350-601 Automation Practice Test 3 — 15 Questions

Question 1

Refer to the exhibit. A Python script using the Cisco ACI Cobra SDK fails with 'AuthenticationError'. Which of the following is the most likely cause?

Accepted Answer

The username or password is incorrect. The 'AuthenticationError' in the Cisco ACI Cobra SDK indicates that the APIC rejected the login credentials. This error is raised specifically when the username or password provided in the script's login method (e.g., 'Login('apic_url', 'username', 'password')') does not match a valid APIC local or AAA-authenticated user. The SDK performs an HTTP POST to the APIC's '/api/aaaLogin.json' endpoint, and a non-200 response with an authentication failure triggers this exception.

Answer

The APIC URL is incorrect

Answer

The user does not have API access

Answer

The script is missing required imports

Question 2

Refer to the exhibit. An Ansible playbook targeting an NX-OS switch fails with this error. What is the most likely cause?

Accepted Answer

The password is incorrect. The error message indicates an authentication failure during the SSH connection from Ansible to the NX-OS switch. Since Ansible uses SSH to execute tasks, a 'Permission denied' error most commonly points to incorrect credentials. The playbook likely specifies the wrong password for the given username, causing the SSH session to be rejected.

Answer

The username is incorrect

Answer

SSH is not enabled on the switch

Answer

The Ansible version is incompatible with the switch

Question 3

A network engineer is automating a repetitive configuration task on a Nexus 9000 switch using Python scripts with NX-API. The script sends a CLI command via POST request but receives HTTP 400 status with error 'Invalid request payload'. What is the most likely cause?

Accepted Answer

The JSON payload does not include the required 'ins_api' wrapper with version and type fields.. The NX-API on Nexus switches requires a JSON payload wrapped in an 'ins_api' object that includes fields such as 'version', 'type', 'chunk', 'sid', and 'input'. Omitting this wrapper or any required field results in HTTP 400 'Invalid request payload'. Option A correctly points out that the payload lacks the required 'ins_api' wrapper.

Answer

The switch is running an unsupported NX-OS version.

Answer

The script is using HTTP instead of HTTPS.

Answer

The CLI command syntax is incorrect with too many spaces.

Question 4

An organization is deploying Ansible for network automation across multiple Nexus 9000 leaf switches. They need to ensure that configuration tasks are idempotent and only apply changes when necessary. Which best practice should be followed when using the cisco.nxos.nxos_config module?

Accepted Answer

Use the 'replace' option with a provided configuration file to enforce desired state.. The 'replace' option in the cisco.nxos.nxos_config module allows you to provide a configuration file that defines the desired state, and the module will only apply changes if the current configuration does not match, ensuring idempotency. This is a best practice for network automation with Ansible on Nexus switches.

Answer

Write idempotent playbooks by checking 'show running-config' before each task.

Answer

Set 'always_run' parameter to 'yes' to force execution.

Answer

Use the 'backup' option to always restore previous configuration.

Question 5

What is the primary purpose of NX-API on Cisco Nexus switches in a data center automation context?

Accepted Answer

To provide a RESTful API that allows programmatic access to CLI commands and structured data output.. NX-API provides a RESTful API interface on Cisco Nexus switches, enabling programmatic access to CLI commands and returning structured data in formats like JSON or XML. This is essential for data center automation because it allows external tools (e.g., Ansible, Python scripts) to configure and retrieve state from the switch without requiring interactive CLI sessions, directly supporting infrastructure-as-code workflows.

Answer

To replace SNMP for monitoring and alerting.

Answer

To enable direct configuration from a web browser without CLI.

Answer

To create a web-based GUI for manual switch configuration.

Question 6

A Python script using the pyATS framework to parse 'show interface' output on a Nexus 9000 switch fails with a parsing error, even though the CLI command runs successfully. What is the most likely missing component?

Accepted Answer

The Genie parser for the specific NX-OS version is not installed or imported.. The pyATS framework relies on Genie parsers to convert raw CLI output into structured data. If the Genie parser for the specific NX-OS version is missing or not imported, the script cannot parse the 'show interface' output, resulting in a parsing error even though the CLI command itself runs successfully. This is the most likely missing component because pyATS/Genie parsers are version-specific and must be installed for the exact platform and OS version.

Answer

The script does not include the correct authentication method.

Answer

The script uses the wrong device type (e.g., iosxe instead of nxos).

Answer

The switch is not configured with NETCONF.

Question 7

A network team is planning to automate configuration management of a brownfield Nexus 9000 fabric using YANG data models and NETCONF. Which consideration is critical when implementing this solution?

Accepted Answer

The operational state must be modeled against the device-specific YANG model to avoid configuration drift.. In a brownfield Nexus 9000 fabric, the operational state (e.g., interface status, routing table) must be modeled against the device-specific YANG model to detect and correct configuration drift. NETCONF uses YANG models to define both configuration and operational data, but only the device-specific native model accurately reflects the actual running state. Without this alignment, automated remediation may push incorrect configurations, leading to network instability.

Answer

NETCONF replaces CLI entirely; no fallback necessary.

Answer

Using NETCONF for configuration ensures zero touch provisioning.

Answer

All NX-OS versions support the same YANG models; no compatibility check needed.

