CCNP Practice Test 49 — 15 Questions

Question 1

A REST API call is made to Cisco DNA Center to get the list of network devices:

GET /dna/intent/api/v1/network-device
Headers:
  X-Auth-Token: <token>

The response is:

{
  "response": [
    {
      "id": "123456",
      "managementIpAddress": "10.10.10.1",
      "platformId": "C9300-24P",
      "role": "ACCESS"
    }
  ],
  "version": "1.0"
}

What does this response indicate?

Accepted Answer

The response contains a single device with management IP 10.10.10.1 and role ACCESS.. The response shows a list of devices; each device has an id, management IP, platform ID, and role. The correct answer correctly interprets the JSON structure.

Answer

The response indicates an error because the 'version' field is missing a value.

Answer

The response contains multiple devices, but only one is shown due to pagination.

Answer

The response requires authentication because the token is missing.

Question 2

An Ansible playbook uses the cisco.nxos.nxos_config module to configure a Nexus switch:

---
- hosts: nxos_switches
  gather_facts: no
  connection: network_cli
  tasks:
    - name: Configure VLAN
      cisco.nxos.nxos_config:
        lines:
          - vlan 100
          - name Test_VLAN
        parents: vlan 100

What will be the result of this playbook?

Accepted Answer

The playbook will fail because the 'parents' parameter cannot be the same as the lines.. The playbook attempts to configure VLAN 100 with a name. However, the 'parents' parameter is incorrectly set to 'vlan 100', which is the same as the lines being configured. This can cause idempotency issues or errors because the module may try to enter the same configuration mode again. The correct answer identifies this logical error.

Answer

The playbook will successfully create VLAN 100 and set its name to Test_VLAN.

Answer

The playbook will fail because 'cisco.nxos.nxos_config' does not support VLAN configuration.

Answer

The playbook will work but only if the Nexus switch runs NX-OS 7.0 or later.

Question 3

A telemetry subscription is configured on a Cisco IOS-XE device using gRPC dial-out:

telemetry ietf subscription 101
 encoding encode-kvgpb
 filter xpath /interfaces/interface/statistics
 stream yang-push
 update-policy periodic 500
 receiver ip address 10.10.10.10 50001 protocol grpc-tcp

What does this configuration do?

Accepted Answer

It sends interface statistics every 500 seconds to the receiver at 10.10.10.10 port 50001 using gRPC.. The subscription pushes interface statistics every 500 seconds to a receiver at 10.10.10.10:50001 using gRPC over TCP. The correct answer correctly describes the behavior.

Answer

It sends interface statistics every 500 milliseconds to the receiver using gRPC.

Answer

It sends configuration changes for interfaces to the receiver using gRPC.

Answer

It sends interface statistics only when there is a change, using a push model.

Question 4

A Python script uses NAPALM to retrieve the ARP table from a Cisco IOS-XE device:

from napalm import get_network_driver

driver = get_network_driver('ios')
device = driver('192.168.1.1', 'admin', 'cisco')
device.open()
arp_table = device.get_arp_table()
print(arp_table)
device.close()

What is the issue with this script?

Accepted Answer

The script will fail because the driver name 'ios' is incorrect; it should be 'iosxe' for IOS-XE devices.. The NAPALM driver for IOS-XE is 'ios' but the correct driver for IOS-XE is 'iosxe'. Using 'ios' may work for some devices but is deprecated. The correct answer identifies the driver name mismatch.

Answer

The script will work correctly because 'ios' is the correct driver for all Cisco IOS devices.

Answer

The script will fail because the 'get_arp_table()' method requires an argument.

Answer

The script will work but only if the device is running IOS-XE 16.12 or later.

Question 5

An Ansible playbook uses the uri module to make a REST API call to Cisco DNA Center:

---
- hosts: localhost
  gather_facts: no
  tasks:
    - name: Get devices
      uri:
        url: "https://dna-center/api/v1/network-device"
        method: GET
        headers:
          X-Auth-Token: "{{ token }}"
        return_content: yes
      register: result

- debug:
        var: result.json

What is missing from this playbook?

Accepted Answer

The playbook is missing a task to authenticate and obtain the X-Auth-Token before making the API call.. The playbook does not include a task to obtain the authentication token. The token variable is used but never defined. The correct answer identifies the missing authentication step.

Answer

The playbook will work if the token is defined in the inventory file.

Answer

The playbook should use the 'cisco.dnac' collection instead of the uri module.

Answer

The playbook is missing the 'validate_certs: no' parameter to ignore SSL errors.

Question 6

Given the following Ansible playbook snippet:
---
- name: Backup running config
  hosts: routers
  gather_facts: no
  tasks:
    - name: Save config
      ios_config:
        backup: yes
        backup_options:
          dir_path: /backup/
What is the purpose of the 'backup_options' parameter?

Accepted Answer

It specifies the directory where the backup file will be saved.. The 'backup_options' parameter in ios_config allows specifying a custom directory path for the backup file. Without it, the backup is saved in the playbook's directory with a timestamped filename.

Answer

It specifies the filename for the backup.

Answer

It enables compression of the backup file.

Answer

It is ignored because backup: yes is already set.

Question 7

What is the default OSPF hello interval on an Ethernet link?

Accepted Answer

10 seconds. OSPF uses different hello intervals depending on the network type. For broadcast networks like Ethernet, the default hello interval is 10 seconds.

Answer

30 seconds

Answer

40 seconds

Answer

5 seconds

Question 8

Drag and drop the steps of using Ansible to push a new VLAN configuration to a Cisco IOS switch into the correct order, from first to last.

