350-501 Automation and Assurance — All Questions With Answers

Question 1mediummultiple choice

Read the full REST/YANG explanation →

A service provider is implementing network automation using YANG data models. They need to ensure that the automation solution supports both configuration and operational state data retrieval. Which NETCONF operation should be used to retrieve operational state data?

Question 2easymultiple choice

Study the full Python automation breakdown →

Which tool is used to validate YANG data models against device capabilities and to generate Python bindings for automation scripts?

Question 3hardmultiple choice

Open the full BGP breakdown →

A network engineer is automating BGP configuration using the Cisco IOS-XE YANG model. They want to enable the 'always-compare-med' feature under BGP. Which XPath expression correctly targets this leaf?

Question 4mediummultiple choice

Read the full REST/YANG explanation →

A service provider uses RESTCONF to automate interface configuration. They need to add a new IPv4 address to an existing interface. Which HTTP method and URI should be used?

Question 5easymultiple choice

Read the full network assurance explanation →

What is the primary benefit of using model-driven telemetry over traditional SNMP polling for network assurance?

Question 6hardmultiple choice

Read the full network assurance explanation →

A network operator uses gRPC Network Management Interface (gNMI) to collect telemetry data from routers. They notice that some updates are missing. Which gNMI mode should be used to ensure that all state changes are captured?

Question 7mediummultiple choice

Read the full MPLS explanation →

A service provider is deploying a new automation framework using Ansible to configure MPLS VPNs. They need to ensure that the Ansible playbook can handle configuration rollback in case of failure. Which Ansible feature should be used?

Question 8hardmultiple choice

Read the full REST/YANG explanation →

A network engineer is troubleshooting a NETCONF session that fails to establish between a controller and a router. The router supports NETCONF over SSH on port 830. The controller can reach the router but the session fails. What is the most likely cause?

Question 9easymulti select

Read the full REST/YANG explanation →

Which TWO statements about YANG data models are true? (Choose two.)

Question 10mediummulti select

Read the full network assurance explanation →

Which THREE components are required for model-driven telemetry with gRPC? (Choose three.)

Question 11hardmulti select

Read the full Automation and Assurance explanation →

Which TWO statements about Cisco NSO (Network Services Orchestrator) are true? (Choose two.)

Question 12mediummultiple choice

Read the full MPLS explanation →

You are a network automation engineer for a large service provider. Your team is tasked with automating the provisioning of new MPLS L3VPN services across a multi-vendor environment (Cisco and Juniper). The automation framework uses Ansible with Jinja2 templates and NETCONF as the transport protocol. During a pilot deployment, the automation successfully configures the Cisco devices but fails on Juniper devices with a 'syntax error' when applying the generated XML configuration. The Jinja2 templates are designed to generate Cisco-style configuration. You need to modify the automation to support both vendors. Which approach is most effective?

Question 13hardmultiple choice

Open the full BGP breakdown →

You are responsible for network assurance for a Tier-1 ISP that has deployed model-driven telemetry using gNMI with ON_CHANGE subscriptions on all core routers. Recently, the NMS team reported that some BGP route flaps are not being captured in the telemetry data, even though the routers' syslogs show the flaps occurred. The telemetry subscription is for the path '/bgp/neighbors/neighbor/state/messages/received'. The NMS is using a gNMI collector that supports both ON_CHANGE and SAMPLE subscriptions. You suspect the issue is with the subscription configuration. Upon reviewing the router configuration, you see that the telemetry subscription uses the SAMPLE mode instead of ON_CHANGE. What is the most appropriate action to ensure all BGP route flap events are captured?

Question 14mediumdrag order

Review the full routing breakdown →

Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 15mediummatching

Study the full multicast explanation →

Match each multicast protocol to its role.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Host-to-router protocol for joining multicast groups

Sparse mode multicast routing using RP

Dense mode multicast routing assuming all routers want traffic

Protocol for connecting multiple PIM-SM domains

Bootstrap Router for automatic RP election

Question 16easymultiple choice

Study the full Python automation breakdown →

A network engineer wants to automate the backup of router configurations using Python and NETCONF. Which YANG model should the engineer use to access the running configuration?

Question 17easymultiple choice

Review the full routing breakdown →

A network engineer needs to automate configuration of multiple Cisco routers and wants to use a protocol that supports both datastore operations and selective retrieval of configuration. Which protocol should be used?

Question 18easymultiple choice

Read the full Automation and Assurance explanation →

An SP customer reports intermittent voice quality issues. The engineer wants to measure jitter and packet loss between two remote sites using Cisco IP SLA. Which IP SLA operation type should be configured?

Question 19easymultiple choice

Read the full network assurance explanation →

A service provider wants to stream interface counters from a Cisco router to a collector using model-driven telemetry. The collector is behind NAT and cannot be reached from the router. Which telemetry model should be used?

Question 20mediummultiple choice

Read the full REST/YANG explanation →

An engineer is using RESTCONF to configure an interface on a Cisco IOS-XE device. The request returns a 400 Bad Request error. What is the most likely cause?

