350-401 Automation — All Questions With Answers

A network engineer needs to automate the backup of running configurations from multiple Cisco IOS XE devices to a central TFTP server. Which tool is best suited for this task in a Python-based automation framework?

Question 2mediummultiple choice

Study the full ACL explanation →

A network engineer is creating a Python script using the Cisco IOS XE RESTCONF API to configure a loopback interface. The script sends a PUT request to the URI /restconf/data/Cisco-IOS-XE-native:native/interface/Loopback=100 with a JSON body that includes the IP address. The API returns a 201 Created status, but the loopback interface does not appear in the running configuration. What is the most likely issue?

Question 3mediummultiple choice

A network engineer is troubleshooting an Ansible playbook that uses the ios_config module to apply ACLs. The playbook runs without errors, but the ACLs are not applied to the device. The engineer verifies that the device is reachable and the credentials are correct. What is the most likely cause?

Question 4hardmulti select

Which THREE are valid methods for automating network device configuration using Cisco IOS XE? (Choose three.)

Question 5mediummultiple choice

Refer to the exhibit. A network engineer wants to use Ansible to change the IP address of Loopback100 from 10.1.100.1/24 to 10.1.200.1/24. The playbook uses the ios_config module. The playbook runs successfully, but the IP address remains unchanged. What is the most likely reason?

Exhibit

R1#show ip interface brief | include Loopback
Loopback0        10.1.1.1       YES manual up                    up
Loopback100      10.1.100.1     YES manual up                    up

R1#show run interface Loopback100
Building configuration...
Current configuration : 67 bytes
!
interface Loopback100
 ip address 10.1.100.1 255.255.255.0
end

R1#show run | include snmp-server
snmp-server community public RO
snmp-server community private RW

Question 6hardmultiple choice

Refer to the exhibit. A Python script sends the JSON payload shown via a POST request to the RESTCONF URI /restconf/data/ietf-interfaces:interfaces on a Cisco IOS XE device. The API returns 201 Created, but the interface GigabitEthernet1 is not configured. What is the most likely cause?

Exhibit

{
  "ietf-interfaces:interface": {
    "name": "GigabitEthernet1",
    "type": "iana-if-type:ethernetCsmacd",
    "enabled": true,
    "ietf-ip:ipv4": {
      "address": [
        {
          "ip": "192.168.1.1",
          "netmask": "255.255.255.0"
        }
      ]
    }
  }
}

Question 7hardmultiple choice

A service provider uses Cisco IOS XE routers with NETCONF/YANG for configuration management. They have a centralized automation system that pushes configuration changes via NETCONF. Recently, after a maintenance window, several routers lost connectivity to the NETCONF server. The automation system can still SSH to the routers and execute CLI commands. The engineer suspects that the NETCONF server's SSH key changed, causing the routers to reject the connection. However, checking the routers' configuration, the engineer finds that the 'netconf ssh' command is present and the SSH server is enabled. The engineer also notices that the routers have an 'ip ssh server algorithm publickey' configuration specifying a list of allowed public keys. What is the most likely cause of the NETCONF connectivity loss?

Question 8mediummultiple choice

A network engineer is automating configuration backups using Ansible. The playbook uses the ios_config module to retrieve running configurations from Cisco IOS XE devices. However, the playbook fails with a timeout error on a specific device. Other devices respond correctly. What is the most likely cause of the failure?

Question 9easymultiple choice

Refer to the exhibit. A network engineer sends a RESTCONF PATCH request with the above JSON payload to the URL https://192.168.1.100/restconf/data/ietf-interfaces:interface=GigabitEthernet0/0/0. What is the expected outcome?

Exhibit

Refer to the exhibit.
{
  "ietf-interfaces:interface": {
    "name": "GigabitEthernet0/0/0",
    "description": "Link to Core",
    "enabled": true,
    "ietf-ip:ipv4": {
      "address": [
        {
          "ip": "192.168.1.1",
          "netmask": "255.255.255.0"
        }
      ]
    }
  }
}

Question 10mediumdrag order

Study the full ACL explanation →

Drag and drop the steps for the three-way TCP handshake into the correct order.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 11mediumdrag order

Which of the following represents the correct order of steps to configure an extended access control list (ACL) on a Cisco router?

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 12mediummultiple choice

A network engineer is using the Python ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The script connects successfully, but the <get-config> RPC returns an empty <data> element even though the requested configuration clearly exists on the device. The engineer confirms the correct datastore is targeted. Which action should the engineer take to resolve this?

Question 13hardmultiple choice

A network engineer is writing a Python script that uses the requests library to interact with a Cisco IOS XE device via RESTCONF. The script authenticates with basic authentication and sends a GET request to retrieve interface statistics. The device returns a 401 Unauthorized error even though the username and password are correct and have privilege level 15. Which configuration is most likely missing on the device?

Question 14mediummultiple choice

A network engineer is building a Python script to retrieve interface statistics from a Cisco IOS XE device using the RESTCONF API. The device is configured with the 'restconf' and 'netconf-yang' commands. The engineer sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces-state/interface=GigabitEthernet1 and receives a 404 Not Found error. The interface GigabitEthernet1 exists and is up. What is the most likely cause of the error?

Question 15hardmultiple choice

A network automation team is using a Python script with the ncclient library to configure a Cisco IOS XE device via NETCONF. The script sends an <edit-config> RPC with a candidate datastore and then commits the configuration. After running the script, the team notices that the configuration changes are not present in the running configuration. The script completes without errors. Which is the most likely cause?

Question 16mediummultiple choice

A network engineer is using the Python ncclient library to retrieve interface statistics from a Cisco IOS XE device. The script connects successfully but the returned data is a large XML document that is difficult to parse. The engineer wants to work with data in a structured, vendor-neutral format that can be validated against a model. Which action should be taken to achieve this?

Question 17mediummultiple choice

A network engineer is using the Cisco SD-WAN vManage REST API to retrieve a list of devices. The API requires authentication via a session token. The engineer successfully obtains a token using the /j_security_check endpoint but then receives a 403 Forbidden error when calling /dataservice/device. What is the most likely cause?

Question 18mediummultiple choice

A network engineer is using the Cisco SD-WAN vManage REST API to retrieve a list of all devices managed by the controller. The engineer sends a GET request to https://vmanage.example.com:8443/dataservice/device with the header 'Accept: application/json' and receives an HTTP 200 OK response containing a JSON payload. The engineer now needs to extract only the device IDs of the devices that are in a 'reachable' state. Which Python code snippet correctly parses the response and filters the devices?

Question 19mediummulti select

Study the full ACL explanation →

A network engineer is designing a Python script to interact with a Cisco IOS XE device using RESTCONF. The engineer wants to ensure the script can perform both read and write operations on the device's configuration. Which two actions must be taken to enable RESTCONF and allow the script to authenticate? (Choose two.)

