SAUTO Network Programmability Foundation Practice Test 4 — 15 Questions

Question 1

When using the 'ncclient' library in Python, what is the primary purpose of the 'manager.connect()' method?

Accepted Answer

To open an SSH-based NETCONF session.. In ncclient, manager.connect() establishes a NETCONF session over SSH (or another transport) to the target device, returning a manager object used for subsequent RPCs like get_config or edit_config. It handles the SSH transport, capability exchange, and session setup. It does not parse YANG, convert XML to JSON, or validate syntax.

Answer

To parse the YANG model.

Answer

To convert XML to JSON.

Answer

To validate the configuration syntax.

Question 2

Which JSON-related error occurs if you try to parse a string that is missing a closing brace?

Accepted Answer

JSONDecodeError. JSONDecodeError is the specific exception raised by Python's json module when parsing invalid JSON, such as a string missing a closing brace. It is a subclass of ValueError and provides detailed information about the error location.

Answer

ValueError

Answer

SyntaxError

Answer

TypeError

Question 3

In a YANG model, which statement is used to define an operational constraint that must be true for the data to be valid?

Accepted Answer

must. In YANG, the 'must' statement defines a constraint expression that must evaluate to true for the data to be considered valid — it is used to enforce semantic/operational rules beyond simple type checking. For example, 'must "../type = 'vlan'"' ensures a dependent leaf has a specific value.

Answer

mandatory

Answer

typedef

Answer

config

Question 4

Which statement best describes JSON?

Accepted Answer

It is a lightweight, language-independent data format.. JSON (JavaScript Object Notation) is a lightweight, text-based, language-independent data interchange format. Despite its name, it is not tied to JavaScript and is widely used across languages including Python, Java, and Go.

Answer

It is specific to JavaScript and cannot be used in Python.

Answer

It is a binary format for faster processing.

Answer

It is a schema language for XML.

Question 5

Which component of a REST API request is used to pass information about the requested resource in the URL?

Accepted Answer

Path parameters. Path parameters are embedded directly in the URL path and identify a specific resource — for example, /users/{id} where {id} is the path parameter. They are the standard REST mechanism for passing resource identifiers in the URL itself, distinguishing them from query strings, headers, and body content.

Answer

Cookies

Answer

Headers

Answer

Body

Question 6

Which TWO of the following are valid components of a YANG model definition?

Accepted Answer

leaf. Option A, leaf, is correct because a leaf is a fundamental YANG node type that holds a single scalar value (such as a string, integer, or boolean) and has no child nodes, making it a core building block of any YANG module. Option B, container, is also correct because a container is a valid YANG node that groups related nodes (leaves, lists, other containers) into a subtree but holds no value of its own, and it is used to organize the data tree hierarchy. The remaining options do not belong: socket is an operating-system networking abstraction, not a YANG statement; interface is a conceptual networking entity that in YANG would be modeled via a list or container, not as a YANG component itself; and packet is a unit of data on a network, not a construct defined by the YANG modeling language.

Answer

socket

Answer

interface

Answer

packet

Question 7

When performing an API audit, you want to ensure that all requests are logged. In Postman, which feature can you use to view the raw HTTP request and response details?

Accepted Answer

Postman Console. The Postman Console is the dedicated debugging tool that captures and displays the raw HTTP request and response details, including headers, body, status codes, and timing information for every request sent. It logs all network activity in real time, making it the correct feature for auditing whether requests are being logged and inspecting their exact wire format.

Answer

Runner

Answer

History tab

Answer

API Documentation

Question 8

Which THREE of the following are valid HTTP methods supported by REST APIs for managing network configurations?

Accepted Answer

DELETE. GET (E) is correct because it is the standard HTTP method for retrieving or reading network configuration resources from a REST API without modifying them. POST (D) is correct because it is used to create new configuration resources or submit data to the server for processing. DELETE (A) is correct because it removes an existing network configuration resource identified by its URI. TRACE (B) is not a REST resource-management method; it is a diagnostic method that echoes the received request back to the client. CONNECT (C) is also not used for managing configurations; it establishes a tunnel to a server, typically for HTTPS through a proxy.

Answer

TRACE

Answer

CONNECT

Question 9

When using the 'requests' library to call an API with a self-signed certificate, which parameter can be used to disable verification for testing?

Accepted Answer

verify=False. The 'verify=False' parameter in the requests library instructs the client to ignore SSL certificate validation errors.

Answer

cert=False

Answer

ssl=False

Answer

auth=False

Question 10

Which THREE of the following are common benefits of using NETCONF for device management?

Accepted Answer

Structured data format (XML). NETCONF is a standardized network management protocol that uses XML-encoded messages, so option A is correct because its structured XML data format enables machine-readable, schema-validated configuration and state data that is easy to parse and automate. Option C is correct because NETCONF supports transaction-based configuration commits, allowing changes to be applied atomically with commit, confirm-commit, and rollback capabilities so a failed change does not leave the device in a partial state. Option D is correct because NETCONF logically separates datastores such as running, candidate, startup, and intended, which lets operators stage, validate, and roll back configurations independently of the active running configuration. Option B is not a NETCONF benefit because NETCONF is a programmatic protocol and does not provide native GUI rendering, and option E is unrelated since NETCONF is designed for configuration and state management, not real-time video streaming.