Question 8

Which tool provides a programmatic HTTP-based interface to execute CLI commands on Cisco Nexus switches and returns structured JSON data?

Accepted Answer

NX-API. NX-API (Option D) is the correct answer because it provides a programmatic HTTP/HTTPS-based interface that allows you to send CLI commands to Cisco Nexus switches and receive structured JSON (or XML) responses. This enables automation and integration without requiring an SSH session, directly fulfilling the question's requirement for an HTTP-based interface with structured JSON output.

Answer

Ansible

Answer

pyATS

Answer

Netmiko

Question 9

When using Cisco NSO (Network Services Orchestrator) to automate service creation across a data center network, what is a key consideration regarding device compatibility?

Accepted Answer

Each device must have a corresponding NED that matches its OS version.. B is correct because Cisco NSO uses Network Element Drivers (NEDs) to translate service models into device-specific CLI, SNMP, or NETCONF commands. Each NED is tied to a specific device OS version (e.g., IOS-XE 16.12, NX-OS 9.3), so mismatched NEDs cause configuration failures or incomplete deployments. Without a compatible NED, NSO cannot communicate with or configure the device.

Answer

NSO requires NETCONF for all devices.

Answer

Device YANG models must be hand-coded by the team.

Answer

NSO only supports Cisco devices.

Question 10

An Ansible playbook using the cisco.nxos.nxos_config module fails with the error: 'Unsupported parameters for (cisco.nxos.nxos_config) module: connection type setting'. What is the most likely cause?

Accepted Answer

The playbook includes an invalid parameter 'connection: network_cli' inside the task block.. The error 'Unsupported parameters for (cisco.nxos.nxos_config) module: connection type setting' occurs because the `connection: network_cli` parameter is being passed inside the task block of the playbook. The `cisco.nxos.nxos_config` module does not accept a `connection` parameter at the task level; connection settings must be defined at the play or inventory level. This is a common syntax error when using Ansible network modules.

Answer

The SSH key authentication is misconfigured.

Answer

The module is not installed correctly.

Answer

The playbook is targeting a device running an unsupported NX-OS version.

Question 11

What is a key advantage of using structured data (e.g., JSON or XML) from Cisco NX-API responses compared to traditional CLI scraping (e.g., using regular expressions)?

Accepted Answer

It provides machine-readable output that is less prone to parsing errors due to display changes.. Cisco NX-API returns structured data formats like JSON or XML, which are inherently machine-readable and consistent regardless of CLI display changes or software version updates. This eliminates the fragility of traditional CLI scraping with regular expressions, where output formatting changes (e.g., column widths, spacing, or label text) can break parsing logic. Structured data ensures reliable, predictable automation workflows.

Answer

It automatically commits changes to running-config.

Answer

It requires no software libraries to parse.

Answer

It eliminates the need for any authentication.

Question 12

Which TWO are benefits of using the Cisco NX-API for network automation compared to traditional SSH-based scripting?

Accepted Answer

Enables batching multiple CLI commands in a single HTTP request. The Cisco NX-API allows batching multiple CLI commands into a single HTTP request, which reduces the number of round trips and improves automation efficiency. This is a key advantage over traditional SSH-based scripting, where each command typically requires a separate connection or session.

Answer

Supports direct configuration of IPSec and SSL VPNs

Answer

Eliminates the need for any authentication

Answer

Allows for real-time streaming of syslog messages

Question 13

Which THREE components are required to successfully use NETCONF for configuration automation on a Nexus 9000 switch?

Accepted Answer

SSH connectivity must be established to the switch. B is correct because NETCONF operates over SSH as its transport protocol (RFC 6242), so SSH connectivity to the switch is mandatory for establishing the NETCONF session. Without SSH, the NETCONF client cannot connect to the NETCONF server running on the Nexus 9000.

Answer

The NX-API must be enabled as a fallback

Answer

The switch must be running the NX-OS Essentials license

Question 14

Which TWO statements are true regarding the differences between REST API (NX-API) and NETCONF for automating Nexus switches?

Accepted Answer

NX-API uses HTTP/HTTPS as the transport protocol. NX-API (REST API) uses HTTP or HTTPS as its transport protocol, allowing RESTful operations (GET, POST, PUT, DELETE) over standard web ports. This is in contrast to NETCONF, which uses SSH as its transport (RFC 6241). Therefore, option B is correct.

Answer

NETCONF can only be used for configuration, not for operational state

Answer

NETCONF primarily uses JSON for data encoding

Answer

Both use SSH as their default transport

Question 15

Refer to the exhibit. A Python script is processing the response from NX-API. It attempts to extract the interface state using `response['ins_api']['outputs']['output']['body']['ROW_interface']['state']` but receives a KeyError. What is the most likely reason?

Accepted Answer

The JSON structure has an extra level 'TABLE_interface' before 'ROW_interface'.. The NX-API response for interface commands includes a 'TABLE_interface' key that wraps the 'ROW_interface' key. The script attempts to access 'ROW_interface' directly under 'body', but the correct path is `response['ins_api']['outputs']['output']['body']['TABLE_interface']['ROW_interface']['state']`. Option B correctly identifies this missing intermediate level.

Answer

The 'output' key is a list, not a dictionary.

Answer

The 'ins_api' key is nested inside another object.

Answer

The 'body' key is missing because the command failed.