Question 20hardmultiple choice

A network engineer is using Ansible to configure a Cisco IOS XE device. The playbook uses the 'ios_config' module to apply an ACL. The playbook runs successfully, but the ACL is not present on the device. The engineer verifies that the device is reachable and credentials are correct. Which action should the engineer take to troubleshoot the issue?

Question 21mediummultiple choice

A network engineer is comparing YANG models available on a Cisco IOS XE device. The engineer needs a model that is vendor-neutral and can be used across multiple vendors' devices. Which type of YANG model should the engineer choose?

Question 22hardmultiple choice

A network automation engineer is using the Cisco DNA Center Intent API to provision a new network device. The engineer needs to ensure that the device is successfully added to the inventory and assigned to a site before configuring it. Which API endpoint should the engineer use to add the device to the DNA Center inventory?

Question 23hardmultiple choice

An engineer writes a Python script that sends a RESTCONF GET request to a Cisco IOS XE device at https://10.1.1.5/restconf/data/ietf-interfaces:interfaces. The device returns HTTP 401 Unauthorized even though the same credentials work for SSH. The device is configured with 'restconf' and a local user with privilege 15. What is the most likely cause?

Question 24hardmultiple choice

A network engineer is using the ncclient Python library to configure a Cisco IOS XE device via NETCONF. The engineer wants to change the description of a loopback interface. The script establishes a NETCONF session, but the configuration change fails with an error indicating that the data is not writable. The engineer verifies that the NETCONF session is active and that the user has privilege level 15. What is the most likely cause of the failure?

Question 25mediummultiple choice

A network engineer has a Python script that retrieves the operational state of all interfaces from a Cisco IOS XE router using RESTCONF. The script currently sends a GET request to the base URI https://router/restconf/data/ietf-interfaces:interfaces. The engineer needs to modify the script to retrieve only the statistics for GigabitEthernet1, specifically the in-octets counter. Which RESTCONF request should the engineer use?

Question 26mediummultiple choice

A network engineer is writing a Python script to retrieve the current interface configuration from a Cisco IOS XE device using RESTCONF. The script sends a GET request to the URI https://10.1.1.1/restconf/data/ietf-interfaces:interfaces but receives an HTTP 406 Not Acceptable response. The engineer confirms that the device supports RESTCONF and that the credentials are correct. What is the most likely cause of the error?

Question 27mediummulti select

A network team is implementing a Python script to interact with a Cisco IOS XE device using the RESTCONF API. The script must authenticate using HTTP Basic Authentication and send a GET request to retrieve interface details. Which two actions must the script perform to correctly authenticate and retrieve data? (Choose two.)

Question 28mediummultiple choice

A network engineer is writing a Python script using the requests library to retrieve the operational state of all GigabitEthernet interfaces from a Cisco IOS XE device via RESTCONF. The script uses the URL https://10.1.1.1/restconf/data/ietf-interfaces:interfaces-state and includes the header 'Accept: application/yang-data+json'. The script fails with HTTP 406 Not Acceptable. Which action resolves the issue?

Question 29hardmultiple choice

A network automation engineer is using NETCONF to retrieve configuration data from a Cisco IOS XE device. The engineer wants to ensure that the RPC request is secure and authenticated. Which protocol should be used as the transport for NETCONF in this scenario?

Question 30mediummultiple choice

A network automation engineer is comparing configuration management approaches for a fleet of Cisco IOS XE devices. The team wants the automation tool to compute the difference between the device's running configuration and the desired intent, apply only the missing lines, and leave unrelated configuration untouched. Which tool and mode should be selected?

Question 31hardmultiple choice

A network automation team is using NETCONF to configure a Cisco IOS XE device. They want to ensure that the configuration changes are applied atomically and that the device reverts to its previous state if any part of the change fails. The team is using the <edit-config> operation with the default error-option. Which NETCONF capability must be supported and used to achieve this behavior?

Question 32mediummultiple choice

A network automation team is using the Cisco IOS XE RESTCONF API to retrieve interface statistics from a Catalyst 9300 switch. The engineer sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces-state with the header 'Accept: application/yang-data+json'. The switch returns HTTP 401 Unauthorized. The engineer confirms that the RESTCONF feature is enabled with 'restconf' and that the correct credentials are used. What is the most likely cause of the 401 response?

Question 33hardmultiple choice

A network engineer is writing a Python script that uses the requests library to send a RESTCONF PATCH request to a Cisco IOS XE device to update the description of a loopback interface. The script sends the request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces/interface=Loopback100 with a Content-Type of application/yang-data+json. The device returns HTTP 415 Unsupported Media Type. Which is the most likely cause?

Question 34mediummultiple choice

A network engineer is writing a Python script that uses the ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The script connects successfully but receives an RPC error stating 'operation not supported'. The engineer verifies that NETCONF is enabled with 'netconf-yang' and that the correct port 830 is used. What is the most likely cause?

Question 35mediummultiple choice

A network engineer is writing a Python script that uses the ncclient library to retrieve the running configuration from a Cisco IOS XE device. The script establishes a NETCONF session on the default port and then calls get_config with source='running'. However, the device returns an RPC error indicating that the requested data is not available in the specified datastore. The engineer confirms that the device supports NETCONF and that the SSH session is established successfully. Which action should the engineer take to resolve this error?

Question 36hardmulti select

A network engineer is evaluating Cisco IOS XE Guest Shell for automating device operations. The engineer needs to run Python scripts that interact with the underlying IOS XE CLI and also expose a webhook endpoint that an external orchestrator can call. Which two capabilities of Guest Shell support these requirements? (Choose two.)

Question 37mediummultiple choice

A network automation engineer is writing a Python script that must retrieve the running configuration from a Cisco IOS XE device. The engineer decides to use the NETCONF protocol over an SSH session. After establishing the SSH connection, the script sends a <get-config> RPC with a <source> element containing <running/>. The device returns an <rpc-error> with the message 'access-denied'. The engineer verifies that the SSH credentials are correct and that the user has privilege level 15. What is the most likely cause of the error?

Question 38mediummulti select

A network team is implementing a Python script to configure a Cisco IOS XE device using the RESTCONF API. The script must send a PATCH request to update the description of a loopback interface. The team needs to ensure the request is properly formatted and secured. Which two actions must the script perform to successfully update the configuration? (Choose two.)

Question 39hardmultiple choice

A network engineer is using a Python script with the requests library to send a PATCH request to a Cisco IOS XE device via RESTCONF. The goal is to update the description of GigabitEthernet1. The script uses the URI /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1 and a JSON body. The device returns HTTP 400 Bad Request. What is the most likely cause?

