Infrastructure and Automation

An engineer needs to automate the deployment of a new VLAN across multiple switches. Which tool is best suited for this task?

A DevOps team wants to version control their network configurations. Which tool should they use?

During an automation script run, a network device returns HTTP 429. What does this indicate?

A network automation engineer is writing a Python script to configure multiple devices. Which library is most appropriate for SSH-based interactions?

In a CI/CD pipeline for network changes, which practice best ensures that a configuration push does not disrupt production traffic?

An engineer uses Ansible to push a configuration change to 100 switches. The playbook fails on 5 switches. What is the most efficient way to apply the change only to those 5?

A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?

In a network automation workflow, a developer needs to ensure idempotency. What does idempotency mean in this context?

An engineer is tasked with automating the backup of running configurations from 50 routers. Which approach is most scalable?

Which data format is most commonly used in REST API requests and responses in modern network automation?

Which TWO of the following are characteristics of a declarative automation model? (Select exactly 2.)

Which TWO of the following are benefits of using NETCONF over SNMP for network automation? (Select exactly 2.)

Which THREE of the following are valid methods to handle API rate limiting in a Python automation script? (Select exactly 3.)

A network engineer is automating the deployment of VLANs across multiple switches using Ansible. The playbook fails with an error indicating that the VLAN ID already exists on one of the switches. Which approach should the engineer use to ensure the playbook completes without errors?

Which TWO statements accurately describe characteristics of infrastructure as code (IaC) in network automation?

A DevOps team manages a hybrid cloud environment with on-premises Cisco Nexus switches and AWS VPCs using Terraform. They have a configuration management tool that pushes VLAN and interface configurations to the Nexus switches. Recently, they noticed that after a Terraform run that updates the AWS VPC subnets, some on-premises switches lose connectivity to the cloud. The team suspects a mismatch between the VLAN configurations on the Nexus switches and the AWS VPC subnets. They have a centralized source of truth stored in a Git repository containing YAML files for network definitions. Which action should the team take first to resolve the issue and prevent future occurrences?

Drag and drop the steps to configure OSPF on a Cisco router into the correct order.

Match each JSON data type to its example.

A developer wants to automate the configuration of multiple Cisco IOS-XE devices using Ansible. Which protocol should be used to ensure secure and idempotent configuration updates?

A team is using Python scripts with netmiko to back up configurations from a large number of network devices. What is the primary advantage of using netmiko over direct paramiko for this task?

A network administrator is tasked with automating the deployment of a new VLAN configuration across a fabric of Cisco ACI switches. Which automation tool is best suited for interacting with the APIC REST API?

A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?

In a CI/CD pipeline for network automation, a change is rolled back using a Git revert commit that triggers a new pipeline. The rollback playbook fails because the 'previous' configuration snapshot is missing. What should be implemented to prevent this?

Which THREE practices help ensure idempotent network automation? (Select three)

An automation script using Ansible tries to configure IP address 192.168.1.2 on GigabitEthernet0/1. After running, the interface remains administratively down. What is the first thing to check?

A NETCONF manager sends a get-config request to a Cisco device and receives the above reply. The automation script expected the interface to be enabled. Which of the following is the best course of action to remediate the issue?

A network engineer wants to automate the configuration of multiple Cisco IOS devices using Ansible. What is the minimum requirement on the control node to execute Ansible playbooks against these devices?

A DevOps team manages network infrastructure using Infrastructure as Code (IaC). They store configuration files in a Git repository and use CI/CD to deploy changes. What is the best practice to ensure that only validated configurations are applied to production devices?

A YANG module defines a leaf named 'bandwidth' of type 'uint32'. What does this represent in the context of a network device?

A Python script uses the ncclient library to connect to a Cisco NX-OS device over NETCONF. After establishing the session, the script executes an editing operation with candidate datastore. Which additional step is required to make the changes take effect immediately on the running configuration?

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

A developer is designing a data model for network device configurations using YANG. They need to represent a list of interfaces where each interface has a name (string) and speed (enumeration). Which YANG statement correctly defines this structure?

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Which TWO methods are commonly used to discover network devices in an automation environment? (Select exactly 2.)

Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)

Based on the exhibit, which interface is in a state that prevents it from sending or receiving IP traffic?

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

An automation engineer is using the Cisco DNA Center REST API to retrieve a list of network devices. The API call returns HTTP status code 200. What does this indicate?

