CCNP Ansible Automation Practice Test 2 — 15 Questions

Question 1

An Ansible playbook uses the uri module to make a REST API call to Cisco DNA Center:

---
- hosts: localhost
  gather_facts: no
  tasks:
    - name: Get devices
      uri:
        url: "https://dna-center/api/v1/network-device"
        method: GET
        headers:
          X-Auth-Token: "{{ token }}"
        return_content: yes
      register: result

- debug:
        var: result.json

What is missing from this playbook?

Accepted Answer

The playbook is missing a task to authenticate and obtain the X-Auth-Token before making the API call.. The playbook does not include a task to obtain the authentication token. The token variable is used but never defined. The correct answer identifies the missing authentication step.

Answer

The playbook will work if the token is defined in the inventory file.

Answer

The playbook should use the 'cisco.dnac' collection instead of the uri module.

Answer

The playbook is missing the 'validate_certs: no' parameter to ignore SSL errors.

Question 2

A telemetry subscription is configured on a Cisco IOS-XE device using gRPC dial-out:

telemetry ietf subscription 101
 encoding encode-kvgpb
 filter xpath /interfaces/interface/statistics
 stream yang-push
 update-policy periodic 500
 receiver ip address 10.10.10.10 50001 protocol grpc-tcp

What does this configuration do?

Accepted Answer

It sends interface statistics every 500 seconds to the receiver at 10.10.10.10 port 50001 using gRPC.. The subscription pushes interface statistics every 500 seconds to a receiver at 10.10.10.10:50001 using gRPC over TCP. The correct answer correctly describes the behavior.

Answer

It sends interface statistics every 500 milliseconds to the receiver using gRPC.

Answer

It sends configuration changes for interfaces to the receiver using gRPC.

Answer

It sends interface statistics only when there is a change, using a push model.

Question 3

A Python script uses the requests library to interact with Cisco DNA Center's REST API:

import requests

url = "https://dna-center/api/v1/network-device"
headers = {
    "X-Auth-Token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."
}

response = requests.get(url, headers=headers, verify=False)
print(response.json())

What is a security concern with this script?

Accepted Answer

The script disables SSL certificate verification, making it vulnerable to man-in-the-middle attacks.. The script disables SSL certificate verification with verify=False, which makes it vulnerable to man-in-the-middle attacks. The correct answer identifies this security issue.

Answer

The script uses a hardcoded token, which is a security risk.

Answer

The script does not handle HTTP errors, which could expose sensitive information.

Answer

The script uses an incorrect URL; the path should be /dna/intent/api/v1/network-device.

Question 4

Given the following Ansible playbook snippet:
---
- name: Configure interface
  hosts: routers
  gather_facts: no
  tasks:
    - name: Set IP address
      ios_config:
        lines:
          - ip address 192.168.1.1 255.255.255.0
          - no shutdown
        parents: interface GigabitEthernet0/1
What is the effect of this playbook?

Accepted Answer

It configures IP address 192.168.1.1/24 on interface GigabitEthernet0/1 and enables it.. The playbook uses the ios_config module to push configuration lines to a Cisco IOS device. The 'parents' parameter specifies the parent configuration mode (interface GigabitEthernet0/1), so the lines are applied under that interface. The lines configure an IP address and enable the interface.

Answer

It configures the IP address globally, not under the interface.

Answer

It only configures the IP address; no shutdown is ignored because it is not a valid command.

Answer

It fails because 'parents' cannot be used with 'lines' in ios_config.

Question 5

Given the following Ansible playbook snippet:
---
- name: Configure VLAN
  hosts: switches
  gather_facts: no
  tasks:
    - name: Create VLAN 100
      ios_vlan:
        vlan_id: 100
        name: Engineering
        state: present
Which statement is true about this playbook?

Accepted Answer

It creates VLAN 100 with name Engineering if it does not exist.. The ios_vlan module is used to manage VLANs on Cisco IOS switches. The 'state: present' ensures the VLAN exists. The module will create VLAN 100 with the name 'Engineering' if it does not already exist.

Answer

It only checks if VLAN 100 exists and reports its status.

Answer

It deletes VLAN 100 if it exists.

Answer

It fails because 'name' is not a valid parameter for ios_vlan.

Question 6

Given the following Ansible playbook snippet:
---
- name: Backup running config
  hosts: routers
  gather_facts: no
  tasks:
    - name: Save config
      ios_config:
        backup: yes
        backup_options:
          dir_path: /backup/
What is the purpose of the 'backup_options' parameter?

Accepted Answer

It specifies the directory where the backup file will be saved.. The 'backup_options' parameter in ios_config allows specifying a custom directory path for the backup file. Without it, the backup is saved in the playbook's directory with a timestamped filename.

Answer

It specifies the filename for the backup.

Answer

It enables compression of the backup file.