Question 40hardmultiple choice

A network engineer is developing a Python script using the ncclient library to configure a Cisco IOS XE device via NETCONF. The script needs to change the description of an interface. The engineer writes a <config> RPC with the appropriate XML payload and sends it to the device. The device returns an <ok> response, but the interface description does not change. What is the most likely reason for this behavior?

Question 41hardmultiple choice

A network automation team is using Ansible to manage a fleet of Cisco IOS XE devices. They have written a playbook that uses the ios_config module to push a banner to all devices. The playbook runs successfully but the banner is not applied. The team suspects that the device is rejecting the configuration due to an interactive prompt. Which Ansible module parameter should be used to handle this?

Question 42mediummultiple choice

A network engineer is writing a Python script that uses the requests library to retrieve interface statistics from a Cisco IOS XE device via RESTCONF. The script sends a GET to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces and receives a 401 Unauthorized response even though the credentials are correct. The device is configured with restconf and ip http secure-server. Which change is most likely to resolve the issue?

Question 43mediummulti select

A network automation team is evaluating YANG models to programmatically configure and retrieve operational data from Cisco IOS XE devices. They need to select models that are natively supported by IOS XE and can be used with RESTCONF and NETCONF. Which two YANG model types are directly supported by Cisco IOS XE for these purposes? (Choose two.)

Question 44hardmultiple choice

A network engineer is using a Python script with the requests library to interact with a Cisco IOS XE device's RESTCONF API. The script needs to update the description of a loopback interface. The engineer writes the following code:

import requests
import json

url = "https://192.168.1.1/restconf/data/ietf-interfaces:interfaces/interface=Loopback0" headers = {

"Content-Type": "application/yang-data+json",
    "Accept": "application/yang-data+json"
}

payload = { "ietf-interfaces:interface": {

"name": "Loopback0",
        "description": "Updated by script"
    }
}

response = requests.patch(url, headers=headers, data=json.dumps(payload), auth=('admin', 'password'), verify=False)

print(response.status_code)

The script returns a 400 Bad Request error. What is the most likely cause of the error?

Question 45easymultiple choice

A network engineer is using the Cisco SD-WAN Manager (vManage) API to retrieve a list of all devices in the overlay. The engineer writes a Python script that sends a GET request to the API endpoint. The script includes an authentication token in the header. The response returns HTTP 200 OK but the JSON body contains an empty data array. The engineer confirms that there are active devices in the overlay. What is the most likely reason for the empty response?

Question 46hardmulti select

A network engineer is using a Python script with the requests library to send a RESTCONF PATCH request to a Cisco IOS XE device. The script receives an HTTP 400 Bad Request response. The engineer confirms the URL is correct and the device supports RESTCONF. Which two actions should the engineer take to resolve the issue? (Choose two.)

Question 47mediummultiple choice

A network engineer is using the Cisco SD-WAN vManage API to retrieve a list of all devices in the overlay. The engineer sends a GET request to https://vmanage.example.com/dataservice/device and receives a 403 Forbidden response. The engineer is using a valid username and password with the 'basic' authentication method. Which action should the engineer take to successfully retrieve the device list?

Question 48easymultiple choice

A network engineer is building a Python script to query the operational state of interfaces on a Cisco IOS XE device using RESTCONF. The engineer needs to ensure the request is sent with the correct HTTP method and headers to retrieve configuration data. Which action should the engineer take?

Question 49mediummultiple choice

A network engineer is developing a Python script to configure OSPF on a Cisco IOS XE router using RESTCONF. The script sends a PATCH request to the URI /restconf/data/Cisco-IOS-XE-ospf:ospf-processes with a JSON payload. The device returns HTTP 400 Bad Request. The engineer verifies that the URI is correct and that the JSON is well-formed. Which is the most likely cause of the error?

Question 50mediummultiple choice

A network engineer writes a Python script using the ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The script connects successfully but when it sends a <get-config> RPC with source <running/>, the device returns an error indicating the requested data is not available. The engineer verifies that the NETCONF service is enabled and the SSH connection is working. What is the most likely cause of the error?

Question 51easymultiple choice

A network administrator needs to securely retrieve configuration data from a Cisco IOS XE router using a programmatic interface that supports YANG models and uses SSH as the transport. The administrator wants to filter the response to only the interface description fields. Which protocol and operation should be used?

Question 52mediummulti select

A network automation engineer is comparing NETCONF and RESTCONF for managing Cisco IOS XE devices. Which two statements correctly describe differences between these protocols? (Choose two.)

Question 53hardmultiple choice

A network engineer is using the Cisco SD-WAN vManage API to automate device onboarding. The engineer writes a Python script that sends a POST request to the /dataservice/device endpoint with a JSON payload containing device details. The script receives an HTTP 403 Forbidden response. The engineer verifies that the username and password are correct. What is the most likely cause?

Question 54mediummulti select

A network engineer is designing a Python script to interact with a Cisco IOS XE device using RESTCONF. The script must perform a PUT request to replace the configuration of an interface. Which two headers are required in the HTTP request to ensure successful processing? (Choose two.)

Question 55mediummultiple choice

A network engineer is designing a Python script to interact with a Cisco IOS XE device using NETCONF. The script uses the ncclient library and establishes a connection over SSH. The engineer wants to retrieve the configured hostname of the device. Which YANG model and filter should be used to accomplish this task?

Question 56hardmultiple choice

A network automation engineer is using the YANG Suite tool to explore YANG models on a Cisco IOS XE device. The engineer wants to retrieve the operational state of all interfaces using NETCONF. After selecting the ietf-interfaces module and building a get RPC, the response includes only configuration data, not operational state. What should the engineer do to obtain the operational state?

Question 57hardmultiple choice

A network automation team is using a YANG model to configure a Cisco IOS XE device via RESTCONF. The team notices that when they send a PATCH request to update an interface description, the request succeeds, but the description is not applied. They verify that the JSON payload is correctly formatted and the URI is correct. What is the most likely reason for this behavior?

Question 58hardmultiple choice

A network automation team is using Ansible to manage a large number of Cisco IOS XE devices. They want to ensure that their playbooks are idempotent and can be run repeatedly without causing unintended changes. A playbook uses the 'ios_config' module to enforce a set of banner commands. After the first run, the playbook reports changes; on subsequent runs, it reports no changes. However, the team notices that the banner text on the devices includes an extra line with the delimiter 'EOF' that they did not intend. Which Ansible module parameter should they use to ensure the exact banner text is applied without the delimiter?

Question 59mediummulti select

A network automation team is deploying a Python script that must retrieve interface statistics from a Cisco IOS XE device using the RESTCONF API. The script sends a GET request to https://<device>/restconf/data/ietf-interfaces:interfaces and receives an HTTP 401 Unauthorized response. The team wants to resolve this issue without disabling security. Which two actions should the team take? (Choose two.)