Question 21mediummultiple choice

Read the full Ansible explanation →

A team uses Ansible to automate configuration of Cisco devices. They want to ensure that configurations are applied only if the device is reachable and the current configuration differs from the intended. Which Ansible module or feature is best suited for this?

Question 22mediummultiple choice

Read the full network assurance explanation →

An engineer configures model-driven telemetry on a Cisco XR router to send data to a collector. After configuring, the collector receives no data. The engineer verifies that the collector IP and port are reachable. What is the next step to troubleshoot?

Question 23hardmultiple choice

Read the full NAT/PAT explanation →

A large SP plans to deploy SR-TE tunnels across the backbone using an SDN controller for path computation. To ensure fast convergence and scalability, which automation approach should be used for tunnel creation?

Question 24hardmultiple choice

Read the full network assurance explanation →

A Cisco XR router is configured to stream telemetry via gRPC with TLS. The collector can connect but receives empty data. The telemetry configuration is as follows: sensor-group with 'openconfig-interfaces' paths. What is the likely cause?

Question 25hardmultiple choice

Read the full Automation and Assurance explanation →

When automating configuration changes across a large network using a tool like Cisco NSO, what is the best practice to minimize the risk of negative impact?

Question 26easymulti select

Read the full network assurance explanation →

Which TWO are benefits of model-driven telemetry over SNMP polling?

Question 27hardmulti select

Read the full REST/YANG explanation →

Which TWO are possible causes for a NETCONF session failing to establish with a Cisco IOS-XE device?

Question 28mediummulti select

Read the full Automation and Assurance explanation →

Which THREE technologies or protocols are used to implement automated service provisioning in a Cisco service provider network?

Question 29mediummultiple choice

Read the full network assurance explanation →

Refer to the exhibit. A telemetry subscription is configured on an IOS-XR router. The collector at 10.1.1.100 is not receiving data. Which configuration error is present?

Exhibit

Refer to the exhibit.

! Cisco IOS-XR telemetry configuration
!
telemetry model-driven
 destination-group DGROUP1
  address-family ipv4 10.1.1.100 port 57500
   encoding json
  !
 !
 sensor-group SGROUP1
  path openconfig-interfaces:interfaces state
   !
  !
 !
 subscription SUB1
  sensor-group-id SGROUP1 sample-interval 10000
  destination-id DGROUP1
 !
!

Question 30hardmultiple choice

Read the full REST/YANG explanation →

Refer to the exhibit. An engineer makes a RESTCONF request to retrieve operational data for all interfaces, but the response shows only one interface. What is the most likely cause?

Exhibit

Refer to the exhibit.

! RESTCONF GET request
! GET /restconf/data/Cisco-IOS-XE-interfaces-oper:interfaces/interface=GigabitEthernet0/0/0
! Response:
HTTP/1.1 200 OK
{
  "Cisco-IOS-XE-interfaces-oper:interface": [
    {
      "name": "GigabitEthernet0/0/0",
      "admin-status": "up",
      "oper-status": "up",
      "statistics": {
        "input-bps": 1500000,
        "output-bps": 2000000
      }
    }
  ]
}

Question 31easymultiple choice

Read the full Automation and Assurance explanation →

Refer to the exhibit. An engineer configures IP SLA for UDP jitter. The operation completes successfully, but the customer reports voice quality issues. What should the engineer check next?

Exhibit

Refer to the exhibit.

! Output from 'show ip sla summary'
!
IP SLAs Summary
IPSLA ID: 1
Type: UDP Jitter
Destination: 10.2.2.2
Source: 10.1.1.1
Frequency: 10 seconds
Threshold: 100 ms

Latest RTT: 50 ms
Latest Jitter: 5 ms
Packet Loss: 0%

Over thresholds: 0

Question 32mediummultiple choice

Read the full MPLS explanation →

A service provider is automating the provisioning of MPLS L3VPNs across multiple devices using NETCONF. During a deployment, the automation script fails with an error indicating that the device does not support the required YANG model. Which action should the engineer take to verify device capabilities?

Question 33hardmultiple choice

Read the full network assurance explanation →

An SP engineer is configuring model-driven telemetry (MDT) to monitor interface utilization on Cisco routers. The telemetry receiver uses gRPC and is experiencing high CPU load due to excessive subscription data. Which MDT subscription parameter should be adjusted to reduce the data rate without losing critical threshold events?

Question 34easymultiple choice

Read the full VPN explanation →

A network engineer is using Cisco NSO to create a managed L3VPN service. After deploying the service, the engineer notices that the configuration on the devices is not being updated. What is the most likely cause?

Question 35mediummultiple choice

Read the full REST/YANG explanation →

An automation engineer uses RESTCONF to configure a Cisco ASR 9000 router. When sending a PATCH request to update an interface description, the API returns 404 Not Found. What is the most probable issue?

Question 36mediummulti select

Read the full Automation and Assurance explanation →

A service provider plans to deploy automation using Cisco NSO. Which two benefits does NSO provide for service lifecycle management? (Choose two.)

Question 37hardmulti select

Read the full network assurance explanation →

A network architect is designing a model-driven telemetry solution for a large SP network. Which three factors are critical to consider when configuring telemetry subscriptions? (Choose three.)

