco security controls, reducing mean time to respond (MTTR). However, AI complements but does not replace traditional security tools like firewall rules or ACLs, and it requires ongoing human oversight for validation and tuning.

Answer

AI is only effective against known, signature-based threats

Answer

AI security models require no human oversight once deployed

Answer

AI eliminates the need for firewall rules and access control lists

Question 10

Which three of the following are key benefits of integrating AI into network operations? (Choose three.)

Accepted Answer

Real-time traffic classification and policy enforcement using machine learning models. The three correct answers highlight practical AI benefits: anomaly detection correlates diverse telemetry (NetFlow, SNMP) to identify issues faster; real-time traffic classification uses ML models for dynamic policy enforcement without manual rule updates; predictive maintenance analyzes historical data to forecast failures, enabling proactive intervention. The wrong options are unrealistic: AI cannot eliminate all human administrators (complex troubleshooting still needs humans), cannot guarantee 100% uptime (failures still occur), and cannot automatically reconfigure physical cabling (that requires physical access).

Answer

Guaranteed 100% network uptime through self-healing algorithms

Answer

Automatic reconfiguration of physical cabling without manual intervention

Answer

Complete elimination of the need for human network administrators

Question 11

Which three statements accurately describe the role of AI in software-defined networking (SDN) and intent-based networking (IBN)? (Choose three.)

Accepted Answer

IBN systems may use AI to verify that the current network state matches the desired intent. AI enhances SDN and IBN by analyzing network state to suggest or enforce configuration changes that align with business intent, verifying that the current state matches the desired intent, and translating high-level policies into low-level device configurations. These capabilities enable automation, continuous validation, and policy-driven operations. The incorrect options are wrong because: (1) SDN controllers do not replace AI; AI can augment decision-making beyond basic controller logic. (2) AI in SDN is used for security, compliance, and many other areas, not just traffic engineering. (3) Intent-based networking relies on monitoring and feedback loops to maintain alignment with intent; it does not eliminate them.

Answer

SDN controllers replace AI for all decision-making, making AI unnecessary in IBN

Answer

AI in SDN is only used for traffic engineering, not for security or compliance

Answer

Intent-based networking eliminates the need for any monitoring or feedback loops

Question 12

Which TWO statements about network automation tools are true?

Accepted Answer

Ansible uses an agentless architecture and communicates with network devices over SSH by default.. Ansible is agentless, meaning it does not require any software installed on managed network devices. It connects to devices over SSH by default (or API for some platforms) and pushes configuration modules directly, making it lightweight and easy to deploy in network environments.

Answer

Puppet and Chef both use a push-based model where the master server initiates configuration changes on managed nodes.

Answer

Chef playbooks are written in YAML, while Ansible uses a Ruby-based DSL for defining desired state.

Answer

Ansible requires an agent to be installed on managed network devices, while Puppet does not.

Question 13

Which TWO of the following statements correctly describe REST API operations?

Accepted Answer

API keys and OAuth tokens are common methods for authenticating REST API requests.. Option C is correct because REST APIs typically authenticate requests using credentials such as API keys (often sent in an Authorization or custom header) or OAuth 2.0 bearer tokens, which are standard mechanisms for identifying and authorizing clients. Option E is correct because REST relies on HTTP semantics, and servers return status codes like 200 OK, 201 Created, 400 Bad Request, 401 Unauthorized, 404 Not Found, and 500 Internal Server Error to indicate the outcome of an operation. Option A is wrong because PUT is used to create or replace a resource, whereas retrieval is performed with GET. Option B is wrong because REST APIs can exchange data in multiple formats, including JSON, XML, YAML, and plain text, depending on content negotiation. Option D is wrong because DELETE maps to the Delete operation in CRUD, while Update corresponds to PUT or PATCH.

Answer

The HTTP PUT method is used to retrieve a resource representation.

Answer

JSON is the only data format supported by REST APIs.

Answer

The HTTP DELETE method corresponds to the Update operation in CRUD.

Question 14

Drag and drop the following steps into the correct order to select and implement a network automation solution using the appropriate tool based on the use cases and differences between Puppet, Chef, Ansible, and Python.

Accepted Answer

Define the network automation goal and the type of configuration changes required.. The correct order follows a systematic approach: First, define the specific network automation goal to understand the scope and constraints. Next, evaluate whether a persistent, agent-based configuration enforcement approach (Puppet/Chef) or an agentless, orchestration-driven approach (Ansible) is required. Then consider the flexibility of a scripting language like Python for custom or one-off tasks. After selecting the tool, write the automation logic (playbook, manifest, or script). Test it in a controlled environment to avoid production issues, and finally deploy and verify the automation to ensure it meets the intended outcome.

Question 15

Drag and drop the following steps into the correct order to retrieve the operational status of interface GigabitEthernet0/0 using NETCONF and the ietf-interfaces YANG model.

Accepted Answer

Establish an SSH connection to the network device on TCP port 830, the standard NETCONF port.. First, establish an SSH connection to the device's NETCONF subsystem (TCP port 830). The NETCONF protocol then performs a capability exchange via messages to ensure both sides support the required YANG models. Next, a RPC with an XPath filter is sent to request the specific interface status. The server replies with containing the XML data. The client parses the XML to extract the desired value. Finally, the NETCONF session is closed by a RPC, and the SSH connection is terminated. This order ensures a proper NETCONF transaction lifecycle.

CCNA AI and Network Operations Practice Test 17 — 15 Questions

Exhibit

CCNA AI and Network Operations Practice Test 17 — 15 Questions

Exhibit