CCNA AI and Network Operations Practice Test 5 — 15 Questions

Question 1

Match each data format or model with the best description.

Accepted Answer

JSON: Lightweight data interchange format using key-value pairs. JSON is a lightweight data interchange format that uses key-value pairs and arrays. XML is a markup language that defines rules for encoding documents using tags. CSV is a simple file format that uses commas to separate values. YAML is a human-readable data serialization standard that uses indentation to structure data.

Question 2

Match each HTTP method to the most common API action.

Accepted Answer

GET: Retrieve a resource. Each HTTP method has a standard CRUD mapping in RESTful APIs. GET is used for retrieving resources, POST for creating, PUT for updating/replacing, and DELETE for removing. These mappings ensure consistent and predictable API behavior.

Question 3

Which TWO of the following are core applications of AI and ML in network operations as described in CCNA 200-301 v2.0 objective 5.1?

Accepted Answer

Using machine learning to detect unusual traffic patterns that may indicate a security threat or network fault.. CCNA 200-301 v2.0 objective 5.1 states 'Explain the role of AI and ML in network operations' and does not provide an exhaustive list of specific applications. Among the choices, anomaly detection (A) and intent-based networking (D) are widely recognized core applications, but the question should not claim the objective itself limits the list to only these two.

Answer

Using historical data and ML models to forecast future network traffic loads and capacity requirements.

Answer

Automatically generating network configuration scripts using natural language processing.

Answer

Using reinforcement learning to optimize routing protocol metrics in real time.

Question 4

Drag and drop the AI/ML concepts on the left to the correct descriptions on the right.

Accepted Answer

Machine Learning: A subset of AI where systems learn from data without explicit programming.. All four options correctly define their respective AI/ML concepts. Machine Learning is a subset of AI that learns from data without explicit programming; Deep Learning uses neural networks with multiple layers; Neural Networks are brain-inspired models used in deep learning; Artificial Intelligence is the simulation of human intelligence. Thus the correct matching includes all options, not just A.

Question 5

Drag and drop the AI/automation concepts on the left to the correct descriptions on the right.

Accepted Answer

Machine learning is a broad subset of AI. Deep learning uses multi-layer neural networks. NLP deals with human language. Computer Vision interprets visual data. Reinforcement learning uses rewards. Supervised learning uses labeled data.. It accurately pairs each AI/automation concept with its definition: Machine Learning is a broad subset of AI that enables learning from data; Deep Learning uses multi-layer neural networks; Natural Language Processing (NLP) deals with human language; Computer Vision interprets visual data; Reinforcement Learning uses rewards to train agents; and Supervised Learning uses labeled data. The other options contain mismatches, such as confusing the hierarchy of ML and deep learning, or swapping the tasks of NLP and computer vision, or incorrectly assigning the use of rewards to supervised learning.

Answer

Machine learning uses multi-layer neural networks. Deep learning is a broad subset of AI. NLP interprets visual data. Computer Vision deals with human language. Reinforcement learning uses labeled data. Supervised learning uses rewards.

Answer

Machine learning uses rewards. Deep learning uses labeled data. NLP is a broad subset of AI. Computer Vision uses multi-layer neural networks. Reinforcement learning deals with human language. Supervised learning interprets visual data.

Answer

Machine learning interprets visual data. Deep learning deals with human language. NLP uses multi-layer neural networks. Computer Vision uses rewards. Reinforcement learning uses labeled data. Supervised learning is a broad subset of AI.

Question 6

Drag and drop the syslog and NTP items on the left to the correct descriptions on the right.

Accepted Answer

Syslog facility: Identifies the type of system or process that generated the log message. Each item is correctly paired with its description: A identifies the syslog facility (the source of the log), B indicates syslog severity (urgency level), C correctly describes an NTP server (time source), and D correctly describes an NTP client (time requester). These are foundational definitions for syslog and NTP operations.

Question 7

Drag and drop the monitoring protocols and features on the left to their correct descriptions on the right.

Accepted Answer

SNMP - Used to collect and organize information about managed devices on IP networks. In this drag-and-drop matching exercise, both A and D are correct. SNMP collects and organizes device information, and SPAN mirrors traffic from source ports to a destination port for analysis. NetFlow does not provide packet-level inspection, and Syslog is not for configuration backups.

Answer

NetFlow - Provides real-time traffic analysis and packet-level inspection

Answer

Syslog - Used to collect and store network device configuration backups

Question 8

Drag and drop the network monitoring technologies on the left to their correct descriptions on the right.

Accepted Answer

SNMP: Protocol for collecting and organizing information about managed devices on IP networks. All four pairings are correct. SNMP is a protocol used to collect and organize information about managed devices on IP networks using a management information base (MIB). NetFlow is a Cisco-developed protocol that collects IP traffic information, recording metadata about flows for analysis. Syslog is a standard for message logging, enabling separation of log message generation from storage and analysis. Packet capture involves intercepting and logging traffic passing over a network, often using tools like tcpdump or Wireshark. Each technology has a distinct function, and these descriptions match them accurately.