Question 60mediummultiple choice

A network engineer is designing a Python script to retrieve interface statistics from a Cisco IOS XE device using RESTCONF. The script must authenticate with a username and password, and the device requires that credentials be sent securely. The engineer wants to ensure that the authentication mechanism is not vulnerable to replay attacks. Which authentication method should be used?

Question 61hardmultiple choice

A network engineer uses a Python script with the ncclient library to send a NETCONF <edit-config> RPC to a Cisco IOS XE router. The goal is to add a new loopback interface with a specific IP address. The script sends the RPC with the default-operation set to 'merge'. The router returns an 'ok' response, but the configuration is not applied. The engineer verifies the XML payload is well-formed and the interface does not already exist. What is the most likely reason the configuration was not applied?

Question 62hardmulti select

A network automation engineer is comparing YANG models and their usage in NETCONF and RESTCONF on Cisco IOS XE devices. Which two statements are true about YANG models in this context? (Choose two.)

Question 63mediummulti select

A network engineer is designing a Python script to interact with a Cisco IOS XE device using RESTCONF. The script must support both configuration and operational data retrieval. Which two HTTP methods are required to accomplish these tasks? (Choose two.)

Question 64hardmultiple choice

A network engineer is using the Python ncclient library to configure a Cisco IOS XE device via NETCONF. The engineer wants to ensure that the configuration change is applied atomically and can be rolled back if it fails. Which NETCONF capability should be used to achieve this?

Question 65mediummultiple choice

A network engineer is using a Python script with the requests library to interact with a Cisco IOS XE device's RESTCONF API. The script sends a PATCH request to update the description of a loopback interface. The request returns HTTP 204 No Content, but when the engineer checks the device, the description has not changed. The engineer verifies that the YANG model path is correct and the payload is valid JSON. What is the most likely cause of this issue?

Question 66hardmultiple choice

A network automation team uses Ansible to manage a fleet of Cisco IOS XE devices. They have a playbook that uses the 'ios_config' module to push a banner. The playbook runs successfully but does not report any changes, even though the banner is different on the devices. The engineer checks the device and sees the old banner. What is the most likely cause?

Question 67mediummultiple choice

A network automation engineer is deploying a Python script that uses the ncclient library to configure a Cisco IOS XE device via NETCONF over SSH. The script successfully retrieves interface statistics but fails when attempting to modify the MTU on a GigabitEthernet interface. The engineer verifies that the NETCONF session is established and the device supports the ietf-interfaces YANG model. Which action should the engineer take to resolve the configuration failure?

Question 68hardmultiple choice

A network automation team is using Ansible to manage a fleet of Cisco IOS XE devices. The team wants to ensure that a configuration change is applied only if the device is reachable and the change is not already present. Which Ansible module and parameter combination achieves this idempotent behavior?

Question 69hardmulti select

Read the full VPN explanation →

A network automation engineer is using Cisco IOS XE RESTCONF to manage device configuration. The engineer wants to ensure that the RESTCONF API is properly secured and that only authorized users can access it. Which two configurations are required to enable secure RESTCONF access on a Cisco IOS XE device? (Choose two.)

Question 70hardmultiple choice

A network engineer is using the Cisco SD-WAN vManage REST API to automate the creation of a new VPN template. The engineer sends a POST request to /dataservice/template/feature with a JSON payload. The API returns HTTP 200 OK but the template is not created. What is the most likely cause of this behavior?

Question 71mediummulti select

A network engineer is designing a NETCONF-based automation solution for a Cisco IOS XE device. The engineer needs to retrieve interface statistics and configure an interface description. Which two actions must be performed to establish a NETCONF session and perform these operations? (Choose two.)

Question 72mediummultiple choice

A network engineer writes a Python script to retrieve the operational status of all interfaces from a Cisco IOS XE router. The script sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces-state but receives an HTTP 404 Not Found error, even though the RESTCONF API is enabled and the interface data exists. The engineer verifies that the authentication credentials are correct. What is the most likely cause of the 404 error?

Question 73hardmultiple choice

A network automation engineer uses NETCONF over SSH to configure a Cisco IOS XE device. The engineer sends an <edit-config> RPC with a default-operation of 'merge' to add a new loopback interface. The device responds with an <rpc-error> containing 'operation-failed' and a message that the interface already exists. However, the engineer confirms that the loopback interface is not present in the running configuration. What is the most likely reason for this error?

Question 74hardmultiple choice

A network engineer is using a Python script with the 'requests' library to send a RESTCONF PATCH request to a Cisco IOS XE device to update the description of GigabitEthernet1. The script uses the URL https://192.168.1.1/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1 and includes the JSON payload with the new description. The request returns HTTP 204 No Content, but the description is not updated on the device. What is the most likely reason?

Question 75mediummulti select

A network engineer is designing a Python script that uses the requests library to interact with a Cisco IOS XE device's RESTCONF API. The engineer wants to ensure the script can handle authentication and retrieve data in JSON format. Which two actions must the engineer take to successfully authenticate and receive JSON responses? (Choose two.)

Question 76mediummultiple choice

An organization uses Cisco DNA Center to automate network provisioning. A network engineer deploys a new access switch but finds that the switch does not receive the intended configuration template. The switch appears in DNA Center inventory with status 'Managed'. What is the most likely cause?

Question 77hardmultiple choice

A network team uses Ansible to automate VLAN configuration on Cisco IOS devices. The playbook fails with the error 'Failed to connect to the host via ssh: Permission denied (publickey)'. The control node runs Ubuntu, and the network devices are configured with SSH key authentication. Which solution should the engineer implement?

Question 78easymultiple choice

A company uses Cisco Catalyst Center (formerly DNA Center) for intent-based networking. After upgrading the Catalyst Center appliance, the engineer notices that some devices are unreachable via the network, but the Catalyst Center GUI shows them as 'Managed'. What is the most likely cause?

Question 79hardmultiple choice

A network engineer uses Netmiko to connect to multiple Cisco IOS XE devices and execute commands. The script runs correctly for most devices but fails for one device with the error: 'ValueError: SSH session not active'. The device is reachable and SSH credentials are correct. What is the most likely cause?

Question 80easymultiple choice

A company uses Chef to automate network device configuration. The network devices are Cisco IOS XE running in a brownfield environment. Which Chef component is used to manage the state of the devices?

Question 81easymulti select

Which TWO statements are true about Cisco DNA Center automation? (Choose two.)

Question 82mediummulti select

Which THREE attributes are typically included in a YANG module for interface configuration? (Choose three.)

Question 83mediummultiple choice

A company has a large network of 500 Cisco IOS XE routers and switches spread across multiple sites. The network team wants to automate the collection of interface statistics every hour and store them in a central database for historical analysis. The team has a Linux server with Python 3 and access to all devices via SSH with key-based authentication. They have written a Python script using Netmiko to connect to each device, run 'show interfaces', and parse the output to extract key metrics (e.g., input/output errors, packets per second). The script works correctly when tested on a small subset of devices, but when run against all 500 devices, it takes too long (over 2 hours) and sometimes fails due to SSH connection timeouts. The team needs to reduce the execution time and improve reliability. Which approach should they take?