Question 38hardmultiple choice

Read the full network assurance explanation →

A large SP is using model-driven telemetry to collect interface statistics from 5000 routers to a centralized collector. The collector is deployed on two servers with load balancing. Recently, the operations team noticed that some router telemetry streams are missing data for intervals of up to 5 minutes during peak hours. The engineer suspects packet loss between the routers and collector. The routers are sourced from different vendors but all support gRPC dial-out telemetry. The engineer wants to identify which routers are affected. The current configuration uses a single telemetry collector IP with port 5000. What step should the engineer take to isolate the problematic routers?

Question 39mediummultiple choice

Open the full VLAN trunking answer →

A network engineer at a service provider is using Cisco NSO to automate the provisioning of VLANs on thousands of access devices. The engineer creates a service using a custom YANG model and deploys it to a set of devices. However, the deployment fails with a 'failed to reach devices' error for some devices, while others succeed. The engineer checks device connectivity and confirms all devices are reachable via SSH and NETCONF. The engineer also verifies that the NSO device list is accurate and includes all target devices. What is the most likely cause of the failure?

Question 40easymultiple choice

Review the full OSPF breakdown →

A junior automation engineer is writing a Python script to configure OSPF on a Cisco IOS-XE router using RESTCONF. The script sends a PUT request to update the OSPF configuration but receives a 401 Unauthorized response. The engineer has configured a local user with privilege 15 on the router and enabled restconf. The engineer verified that the router's RESTCONF API is running on port 443. What is the most likely missing element in the script?

Question 41mediummultiple choice

Read the full network assurance explanation →

A service provider has implemented model-driven telemetry to monitor the health of its core network. The telemetry collector is a single server running a custom application that receives and processes gRPC streams from 200 routers. The collector is experiencing high CPU usage and is falling behind in processing data, causing some telemetry data to be dropped. The engineer decides to offload processing to multiple collectors. The routers support dial-out mode and can be configured with a list of collector IPs. The engineer wants to distribute the load evenly across collectors without manual configuration per router. Which should the engineer implement?

Question 42mediummultiple choice

Read the full network assurance explanation →

Refer to the exhibit. An engineer configured a telemetry subscription to push interface state data to a collector. The subscription shows 'State: Invalid'. What is the most likely cause?

Exhibit

Router# show telemetry ietf subscription 101
Subscription ID: 101
State: Invalid
Stream: yang-push
Encoding: encode-kvgpb
Filter:
  xpath: /interfaces-interface-state
Update policy:
  periodic: 500
Receivers:
  Address: 192.168.1.1
  Port: 57500
  Protocol: grpc
  TLS: false
Errors:
  Last error: Connection refused to receiver 192.168.1.1:57500

Question 43easymulti select

Read the full network assurance explanation →

Which TWO actions are required to enable model-driven telemetry on a Cisco IOS XR router?

Question 44hardmultiple choice

Open the full BGP breakdown →

A service provider operates a large MPLS network with Segment Routing (SR) and BGP-LS enabled on all routers. They have deployed a centralized Path Computation Element (PCE) to compute SR-TE policies for optimal traffic engineering. The PCE is configured to receive the network topology via BGP-LS from a route reflector (RR). Recently, the PCE has been unable to compute paths for certain destinations, and logs show that the topology database is missing some links and nodes. The engineer verifies that all routers have BGP-LS configured and are peering with the RR. The RR's BGP table shows the BGP-LS NLRI received from all routers. However, the PCE sees only a subset of the topology. Which action should the engineer take to resolve the issue?

Refer to the exhibit. ! Cisco IOS-XR telemetry configuration ! telemetry model-driven destination-group DGROUP1 address-family ipv4 10.1.1.100 port 57500 encoding json ! ! sensor-group SGROUP1 path openconfig-interfaces:interfaces state ! ! ! subscription SUB1 sensor-group-id SGROUP1 sample-interval 10000 destination-id DGROUP1 ! !

Refer to the exhibit. ! RESTCONF GET request ! GET /restconf/data/Cisco-IOS-XE-interfaces-oper:interfaces/interface=GigabitEthernet0/0/0 ! Response: HTTP/1.1 200 OK { "Cisco-IOS-XE-interfaces-oper:interface": [ { "name": "GigabitEthernet0/0/0", "admin-status": "up", "oper-status": "up", "statistics": { "input-bps": 1500000, "output-bps": 2000000 } } ] }

Refer to the exhibit. ! Output from 'show ip sla summary' ! IP SLAs Summary IPSLA ID: 1 Type: UDP Jitter Destination: 10.2.2.2 Source: 10.1.1.1 Frequency: 10 seconds Threshold: 100 ms Latest RTT: 50 ms Latest Jitter: 5 ms Packet Loss: 0% Over thresholds: 0

Router# show telemetry ietf subscription 101 Subscription ID: 101 State: Invalid Stream: yang-push Encoding: encode-kvgpb Filter: xpath: /interfaces-interface-state Update policy: periodic: 500 Receivers: Address: 192.168.1.1 Port: 57500 Protocol: grpc TLS: false Errors: Last error: Connection refused to receiver 192.168.1.1:57500