A network team uses an Ansible playbook to automate the configuration of multiple Cisco IOS XE devices. The playbook includes the 'ios_config' module. Which of the following best describes the purpose of the 'provider' parameter in the ios_config module?

A developer is creating a YANG data model for a new interface feature. The model must allow the user to choose from a predefined set of values for the 'duplex' leaf. Which YANG statement should be used to restrict the values to 'full', 'half', and 'auto'?

When using the Cisco Meraki Dashboard API to create an HTTP webhook for network alerts, which authentication method is required in the request header?

A DevOps engineer is implementing Infrastructure as Code (IaC) for network devices. Which of the following practices is most critical to ensure that the environment state matches the desired configuration defined in code?

In a Python script using the 'requests' library to interact with Cisco DNA Center API, which function call is used to send a POST request with JSON data?

A team uses Chef to manage network device configurations. Which component of Chef is responsible for storing configuration policy and distributing it to nodes?

When using NETCONF to edit the configuration of a Cisco IOS XE device, an engineer receives an <rpc-error> with error-tag 'in-use' and error-app-tag 'data-exists'. What does this error indicate?

Which TWO Ansible modules are commonly used for automating Cisco IOS devices?

Which THREE of the following are key principles of Infrastructure as Code (IaC) as applied to network automation?

A developer uses the Cisco DNA Center API to retrieve device inventory. The JSON response is shown. Which Python code snippet correctly extracts the serial number?

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

A Cisco DevNet engineer is configuring model-driven telemetry on a Cisco IOS-XE device. The telemetry subscription includes the following path: 'Cisco-IOS-XE-native:native/interface/GigabitEthernet[Name='1/0/1']/ip/address'. Which part of this path identifies a specific list instance?

Which TWO are valid capabilities advertised during a NETCONF session?

A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?

Which tool is designed for infrastructure as code, uses a declarative language, and can automate configuration management across multiple devices?

Refer to the exhibit. Based on the YANG model snippet, what is the data type of the 'mask' leaf?

Which THREE are common best practices for implementing CI/CD in network automation?

Using the Cisco DNA Center API, an engineer wants to create a new site with building and floor information. Which HTTP method and endpoint should be used?

A developer is using Git to manage automation code. What is the primary advantage of using 'rebase' instead of 'merge' to integrate changes from a feature branch into the main branch?

Which TWO statements correctly describe differences between model-driven telemetry and traditional SNMP polling?

What is the default transport protocol for NETCONF sessions?

An engineer needs to automate the backup of configuration files from multiple Cisco IOS devices to a central server. Which protocol is most appropriate for pushing configurations from the devices to the server?

A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?

Which tool is specifically designed for model-driven programmability using YANG data models?

A network team is implementing automation to provision new switchports across a campus network. They decide to use a controller-based approach with Cisco DNA Center. What is the primary advantage of using DNA Center for this task?

An engineer is writing a Python script using the Cisco DevNet sandbox to configure OSPF on a CSR1000v via RESTCONF. What authentication method is typically used for RESTCONF requests?

A company uses Ansible to automate network configuration. They have an Ansible control node that must reach all network devices. Which transport protocol does Ansible use by default to connect to Cisco IOS devices?

An engineer is troubleshooting a NETCONF session that fails to establish with a Cisco IOS XE device. The SSH connection succeeds, but NETCONF capabilities are not exchanged. What is the most likely cause?

A DevOps team uses a CI/CD pipeline to deploy network configurations. They want to ensure that only authorized network engineers can trigger changes to production devices. Which integration is most appropriate?

An engineer is automating the configuration of SNMP on Cisco routers using Ansible. Which two modules are commonly used for this purpose? (Select TWO)

A network automation solution uses YANG data models to describe network configurations. Which THREE statements about YANG are true? (Select THREE)

A large enterprise uses Cisco DNA Center to manage their campus network. They have deployed fabric technology for SD-Access. The network team wants to use the DNA Center REST API to automate the addition of new wireless users to a specific virtual network (VN) based on their location (building). They have identified the API endpoint for creating a user device in the fabric. However, when they send a POST request with the appropriate JSON body, they receive a 400 Bad Request error. The JSON payload includes the mandatory fields for hostname, MAC address, and VN name. What is the most likely cause of the error?

An engineer needs to automate the deployment of VLAN configurations on a fleet of Cisco Catalyst 9000 switches running IOS-XE. The team uses Ansible Tower for automation. Which Ansible module should be used to push VLAN configuration idempotently?