Question 84mediummultiple choice

A network engineer is automating the deployment of VLANs across multiple switches using Ansible. The playbook runs successfully on most switches, but one switch fails with an error indicating that the VLAN configuration command is not recognized. What is the most likely cause?

Question 85hardmultiple choice

A DevOps team is implementing a CI/CD pipeline that automates network configuration changes. Which design principle is most important to ensure that a failed deployment does not cause prolonged outages?

Question 86easymultiple choice

Read the full network assurance explanation →

A network engineer is troubleshooting an automated configuration change that caused a routing loop. The change was pushed via an Ansible playbook that modified OSPF cost values on multiple routers simultaneously. What is the most likely reason for the loop?

Question 87mediummultiple choice

An organization uses Chef to manage network device configurations. A cookbook that configures SNMP community strings is applied to a group of routers. After the run, one router loses SNMP access. The cookbook uses the following resource: snmp_community 'public' do action :remove end. What is the most likely cause of the issue?

Question 88hardmulti select

Which TWO statements about NETCONF and YANG are true?

Question 89easymulti select

Open the full BGP breakdown →

Which THREE benefits does network automation provide over manual configuration?

Question 90hardmultiple choice

A large enterprise uses a centralized automation platform based on Ansible Tower to manage its network infrastructure. The network consists of 500 Cisco IOS XE routers and switches distributed across multiple sites. The automation team has created a playbook that configures BGP peerings on all devices. The playbook uses the ios_bgp module. Recently, during a maintenance window, the playbook was run against a subset of devices that were supposed to be upgraded to a new IOS XE version. However, after the run, several devices lost their BGP configurations entirely. The team discovers that the new IOS XE version introduced a new BGP configuration model that is not fully compatible with the ios_bgp module's expected CLI commands. The playbook failed silently on those devices, and the existing BGP configuration was removed. The team needs to prevent this from happening in future maintenance windows. Which action should be taken?

Question 91hardmulti select

Study the full QoS explanation →

Which TWO statements are true about RESTCONF and NETCONF in a Cisco IOS XE environment? (Choose two.)

Question 92mediummatching

Match each QoS feature to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Identifying traffic based on specific fields

Setting the DSCP or CoS value in a packet

Dropping packets that exceed a configured rate

Buffering packets to maintain a configured rate

Managing packet order during congestion

Question 93mediummatching

Match each network automation tool to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Agentless automation using YAML playbooks

Agent-based configuration management using Puppet DSL

Agent-based using Ruby recipes

Agent-based with remote execution

Standard for network configuration and state data

Question 94easymultiple choice

A network automation team wants to programmatically configure a Cisco Catalyst 9300 switch using RESTCONF. The switch is running Cisco IOS XE 17.x. Which HTTP method should be used to create a new VLAN by sending a JSON payload to the RESTCONF URI /restconf/data/Cisco-IOS-XE-vlan:vlan?

Question 95easymultiple choice

A network administrator is new to automation and wants to use a simple, agentless tool to push configuration changes to a group of Cisco IOS devices. The administrator prefers a tool that uses YAML for playbooks and does not require installing software on the managed devices. Which tool should the administrator use?

Question 96hardmultiple choice

A network engineer is using a Python script with the 'requests' library to interact with a Cisco IOS XE device via RESTCONF. The script sends a GET request to the URI 'https://192.168.1.1/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1' but receives a 401 Unauthorized error. The engineer has verified that the RESTCONF service is enabled and the URI is correct. What is the most likely cause of the error?

Question 97mediummultiple choice

A network automation engineer is writing a Python script to retrieve interface statistics from a Cisco IOS XE device using NETCONF. The script uses the 'ncclient' library and connects to the device on port 830. However, the connection fails with a 'Could not open socket' error. The engineer confirms that the device is reachable via ping and SSH on port 22. What is the most likely reason for the failure?

Question 98mediummultiple choice

A network engineer is writing a Python script to retrieve the operational state of a GigabitEthernet interface from a Cisco IOS XE device using RESTCONF. The script sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1 but receives a 406 Not Acceptable response. The device supports RESTCONF and the interface exists. Which HTTP header should the engineer add to the request to resolve this error?

Question 99mediummultiple choice

A network engineer is building a Python script to retrieve the operational status of all GigabitEthernet interfaces from a Cisco IOS XE device. The script uses the requests library and sends a GET request to the RESTCONF URL https://10.1.1.1/restconf/data/ietf-interfaces:interfaces-state. The device returns HTTP 401 Unauthorized. The engineer has verified that the RESTCONF service is enabled and the URL is correct. Which action should be taken to resolve the issue?

Question 100mediummulti select

A network engineer is designing a Python script to automate configuration changes on a fleet of Cisco IOS XE devices using the NETCONF protocol. The script must ensure that changes are atomic and that the device validates the configuration before committing. Which two NETCONF capabilities must the script check for during the capability exchange to guarantee these requirements? (Choose two.)

Question 101hardmultiple choice

Read the full VPN explanation →

A network automation team uses a Python script with the ncclient library to configure a Cisco IOS XE router via NETCONF. The script sends an <edit-config> RPC with a candidate datastore, but the router returns an error indicating the candidate datastore is not supported. The team wants to make configuration changes without affecting the running configuration until they are verified. Which NETCONF capability should the team ensure is enabled on the router to allow this workflow?

Question 102easymultiple choice

A network engineer is using Cisco SD-WAN vManage APIs to automate the creation of a new VPN template. The engineer needs to authenticate to the vManage REST API using a Python script. Which authentication method is natively supported by the vManage API for programmatic access?

Question 103easymultiple choice

A network automation engineer is using the Python 'ncclient' library to manage a Cisco IOS XE device via NETCONF. The engineer wants to retrieve the running configuration. Which NETCONF operation should be used to accomplish this?

Question 104mediummulti select

A network engineer is designing a Python script that uses the YANG models supported by a Cisco IOS XE device to retrieve interface statistics via NETCONF. The engineer wants to ensure the script can parse the response and extract the operational data. Which two steps are necessary when using the ncclient library to retrieve and process the data? (Choose two.)

Question 105mediummultiple choice

A network architect is designing a Python script that will retrieve interface statistics from a Cisco IOS XE device using the RESTCONF API. The script must authenticate with a username and password, and all communication must be encrypted. The device is configured with the 'restconf' and 'ip http secure-server' commands. Which HTTP method and authentication mechanism should the script use to retrieve the data?