Accepted Answer

Define VLAN variables in group_vars file. First, define the VLAN ID and name in a variable file. Then, write a playbook task using ios_vlan module. Next, specify the connection parameters (ansible_network_os, ansible_user, etc.) in the inventory. After that, run the playbook to apply the configuration. Finally, verify the VLAN on the switch using show vlan.

Question 9

A Python script uses the requests library to interact with Cisco DNA Center's REST API:

import requests

url = "https://dna-center/api/v1/network-device"
headers = {
    "X-Auth-Token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."
}

response = requests.get(url, headers=headers, verify=False)
print(response.json())

What is a security concern with this script?

Accepted Answer

The script disables SSL certificate verification, making it vulnerable to man-in-the-middle attacks.. The script disables SSL certificate verification with verify=False, which makes it vulnerable to man-in-the-middle attacks. The correct answer identifies this security issue.

Answer

The script uses a hardcoded token, which is a security risk.

Answer

The script does not handle HTTP errors, which could expose sensitive information.

Answer

The script uses an incorrect URL; the path should be /dna/intent/api/v1/network-device.

Question 10

Given the following Ansible playbook snippet:
---
- name: Configure interface
  hosts: routers
  gather_facts: no
  tasks:
    - name: Set IP address
      ios_config:
        lines:
          - ip address 192.168.1.1 255.255.255.0
          - no shutdown
        parents: interface GigabitEthernet0/1
What is the effect of this playbook?

Accepted Answer

It configures IP address 192.168.1.1/24 on interface GigabitEthernet0/1 and enables it.. The playbook uses the ios_config module to push configuration lines to a Cisco IOS device. The 'parents' parameter specifies the parent configuration mode (interface GigabitEthernet0/1), so the lines are applied under that interface. The lines configure an IP address and enable the interface.

Answer

It configures the IP address globally, not under the interface.

Answer

It only configures the IP address; no shutdown is ignored because it is not a valid command.

Answer

It fails because 'parents' cannot be used with 'lines' in ios_config.

Question 11

Given the following Ansible playbook snippet:
---
- name: Configure EIGRP
  hosts: routers
  gather_facts: no
  tasks:
    - name: EIGRP config
      ios_config:
        lines:
          - router eigrp 100
          - network 192.168.1.0
        parents: router eigrp 100
What is the effect of this playbook?

Accepted Answer

It fails because the network statement requires a wildcard mask.. Similar to the previous question, this playbook has a redundancy issue. The 'parents' parameter enters EIGRP router configuration mode, and the 'lines' include 'router eigrp 100' again, which would cause an error. Additionally, EIGRP network statements require a wildcard mask; without it, the command is incomplete.

Answer

It configures EIGRP AS 100 and advertises network 192.168.1.0/24.

Answer

It only enters EIGRP configuration mode without applying any network statement.

Answer

It works correctly because the network statement defaults to a classful mask.

Question 12

Given the following Ansible playbook snippet:
---
- name: Configure VLAN
  hosts: switches
  gather_facts: no
  tasks:
    - name: Create VLAN 100
      ios_vlan:
        vlan_id: 100
        name: Engineering
        state: present
Which statement is true about this playbook?

Accepted Answer

It creates VLAN 100 with name Engineering if it does not exist.. The ios_vlan module is used to manage VLANs on Cisco IOS switches. The 'state: present' ensures the VLAN exists. The module will create VLAN 100 with the name 'Engineering' if it does not already exist.

Answer

It only checks if VLAN 100 exists and reports its status.

Answer

It deletes VLAN 100 if it exists.

Answer

It fails because 'name' is not a valid parameter for ios_vlan.

Question 13

Given the following Ansible playbook snippet:
---
- name: Configure OSPF
  hosts: routers
  gather_facts: no
  tasks:
    - name: OSPF config
      ios_config:
        lines:
          - router ospf 1
          - network 10.0.0.0 0.255.255.255 area 0
        parents: router ospf 1
What is wrong with this playbook?

Accepted Answer

The 'parents' parameter should not be used with 'router ospf 1' in lines; it causes a configuration error.. The playbook attempts to enter OSPF router configuration mode by using 'parents: router ospf 1', but the 'lines' also include 'router ospf 1' which would try to enter the mode again from within the mode, causing an error. The correct approach is to either use 'parents' or include the router command in 'lines', but not both.

Answer

The network statement uses a wildcard mask instead of subnet mask, which is incorrect.

Answer

The OSPF process ID must be 1, but it can be any number.

Answer

There is no error; the playbook works correctly.

Question 14

Given the following Ansible playbook snippet:
---
- name: Configure SNMP
  hosts: routers
  gather_facts: no
  tasks:
    - name: SNMP community
      ios_config:
        lines:
          - snmp-server community public RO
What is the result of this playbook?

Accepted Answer

It configures an SNMP community string 'public' with read-only access.. The playbook uses ios_config to add a line globally. The command 'snmp-server community public RO' configures an SNMP community string 'public' with read-only access. This is a valid global configuration command.

Answer

It fails because 'RO' is not a valid keyword; it should be 'read-only'.

Answer

It configures the community string only for SNMPv3.

Answer

It removes any existing SNMP community strings.

Question 15

Drag and drop the steps of creating and applying an Ansible role for network device configuration into the correct order, from first to last.

Accepted Answer

Create role directory structure with subdirectories. First, define the role structure with defaults, vars, tasks, and handlers. Then, write the tasks in main.yml to configure interfaces. Next, set default variables in defaults/main.yml. After that, create a playbook that references the role. Finally, execute the playbook against the target inventory.