Which TWO of the following are true about NETCONF capabilities as defined in RFC 6241?

Based on the exhibit, what is the frequency of the telemetry subscription?

A large enterprise uses Cisco DNA Center to manage over 500 network devices across multiple sites. The network operations team wants to automate the validation of device compliance with a baseline configuration. They have a Python script that uses the Cisco DNA Center REST API to retrieve the device configuration and compare it against a golden configuration stored in a local file. Recently, the script started failing with a 401 HTTP response code when trying to authenticate. The team confirmed the username and password are correct and that the DNA Center server is reachable. The script uses the /api/system/v1/auth/token endpoint to obtain a token. Which of the following is the most likely cause of the 401 error?

A junior developer is writing a Python script to gather interface statistics from a Cisco IOS-XE device using NETCONF. They use the 'ncclient' library and successfully connect. They want to retrieve the operational status of all interfaces. Which YANG model and XPATH expression should they use to get the operational data?

Refer to the exhibit. A developer receives this response when making a POST request to the Cisco DNA Center API to create a new device. What is the most likely issue?

A company uses Ansible to automate configuration of its Cisco IOS XE routers. The network team recently upgraded the routers' software from IOS 15.x to IOS XE 17.x. Since the upgrade, the Ansible playbook fails intermittently with the message: 'Failed to connect to the host via ssh: timed out'. However, the team can SSH manually to the routers from the Ansible control node without issues. The playbook uses the 'cisco.ios.ios_config' module with default SSH options. The routers have been configured with SSH version 2 and local authentication. The Ansible control node runs Red Hat Enterprise Linux 8. Which action should the network engineer take to resolve the issue?

A developer is building a Python tool that must retrieve the list of interfaces from a Cisco IOS XE device using the RESTCONF API. The device is reachable at https://10.1.1.1 and supports the ietf-interfaces YANG model. The developer wants to send the request and parse the JSON response. Which Python code snippet correctly performs this operation?

A network automation engineer needs to ensure that a Python script can securely store and retrieve API credentials for Cisco DNA Center without hardcoding them in the script. Which method is the most appropriate?

A developer is writing a Python script that uses the ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The script must filter the configuration to return only the interface configuration. Which filter type should be used in the <get-config> RPC to achieve this?

A developer must build a Python script that reads a list of devices from a YAML inventory file and then pushes configuration to each device using NETCONF over SSH. The script must be reusable and must not hardcode credentials. Which approach best satisfies these requirements?

An automation engineer is writing a Python script that uses the ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The device requires SSH and uses the default NETCONF port. Which code snippet correctly establishes a NETCONF session and retrieves the configuration?

A developer is building a Python script to configure a Cisco IOS XE device using NETCONF. The script must send an <edit-config> RPC that places the target datastore in candidate mode, changes the description of GigabitEthernet0/0, and commits the change. Which NETCONF capability must the device advertise for the script to use the candidate datastore?

A developer is writing a Python script that uses the Cisco DNA Center Intent API to retrieve a list of all network devices. The script must handle pagination to ensure all devices are returned. Which TWO parameters are used to control pagination in the Cisco DNA Center API? (Choose two.)

A network automation engineer needs to retrieve the running configuration of a Cisco IOS XE device using NETCONF. Which ncclient method should be used to fetch the configuration without modifying the device?

A developer is writing a Python script that uses the Meraki Dashboard API to page through a very large organization's list of network devices. The developer wants to iterate through all pages of results without manually constructing page URLs. Which approach should be used?

A developer is writing a Python script that must authenticate to the Cisco DNA Center REST API and create a new site. The script stores the controller hostname, username, and password in environment variables. Which approach correctly obtains the authentication token required for subsequent API calls?

A network automation engineer is writing a Python script that uses the Meraki Dashboard API to update the VLAN configuration on a switch. The engineer needs to send a PUT request to the endpoint /devices/{serial}/switch/ports/{portId}. Which HTTP header must be included to authenticate the request?

A developer writes a Python script that uses ncclient to configure a loopback interface on a Cisco IOS XE router. The script calls edit_config against the candidate datastore and then exits without calling commit. The next day, the interface is missing from the running configuration. What is the most likely cause?

A network automation team wants to run a Python script that uses the ncclient library to retrieve configuration from a Cisco IOS XE device over NETCONF. The device is reachable on TCP port 830. Which transport and port combination must the script use?