Answer

Native GUI rendering

Answer

Real-time video streaming support

Question 11

Which TWO of the following are true regarding YANG models?

Accepted Answer

YANG supports hierarchical data modeling. Option A is correct because YANG (RFC 6020/7950) is a data modeling language that organizes configuration and state data into a tree-structured, hierarchical schema with containers, lists, and leaves. Option B is correct because YANG modules define the syntax and semantics of data manipulated by NETCONF (RFC 6241) and RESTCONF (RFC 8040), which use YANG-modeled datastores and payloads. Option C is incorrect because YANG is an open IETF standard, not a proprietary Cisco language. Option D is incorrect because YANG is vendor-neutral and used across many platforms and tools, not only Cisco IOS-XE. Option E is incorrect because YANG models are expressed in a human-readable text syntax (and can be represented in XML/JSON encodings), not exclusively binary formats.

Answer

YANG is a proprietary Cisco language

Answer

YANG is only used for Cisco IOS-XE

Answer

YANG uses binary data formats exclusively

Question 12

Which TWO of the following are true regarding the use of the Python 'requests' library?

Accepted Answer

It can automatically serialize dictionaries to JSON via the json parameter.. Option B is correct because requests accepts a json= keyword argument on methods such as post(), put(), and patch(), which serializes a Python dictionary to a JSON body and automatically sets the Content-Type header to application/json. Option C is correct because the library's core purpose is to provide a high-level, human-friendly API for HTTP, exposing convenience methods like requests.get(), requests.post(), requests.put(), and requests.delete() that wrap urllib3 under the hood. Option A is not correct because requests is built on urllib3 and supports connection pooling and keep-alive, and while the base API is synchronous, it is not limited to a single execution model in the sense implied. Option D is not correct because requests manages connection pooling automatically via HTTPAdapter and urllib3's PoolManager, so manual pool management is not required. Option E is not correct because requests supports Python 3.x (and historically 2.7), not exclusively Python 2.7.

Answer

It only supports the synchronous execution model.

Answer

It requires manual management of connection pools.

Answer

It is only compatible with Python 2.7.

Question 13

Which THREE of the following are true about Postman environments?

Accepted Answer

Environments help organize your API collection variables. Option B is correct because Postman environments are variable scopes that let you organize and manage variables (such as base URLs, IDs, and credentials) separately from the collection itself, keeping collections portable. Option D is correct because environments support dynamic and variable-driven values, including tokens and secrets, which can be referenced via {{variable}} syntax and updated at runtime (e.g., through scripts or the token helper), enabling dynamic authentication flows. Option E is correct because a key purpose of environments is to define different value sets for the same variable names, so you can switch between environments (e.g., dev, staging, production) to point requests at different servers without editing the collection. Option A is not correct because Postman does not store sensitive API keys with 'no security'; environment values can be marked as secret and are encrypted/synced securely, and sensitive data handling is a security concern rather than a feature. Option C is not correct because environments are not shared with all Postman users by default; they are private to the user or team unless explicitly shared within a workspace or team.

Answer

Environments allow you to store sensitive API keys in the cloud with no security

Answer

Environments are shared across all Postman users by default

Question 14

Which THREE of the following are common JSON data types?

Accepted Answer

number. JSON (JavaScript Object Notation, defined by RFC 8259) supports a fixed set of value types, and option A (number) is one of them: JSON numbers are written as decimal literals such as 42, -3.14, or 1.5e10, with no distinction between integers and floats. Option B (string) is correct because JSON strings are sequences of Unicode characters enclosed in double quotes, using backslash escapes like 
 and \uXXXX. Option D (boolean) is correct because JSON defines the literal values true and false as a native boolean type. The unmarked options do not belong: option C (class) is an object-oriented construct, not a JSON type — JSON only has objects (unordered key/value collections), not classes — and option E (pointer) is a memory-address concept from languages like C/C++, with no representation in the JSON specification.

Answer

class

Answer

pointer

Question 15

Which THREE of the following are true regarding REST API design in Cisco security products?

Accepted Answer

Standard HTTP methods should be used for CRUD. Option A is correct because REST API design in Cisco security products follows the standard HTTP verb mapping for CRUD operations: GET to read, POST to create, PUT/PATCH to update, and DELETE to remove resources. Option D is correct because REST is resource-oriented, so each resource is addressed by a unique URL (for example, /api/fmc_config/v1/domain/{domainUUID}/object/networks/{objectId}), which clients use to identify and manipulate that resource. Option E is correct because REST APIs return meaningful HTTP status codes such as 200 OK, 201 Created, 400 Bad Request, 401 Unauthorized, and 404 Not Found to indicate whether a request succeeded or failed. Option B is not correct because REST APIs can support asynchronous operations, and Cisco security APIs commonly return task or job identifiers that clients poll for completion rather than requiring every request to be synchronous. Option C is not correct because Cisco security REST APIs typically support JSON, and many also support XML, so XML is not the only supported format.

Answer

All requests must be synchronous

Answer

XML is the only supported format