Question 9

Drag and drop the YANG, NETCONF, and RESTCONF terms on the left to their correct descriptions on the right.

Accepted Answer

YANG: A data modeling language used to define configuration and state data for network devices.. YANG is the modeling language, NETCONF uses XML RPCs over SSH, RESTCONF uses HTTP and YANG models. The pairs match each term to its core function.

Answer

YANG data model: A hierarchical schema that defines the structure and constraints of network configuration data.

Question 10

Drag and drop the following steps into the correct order to implement an AI/ML-based network operations workflow for proactive anomaly detection and automated remediation on a Cisco IOS-XE device.

Accepted Answer

Data Collection. The correct order for implementing an AI/ML-based network operations workflow for proactive anomaly detection and automated remediation is: First, Data Collection (step 1), then Data Streaming (step 2) to send collected data for real-time processing, followed by Model Training (step 3) to develop the anomaly detection model using the streamed data, and finally Automated Remediation (step 4) to act on detected anomalies. This sequence ensures that data is available before streaming, streaming feeds the model training, and the trained model enables automated remediation.

Question 11

Drag and drop the following steps into the correct order to sequence the actions an automation system performs when automating the remediation of a network configuration drift detected via NETCONF/YANG.

Accepted Answer

Detect drift via NETCONF/YANG monitoring. The correct sequence for automated remediation of network configuration drift is: detect drift via NETCONF/YANG monitoring (A), analyze drift and plan remediation (B), execute remediation via NETCONF/YANG (C), and verify remediation success via NETCONF/YANG (D). This logical order ensures that drift is first identified, then assessed before action, followed by the remediation, and finally confirmation that the change was successful.

Question 12

Drag and drop the following steps into the correct order for an agentic AI system that receives a network intent, decomposes it into sub-tasks, calls tools, validates output, and applies closed-loop remediation.

Accepted Answer

Receive network intent. The correct order for an agentic AI system is: first receive the network intent, then decompose it into sub-tasks, next call tools to execute those sub-tasks, and finally validate the output and apply closed-loop remediation. This sequence ensures a logical flow from understanding the goal to automated correction.

Answer

Decompose intent into sub-tasks

Answer

Call tools to execute sub-tasks

Answer

Validate output and apply closed-loop remediation

Question 13

Drag and drop the following steps into the correct order to configure an IOS-XE device as an NTP client and ensure its syslog messages are sent to a remote server with correct timestamps.

Accepted Answer

Enter global configuration mode, configure the NTP server, configure the logging host and source interface, then verify with show commands.. A valid configuration sequence must begin by entering global configuration mode, as NTP server and logging host settings are global configuration commands. Both options A and C start with 'Enter global configuration mode' and include all necessary steps: configuring the NTP server, logging host, and source interface, followed by verification. Options B and D are invalid because they attempt to configure logging or NTP before entering global configuration mode.

Answer

Configure the logging host first, then enter global configuration mode, set the NTP server, and verify.

Answer

Set the NTP server first, then verify, then enter global configuration mode, and configure logging.

Question 14

Drag and drop the following steps into the correct order to sequence NTP stratum hierarchy and configure an IOS-XE NTP client with syslog message processing from event to log server.

Accepted Answer

Stratum 0 (atomic clock) → Stratum 1 (primary server) → Stratum 2 (secondary server) → Configure NTP client with 'ntp server' command → Enable logging with 'logging buffered' or 'logging host' → Syslog messages timestamped with NTP time. The correct order is Option A: Stratum 0 (atomic clock) → Stratum 1 (primary server) → Stratum 2 (secondary server) → Configure NTP client with 'ntp server' command → Enable logging with 'logging buffered' or 'logging host' → Syslog messages timestamped with NTP time. Options B, C, and D are incorrect because they either reverse the stratum hierarchy (B and C) or place configuration before the hierarchy (D). NTP time flows from lower to higher stratum numbers, and NTP configuration must precede logging to ensure accurate timestamps.

Question 15

Drag and drop the following steps into the correct order to configure an IOS-XE device as an NTP client and set up syslog reporting of NTP events to a remote log server.

Accepted Answer

Enter global configuration mode, configure NTP server, configure logging host, enable logging of NTP events, verify.. The correct order is to first enter global configuration mode, then configure the NTP server to define the time source, then configure the logging host to specify the remote syslog server, then enable logging of NTP events so that NTP-related syslog messages are generated and sent to the configured host, and finally verify the configuration. This corresponds to option A. Option B is incorrect because configuring the logging host before the NTP server would attempt to send logs before time synchronization is set up. Option C is incorrect because enabling NTP event logging before configuring both the NTP server and the logging host means there is no NTP server to generate events and no logging destination to send them to. Option D is incorrect because enabling logging of NTP events before configuring the logging host would cause generated messages to be dropped if the logging host is not yet set; the logging host must be configured before enabling NTP event logging. Therefore, only option A is correct.