A developer is writing a Python script to interact with a Cisco IOS XE device using the NETCONF protocol. The script must retrieve the running configuration and then modify it. Which two actions must the script perform to establish a NETCONF session and retrieve the running configuration? (Choose two.)

A developer is writing a Python script that calls the Cisco DNA Center Intent API to retrieve a list of network devices. The script must handle the case where the API returns a 401 Unauthorized response by obtaining a new authentication token and retrying the request. Which Python construct should be used to implement this retry with token refresh?

An automation team wants to build a custom Slack bot that receives a message when a Cisco IOS XE device sends a syslog event indicating an interface went down. Which combination of technologies should the team use to implement this event-driven workflow?

A developer is writing a Python script that will authenticate to a Cisco DNA Center controller and then call multiple REST API endpoints. The script must handle authentication securely and manage the token lifecycle. Which two practices should the developer follow? (Choose two.)

A network engineer is using Ansible to automate configuration changes on a group of Cisco IOS XE devices. The engineer wants to ensure that the playbook only makes changes if the device configuration differs from the desired state, and that the playbook reports whether any changes were made. Which Ansible feature should the engineer rely on?

A developer is building a Python script that authenticates to the Cisco DNA Center REST API. The script must avoid hardcoding credentials in source control and must run unattended in a CI pipeline. The team already stores secrets in environment variables on the build agent. Which approach best meets these requirements?

A developer is writing a Python script that calls the Cisco DNA Center Intent API. The API returns HTTP 429 responses during peak hours. The developer wants the script to retry failed requests automatically using exponential backoff. Which approach should be used?

A developer is writing a Python script that authenticates to the Cisco DNA Center REST API. The script must include an authentication token in the HTTP headers of every subsequent API call. Which HTTP header should the developer populate with the token returned by the authentication endpoint?

A developer is using the Cisco DNA Center Intent API to retrieve a list of network devices. The API requires a token obtained from the authentication endpoint. The developer's script successfully authenticates and receives a token, but subsequent GET requests to /dna/intent/api/v1/network-device return a 401 Unauthorized error. What is the most likely cause?

A developer must configure a Cisco IOS XE device programmatically and needs the device to validate configuration changes against a data model before they are committed, with the ability to discard invalid candidate configurations. Which approach satisfies this requirement?

A developer is building a Python application that consumes the Cisco Meraki Dashboard API. The application must handle rate limiting gracefully when it performs many calls in a short period. Which response should the application check to determine that it has exceeded the rate limit and must wait before retrying?

A developer is writing a Python script that uses the ncclient library to configure a Cisco IOS XE device over NETCONF. The script must push a candidate configuration, validate it, and then commit it atomically. Which sequence of NETCONF operations should the script use to guarantee the configuration is only applied if it passes validation?

A developer is using the Cisco DNA Center Intent API to manage network devices. The developer needs to programmatically retrieve a list of all devices that match a specific hostname pattern. Which two actions must be performed to accomplish this? (Choose two.)

A developer runs the command `git clone https://github.com/example/netconfig.git` on a workstation, then edits a file named `vlans.yml`. Before editing, the developer wants to confirm which remote repository the local clone is tracking for push and fetch operations. Which command should be run?

A developer is writing a Python script that authenticates to Cisco DNA Center using the token-based authentication API. The script must obtain a token and reuse it for subsequent REST calls until it expires. Which HTTP header should the script include in each subsequent API request to pass the token?

A network automation engineer is writing a YAML playbook to push a banner configuration to a group of Cisco IOS XE routers. The engineer wants to use an agentless tool that connects over SSH and requires no software installed on the managed devices. Which tool fits this description?

A network engineer is using Ansible to automate configuration changes on Cisco IOS XE devices. The engineer wants to ensure that the playbook applies a set of configuration lines only if they are not already present. Which Ansible module should be used to achieve idempotent configuration management?

A network automation engineer needs to retrieve the current interface configuration from a Cisco IOS XE device using RESTCONF. The device has RESTCONF enabled and the engineer wants to read the configuration data for interfaces in the 'ietf-interfaces' model. Which HTTP method and URL format should the engineer use?

A network engineer is evaluating configuration management tools for a Cisco environment. The engineer wants to describe the push-based model where a central server runs playbooks that connect to managed devices over SSH to apply changes. Which tool uses this architecture?

A developer is designing unit tests for a Python function that calls a Cisco Meraki Dashboard API endpoint to retrieve organization inventory. The tests must run quickly in CI without making real network calls, and must verify that the function builds the correct request. Which TWO practices should the developer implement? (Choose two.)