Question 106mediummultiple choice

A network automation team needs to securely retrieve the running configuration from 200 Cisco IOS XE routers daily using a Python script. The script must authenticate with individual user credentials, use a structured data format, and avoid screen-scraping. Which approach best meets these requirements?

Question 107hardmultiple choice

A network automation team is using Cisco NSO (Network Services Orchestrator) to manage a multi-vendor network. They have created a service model in YANG and deployed it. A network engineer notices that when a device configuration is changed manually outside of NSO, NSO does not automatically correct it. Which NSO feature should be configured to ensure that NSO re-applies the intended configuration when a device drifts from the service model?

Question 108hardmultiple choice

A network automation engineer is developing a Python script using the ncclient library to configure a Cisco IOS XE device via NETCONF. The engineer wants to lock the running datastore, apply a candidate configuration, validate it, and then commit it. Which sequence of ncclient operations correctly performs this workflow?

Question 109mediummultiple choice

A network engineer is writing a Python script to retrieve the operational state of all GigabitEthernet interfaces from a Cisco IOS XE device using RESTCONF. The device is configured with HTTPS and the engineer has valid credentials. The script uses the 'requests' library to send a GET request to the RESTCONF API. Which HTTP header must be included in the request to specify that the client expects JSON-formatted data in the response?

Question 110mediummultiple choice

A network engineer is building a Python script that must retrieve the operational state of all interfaces from a Cisco IOS XE device using RESTCONF. The engineer sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces-state and receives an HTTP 401 Unauthorized response. The device is reachable, RESTCONF is enabled, and the correct credentials are being used in the request. What is the most likely cause of the 401 response?

Question 111easymultiple choice

A network engineer is writing a Python script to interact with a Cisco IOS XE device using RESTCONF. The engineer wants to retrieve the current configuration of a specific interface. Which HTTP method and URI should be used?

Question 112mediummulti select

A network engineer is comparing YANG models used in Cisco IOS XE automation. The engineer needs to distinguish between standard IETF YANG models and Cisco-specific YANG models. Which two statements accurately describe these YANG model types? (Choose two.)

Question 113mediummultiple choice

A network engineer needs to programmatically retrieve the operational status of all GigabitEthernet interfaces on a Cisco IOS XE device. The engineer wants to use a REST-based protocol that returns data in JSON and uses HTTP methods. The device is configured with 'restconf' and 'ip http secure-server'. Which protocol should the engineer use?

Question 114hardmultiple choice

A network automation team is using the ncclient Python library to configure a Cisco IOS XE router via NETCONF. The engineer wants to ensure the configuration changes are applied atomically and that the device automatically rolls back if any part of the change fails. Which NETCONF capability must the engineer verify is advertised by the device before relying on this behavior?

Question 115mediummulti select

A network engineer is comparing the characteristics of agent-based and agentless automation tools for managing Cisco IOS XE devices. Which two statements accurately describe agentless automation? (Choose two.)

Question 116easymultiple choice

A network engineer is new to automation and wants to use a simple, agentless tool to push configuration changes to a group of Cisco IOS XE switches. The engineer prefers to write the automation tasks in YAML and does not want to install any software on the switches. Which tool should be used?

Question 117easymultiple choice

A network engineer is new to network automation and wants to use a declarative, agentless tool that uses YAML playbooks to push configuration to Cisco IOS devices over SSH. Which tool should the engineer choose?

Question 118easymultiple choice

A network team is evaluating automation tools to manage a large Cisco IOS XE environment. They need a tool that uses a declarative, agentless approach and can be run from a central server without installing software on managed devices. Which tool best fits this requirement?

Question 119easymultiple choice

A network administrator is comparing configuration management tools and wants to use one that is agentless, uses YAML for playbooks, and communicates with Cisco IOS XE devices over SSH. Which tool best meets these requirements?

Question 120mediummultiple choice

A network engineer is using the Python 'requests' library to interact with a Cisco DNA Center controller. The engineer wants to retrieve a list of all network devices. Which HTTP method and URL should be used?

Question 121mediummultiple choice

A network automation team is using Cisco DNA Center's Intent API to retrieve a list of all network devices. The team writes a Python script that sends a GET request to the /dna/intent/api/v1/network-device endpoint. The script includes a valid authentication token in the headers, but the response returns a 403 Forbidden error. The token was obtained successfully using the /dna/system/api/v1/auth/token endpoint. What is the most likely reason for the 403 error?

Question 122hardmultiple choice

A network engineer is developing a Python script that uses the requests library to send a RESTCONF PATCH request to a Cisco IOS XE device. The script includes the header 'Content-Type: application/yang-data+json' and sends a JSON payload to update the description of an interface. The device returns HTTP 400 Bad Request. Which is the most likely cause?

Question 123hardmultiple choice

A network engineer is implementing a Python script to interact with a Cisco IOS XE device using RESTCONF. The script must authenticate using basic authentication over HTTPS and retrieve the configured hostname. Which Python code snippet correctly performs this task using the requests library?

Question 124hardmulti select

A network automation team is using the NETCONF protocol to manage a fleet of Cisco IOS XE devices. They need to ensure that configuration changes are applied atomically and that they can roll back to a previous configuration if an error occurs. Which two NETCONF capabilities must be supported and used to achieve these requirements? (Choose two.)

Question 125mediummulti select

A network engineer is designing a Python script to interact with a Cisco IOS XE device using RESTCONF. The engineer needs to perform a partial modification of the interface description without affecting other configured parameters. Which two HTTP methods and payload considerations are appropriate for this task? (Choose two.)

Question 126mediummulti select

A network engineer is building a Python script to interact with a Cisco IOS XE device using RESTCONF. The script must authenticate, retrieve interface configuration, and handle the response. Which two actions are required to successfully complete this task? (Choose two.)

Question 127hardmultiple choice

A network engineer is using the YANG Suite tool to explore YANG models on a Cisco IOS XE device. The engineer wants to retrieve the operational state of all interfaces using NETCONF. The engineer sends a <get> RPC with a filter that selects the 'interfaces-state' container from the ietf-interfaces YANG module. The device returns an empty response. The engineer confirms that interfaces are up and running. What is the most likely reason for the empty response?

Question 128easymultiple choice

A network engineer is using Cisco SD-WAN vManage APIs to automate the deployment of a new branch site. The engineer needs to retrieve a list of all devices in the overlay network. Which REST API endpoint should the engineer use?

Question 129mediummultiple choice

A network engineer is building a Python script to configure a Cisco IOS XE device via RESTCONF. The script sends a POST request to the URI https://10.1.1.1/restconf/data/ietf-interfaces:interfaces with the JSON payload shown. The device returns HTTP 415 Unsupported Media Type. Which change to the script will resolve the error?