Answer

It is ignored because backup: yes is already set.

Question 7

Given the following Ansible playbook snippet:
---
- name: Configure OSPF
  hosts: routers
  gather_facts: no
  tasks:
    - name: OSPF config
      ios_config:
        lines:
          - router ospf 1
          - network 10.0.0.0 0.255.255.255 area 0
        parents: router ospf 1
What is wrong with this playbook?

Accepted Answer

The 'parents' parameter should not be used with 'router ospf 1' in lines; it causes a configuration error.. The playbook attempts to enter OSPF router configuration mode by using 'parents: router ospf 1', but the 'lines' also include 'router ospf 1' which would try to enter the mode again from within the mode, causing an error. The correct approach is to either use 'parents' or include the router command in 'lines', but not both.

Answer

The network statement uses a wildcard mask instead of subnet mask, which is incorrect.

Answer

The OSPF process ID must be 1, but it can be any number.

Answer

There is no error; the playbook works correctly.

Question 8

Given the following Ansible playbook snippet:
---
- name: Configure EIGRP
  hosts: routers
  gather_facts: no
  tasks:
    - name: EIGRP config
      ios_config:
        lines:
          - router eigrp 100
          - network 192.168.1.0
        parents: router eigrp 100
What is the effect of this playbook?

Accepted Answer

It fails because the network statement requires a wildcard mask.. Similar to the previous question, this playbook has a redundancy issue. The 'parents' parameter enters EIGRP router configuration mode, and the 'lines' include 'router eigrp 100' again, which would cause an error. Additionally, EIGRP network statements require a wildcard mask; without it, the command is incomplete.

Answer

It configures EIGRP AS 100 and advertises network 192.168.1.0/24.

Answer

It only enters EIGRP configuration mode without applying any network statement.

Answer

It works correctly because the network statement defaults to a classful mask.

Question 9

Given the following Ansible playbook snippet:
---
- name: Configure SNMP
  hosts: routers
  gather_facts: no
  tasks:
    - name: SNMP community
      ios_config:
        lines:
          - snmp-server community public RO
What is the result of this playbook?

Accepted Answer

It configures an SNMP community string 'public' with read-only access.. The playbook uses ios_config to add a line globally. The command 'snmp-server community public RO' configures an SNMP community string 'public' with read-only access. This is a valid global configuration command.

Answer

It fails because 'RO' is not a valid keyword; it should be 'read-only'.

Answer

It configures the community string only for SNMPv3.

Answer

It removes any existing SNMP community strings.

Question 10

What is the default OSPF hello interval on an Ethernet link?

Accepted Answer

10 seconds. OSPF uses different hello intervals depending on the network type. For broadcast networks like Ethernet, the default hello interval is 10 seconds.

Answer

30 seconds

Answer

40 seconds

Answer

5 seconds

Question 11

Which BGP attribute is preferred with the lowest value?

Accepted Answer

MULTI_EXIT_DISC (MED). In BGP path selection, the LOCAL_PREF attribute is used to prefer paths within an AS. A higher LOCAL_PREF is preferred, but the question asks for the attribute preferred with the lowest value. The WEIGHT attribute is Cisco-specific and is preferred with the highest value. The MULTI_EXIT_DISC (MED) attribute is preferred with the lowest value.

Answer

LOCAL_PREF

Answer

AS_PATH

Answer

WEIGHT

Question 12

What is the maximum hop count for EIGRP?

Accepted Answer

255. EIGRP uses a metric based on bandwidth and delay, but it also has a hop count limit. The maximum hop count for EIGRP is 255, though the default is 100.

Answer

100

Answer

15

Answer

16

Question 13

Drag and drop the steps of Ansible playbook execution flow into the correct order, from first to last.

Accepted Answer

Parse inventory file to determine target hosts. Ansible playbook execution begins with inventory parsing to identify target hosts, then loads variables from group_vars/host_vars. Next, it gathers facts from the managed nodes, applies tasks from the playbook in order, and finally runs post-task handlers if notified.

Question 14

Drag and drop the steps of creating and applying an Ansible role for network device configuration into the correct order, from first to last.

Accepted Answer

Create role directory structure with subdirectories. First, define the role structure with defaults, vars, tasks, and handlers. Then, write the tasks in main.yml to configure interfaces. Next, set default variables in defaults/main.yml. After that, create a playbook that references the role. Finally, execute the playbook against the target inventory.

Question 15

Drag and drop the steps of using Ansible to push a new VLAN configuration to a Cisco IOS switch into the correct order, from first to last.

Accepted Answer

Define VLAN variables in group_vars file. First, define the VLAN ID and name in a variable file. Then, write a playbook task using ios_vlan module. Next, specify the connection parameters (ansible_network_os, ansible_user, etc.) in the inventory. After that, run the playbook to apply the configuration. Finally, verify the VLAN on the switch using show vlan.