A developer is writing a Python script that authenticates to a Cisco IOS XE device using NETCONF over SSH on port 830. The script must send a candidate configuration and commit it atomically. Which NETCONF capability must the device advertise for the script to use the candidate datastore?

An automation engineer is using the Cisco SD-WAN (Viptela) API to retrieve a list of devices in the overlay. The engineer must authenticate and obtain a token before making subsequent API calls. Which authentication mechanism does the Cisco SD-WAN API use to issue a session token?

A developer must write a script that retrieves the running configuration from a Cisco IOS XE device using NETCONF. The script establishes an SSH session and begins the NETCONF capability exchange. Which XML element must the client send to request the device's running configuration using the standard NETCONF data model?

A developer writes a script that calls a Cisco DNA Center intent API to create a new site. The first call returns HTTP 401 Unauthorized. The script already retrieved a token earlier in the same run. Which action should the script take next?

An automation engineer needs to retrieve the current running configuration from a Cisco IOS XE device using RESTCONF over HTTPS. The device supports the ietf-netconf-monitoring YANG module. Which HTTP method and URI should be used to fetch the configuration data represented by a specific YANG model?

A developer is writing a Python script that calls the Cisco DNA Center Intent API to create a new network device. The script must send a JSON body and authenticate with a token. Which TWO HTTP request components are required for this API call to succeed? (Choose two.)

An engineer must push a configuration change to a Cisco IOS XE router using NETCONF. The engineer wants to stage the change so it can be previewed and later committed or discarded, rather than applying it immediately to the running configuration. Which NETCONF capability enables this behavior?

A network automation team is evaluating tools to manage the configuration of Cisco IOS XE devices. They need a solution that uses a declarative, agentless approach and can be extended with custom modules. Which two characteristics describe Ansible in this context? (Choose two.)

A network automation team is evaluating tools to manage configuration drift across a fleet of Cisco IOS XE devices. They want to ensure that device configurations remain in the desired state and that any unauthorized changes are detected and remediated. Which two capabilities are essential for a configuration drift detection and remediation solution in this environment? (Choose two.)

A developer writes a Python script that calls the Cisco DNA Center Intent API. The script must authenticate once and reuse the returned token on subsequent requests instead of sending credentials with every call. Which HTTP header should the script include on each API request to present the token?

A network automation team is comparing configuration management tools for managing Cisco IOS XE devices. They want to understand which TWO statements accurately describe how Ansible differs from Puppet in this context. (Choose two.)

A developer is building an automation workflow that must react when an interface on a Cisco IOS XE device goes down. The workflow should subscribe to the device and receive structured event data as changes happen, rather than polling for state. Which technology should the developer use?

A network engineer is troubleshooting an Ansible playbook that targets Cisco IOS XE devices over SSH. The playbook connects successfully but fails when applying configuration, and the engineer suspects the connection plugin and transport settings. Which TWO actions should the engineer take to verify and correct the connection configuration? (Choose two.)

A developer is building a Python application that calls the Cisco DNA Center Intent API to retrieve device health. The application must handle pagination and rate limiting gracefully. After receiving an HTTP 429 response, which action should the application take?

A platform team stores network device configuration templates in a Git repository and wants every proposed change to be reviewed and validated before it reaches production devices. The team also needs an audit trail of who approved each change. Which Git-based workflow best meets these requirements?

An engineer is writing a Python script that must authenticate to the Cisco Meraki Dashboard API and then retrieve the list of organizations the API key can access. Which authentication method and endpoint combination is correct?

A network engineer is using Ansible to automate the configuration of a Cisco IOS XE device. The playbook must ensure that a specific banner is present on the device. Which Ansible module should the engineer use to accomplish this task in a vendor-supported way?

A developer is building a Python script that consumes a REST API exposed by a Cisco controller. The script must authenticate using a token obtained from a login endpoint and then call protected resources. Which TWO practices are appropriate for handling authentication and session state in this script? (Choose two.)

A network engineer is preparing an Ansible playbook that will configure VLANs on a fleet of Cisco IOS XE switches. The playbook must authenticate to each device securely and must be able to reference the device-specific variables that the playbook expects. (Choose two.)

A developer is writing a unit test for a Python function that calls the Cisco DNA Center API to fetch device health. The test must not perform real network calls and should verify that the function parses a sample JSON response correctly. Which approach best satisfies these requirements?