Question 130hardmultiple choice

A network engineer is using Ansible to manage a fleet of Cisco IOS XE devices. The playbook uses the 'ios_config' module to push a set of configuration lines. After running the playbook, the engineer notices that the configuration changes are not being saved to the startup configuration, and the devices revert to the previous configuration after a reboot. Which parameter should be added to the 'ios_config' task to ensure the running configuration is saved to the startup configuration?

Question 131easymultiple choice

A network engineer is using the Cisco SD-WAN vManage REST API to retrieve a list of all devices in the overlay network. The engineer writes a Python script that sends a GET request to https://vmanage-ip/dataservice/device but receives a 401 Unauthorized error. What is the most likely reason for this error?

Question 132mediummultiple choice

A network engineer is using the Cisco DNA Center Intent API to create a new site hierarchy. The engineer sends a POST request to /dna/intent/api/v1/site with a JSON payload defining the site. The API returns a 202 Accepted response with a task ID. What should the engineer do next to confirm the site was created successfully?

Question 133easymultiple choice

A network administrator wants to use a declarative, agentless automation tool to push VLAN configurations to a group of Cisco IOS XE switches. The tool should connect over SSH, use YAML playbooks, and require no software installation on the switches. Which tool best fits these requirements?

Question 134hardmulti select

A network automation team is designing a solution to manage configuration changes across a fleet of Cisco IOS XE devices. They want to use model-driven programmability with YANG data models. Which two protocols can be used to programmatically retrieve and modify configuration using YANG models on these devices? (Choose two.)

Question 135easymultiple choice

A network engineer is new to automation and wants to start by writing a simple Python script to interact with a Cisco IOS XE device using RESTCONF. Which Python library is specifically designed to simplify sending HTTP requests to RESTCONF APIs?

Question 136mediummultiple choice

A network engineer is using the YANG Suite tool to explore YANG models supported by a Cisco IOS XE device. The engineer wants to retrieve the list of available YANG modules from the device using NETCONF. Which NETCONF operation should be used to obtain this information?

Question 137mediummulti select

A network engineer is designing an automation solution that uses Python with the ncclient library to manage Cisco IOS XE devices via NETCONF. The engineer needs to ensure that the solution can retrieve interface configurations, modify them, and verify the changes. Which two NETCONF operations should the engineer use to accomplish these tasks? (Choose two.)

Question 138mediummultiple choice

A network engineer is developing a Python script to retrieve interface statistics from a Cisco IOS XE device using RESTCONF. The script sends a GET request to the URI https://10.1.1.1/restconf/data/ietf-interfaces:interfaces. The device returns a 401 Unauthorized error. The engineer verifies that the RESTCONF API is enabled and the URI is correct. Which action should the engineer take to resolve this issue?

Question 139hardmulti select

A network engineer is designing a Python script that uses the YANG models supported by a Cisco IOS XE device to configure interface descriptions via RESTCONF. The engineer wants to ensure the script uses the correct data model and avoids errors. Which TWO actions should the engineer take? (Choose two.)

Question 140mediummultiple choice

A network engineer is writing a Python script using the ncclient library to retrieve the running configuration from a Cisco IOS XE device. The script connects using NETCONF over SSH on port 830. The engineer wants to filter the response to only include interface configuration data. Which NETCONF operation should be used to retrieve the configuration with a filter?

Question 141hardmultiple choice

A network engineer is developing a Python script to configure OSPF on a Cisco IOS XE device using the NETCONF protocol. The script establishes an SSH session and sends a <edit-config> RPC with the target datastore set to 'running'. The configuration is applied successfully, but after a device reload, the OSPF configuration is missing. The engineer verifies that the <edit-config> operation included the 'default-operation' parameter set to 'merge'. What is the most likely reason for the configuration loss?

Question 142mediummultiple choice

A network engineer is using Python with the ncclient library to configure a Cisco IOS XE device via NETCONF. The script connects successfully but receives an RPC error when trying to apply a candidate configuration. The engineer inspects the device capabilities and sees 'urn:ietf:params:netconf:capability:candidate:1.0' is NOT listed. What is the most likely reason for the failure?

Question 143easymultiple choice

A network automation team is evaluating configuration management tools. They need a tool that uses a declarative, agentless architecture and communicates over SSH to push configuration to Cisco IOS XE devices. Which tool best fits these requirements?

Question 144easymultiple choice

A network administrator is new to automation and wants to start using Ansible to manage a group of Cisco IOS XE switches. The administrator has installed Ansible on a Linux control node and created an inventory file listing the switches. The administrator now needs to create a playbook that will gather facts from the switches and display them. Which Ansible module should the administrator use in the playbook to collect operational facts from the Cisco IOS XE devices?

Question 145mediummultiple choice

A network engineer is writing a Python script to retrieve the list of interfaces from a Cisco IOS XE device using RESTCONF. The script sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces and receives a 401 Unauthorized response. The device is reachable, and RESTCONF is enabled. The engineer verifies that the username and password are correct. Which action should the engineer take to resolve the issue?

Question 146easymultiple choice

A network administrator is new to automation and wants to use a simple, agentless tool to push configuration changes to Cisco IOS XE devices. The administrator prefers using YAML for playbook definitions and wants to avoid installing software on the managed devices. Which tool best fits these requirements?

Question 147hardmulti select

A network automation team is evaluating RESTCONF as a replacement for CLI scraping on Cisco IOS XE devices. They need to understand the operational characteristics of RESTCONF to design their tooling. Which two statements accurately describe RESTCONF behavior on Cisco IOS XE? (Choose two.)

Question 148hardmultiple choice

A network automation team uses a Python script with the ncclient library to configure a Cisco IOS XE device via NETCONF. The script establishes a session and sends an <edit-config> RPC with a candidate datastore. After sending the RPC, the script immediately sends a <commit> RPC, but the device returns an error indicating that the candidate datastore is not supported. Which statement explains the cause of this error?

Question 149mediummultiple choice

A network engineer is writing a Python script to retrieve the operational status of all GigabitEthernet interfaces from a Cisco IOS XE device using NETCONF. The script establishes an SSH session to the device on port 830 and sends a <get> RPC with a subtree filter. The device responds with an <rpc-error> indicating 'unknown-element' for the filter. Which action should the engineer take to resolve this issue?

Question 150easymultiple choice

A network administrator is introducing infrastructure as code for Cisco IOS XE switches. The team wants to store device configurations in a version-controlled repository and apply changes only after peer review. They need a tool that can enforce the desired state and report drift without making changes during the review phase. Which tool should they use to meet these requirements?

Question 151mediummultiple choice

A network engineer is using Ansible to manage a group of Cisco IOS XE devices. The engineer wants to ensure that the playbook can securely connect to the devices without prompting for passwords and without storing passwords in plaintext in the playbook. Which method should be used to provide the credentials?

Question 152mediummultiple choice

A network engineer is using a Python script to retrieve the operational status of all interfaces on a Cisco IOS XE device via RESTCONF. The script sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces-state but receives an HTTP 401 Unauthorized response. The engineer can successfully ping the device and has verified that the RESTCONF feature is enabled with 'restconf' in global configuration. Which action will resolve the issue?

Question 153easymultiple choice

A network engineer is using the Python requests library to interact with a Cisco IOS XE device's RESTCONF API. The engineer wants to retrieve the configured hostname. Which HTTP method and URI should be used?

Question 154hardmultiple choice

A network automation team is using the Cisco SD-WAN vManage REST API to monitor the status of WAN Edge devices. The team writes a Python script that authenticates using basic authentication and then sends a GET request to /dataservice/device. The script receives a 401 Unauthorized error even though the credentials are correct. The team verifies that the user account has the 'admin' role. What is the most likely cause of the authentication failure?

Question 155easymultiple choice

A network engineer is writing a Python script using the ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The script uses the <get-config> RPC with the source datastore set to 'running'. After running the script, the engineer receives a large XML response but needs to extract only the interface configuration. Which NETCONF capability allows the engineer to filter the response to include only specific configuration data?

Question 156easymultiple choice

A network engineer is writing a Python script to query interface statistics from a Cisco IOS XE device using NETCONF. The script must establish a secure session that supports configuration and state data retrieval. Which transport protocol and port should the engineer use for the NETCONF session?

Question 157hardmultiple choice

A network automation team is using Ansible to push configuration changes to a fleet of Cisco IOS XE devices. The playbook uses the 'ios_config' module with the 'backup: yes' option. During a recent run, the playbook failed on one device due to a syntax error in the configuration lines. The team wants to ensure that if a failure occurs, the device automatically reverts to its previous configuration without manual intervention. Which Ansible feature should be used to achieve this?

Question 158hardmulti select

A network automation engineer is using NETCONF to configure a Cisco IOS XE device. The engineer wants to ensure that the configuration changes are applied atomically and that the device can roll back to a previous configuration if an error occurs. Which two NETCONF capabilities should the engineer verify are supported by the device? (Choose two.)

Question 159hardmultiple choice

A network automation team is using YANG models with NETCONF to configure a Cisco IOS XE device. They want to change the description of a loopback interface. The engineer writes an <edit-config> RPC with the 'operation' attribute set to 'merge' on the <description> leaf. The RPC is accepted, but the description is not changed. The engineer verifies that the YANG path is correct and that the interface exists. What is the most likely reason the description was not updated?

Question 160mediummultiple choice

A network automation engineer is using the ncclient Python library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The engineer writes a script that establishes a NETCONF session and sends a <get-config> RPC. However, the script fails with an error indicating the source datastore is not specified. What should the engineer do to correct the script?

Question 161hardmultiple choice

A network engineer is using Cisco DNA Center's Intent API to automate the configuration of a new branch site. The engineer needs to create a new site hierarchy, assign devices to the site, and apply a template that configures VLANs and QoS. The engineer writes a Python script that calls the DNA Center APIs in sequence. After running the script, the site is created, and devices are assigned, but the template application fails with an error indicating that the device is not provisioned. What is the most likely missing step in the automation workflow?

Question 162mediummultiple choice

A network engineer is using a Python script with the ncclient library to retrieve interface statistics from a Cisco IOS XE router. The script connects successfully, but when it sends a <get> RPC, the router returns an error stating that the requested data model is not supported. The engineer verifies that the YANG model is present on the device. What is the most likely cause of this error?

Question 163mediummultiple choice

A network engineer is writing a Python script to retrieve interface statistics from a Cisco IOS XE device using RESTCONF. The script sends a GET request to https://10.1.1.1/restconf/data/ietf-interfaces:interfaces but receives an HTTP 406 Not Acceptable response. The engineer verifies that the device has RESTCONF enabled and the credentials are correct. Which action should the engineer take to resolve this issue?

Question 164easymultiple choice

A network engineer is learning about data models used in network automation. The engineer needs to choose a data modeling language that is human-readable, supports hierarchical data structures, and is used by NETCONF and RESTCONF to define the structure of configuration and state data. Which data modeling language should the engineer choose?

Question 165mediummultiple choice

A network automation engineer is using the Cisco DNA Center Intent API to retrieve a list of all network devices. The engineer sends a GET request to the URL https://dnac.example.com/api/v1/network-device but receives a 401 Unauthorized error. The engineer has already obtained a valid authentication token. What is the most likely cause of the error?

Question 166easymultiple choice

A network engineer is new to automation and wants to use a Python library that provides a simple, high-level interface for interacting with network devices, including Cisco IOS XE, without dealing with low-level SSH or NETCONF details. The engineer needs to quickly script configuration changes and command execution. Which Python library is best suited for this requirement?

Question 167mediummultiple choice

A network engineer is writing a Python script using the requests library to interact with a Cisco IOS XE device's RESTCONF API. The script needs to authenticate using basic authentication and retrieve interface details. The engineer writes the following code snippet:

import requests

url = 'https://192.168.1.1/restconf/data/ietf-interfaces:interfaces' headers = {'Accept': 'application/yang-data+json'} response = requests.get(url, headers=headers, auth=('admin', 'password'), verify=False)

However, the script returns a 401 Unauthorized error. What is the most likely cause?

Question 168mediummultiple choice

A network engineer is using Cisco DNA Center's Intent API to create a new site hierarchy for a branch office. The engineer sends a POST request to the /dna/intent/api/v1/site endpoint with a JSON payload containing the site name and parent site. The API returns HTTP 202 Accepted. The engineer immediately sends a GET request to retrieve the newly created site but receives a 404 Not Found. What is the most likely explanation?

Question 169easymultiple choice

A network engineer is new to automation and wants to use a simple, agentless tool to push configuration changes to a group of Cisco IOS XE switches. The engineer prefers to write playbooks in YAML and use SSH for connectivity. Which tool should the engineer choose?

Question 170hardmulti select

A network automation team is evaluating YANG models to manage Cisco IOS XE devices. They need to ensure that the models they choose can be used with both NETCONF and RESTCONF. Which two statements about YANG models are true in this context? (Choose two.)

Question 171hardmultiple choice

A network engineer is using the RESTCONF API on a Cisco IOS XE device to configure an interface. The engineer sends a PATCH request to the URL https://device/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1 with the following JSON payload: {"ietf-interfaces:interface": {"description": "Uplink to Core"}}. The request returns a 400 Bad Request error. What is the most likely reason for this error?

Question 172easymultiple choice

A network engineer is using the Cisco SD-WAN vManage REST API to retrieve a list of all devices. The engineer sends a GET request to /dataservice/device but receives a 403 Forbidden error. The engineer has already authenticated successfully and obtained a valid session cookie. What is the most likely reason for this error?

Question 173mediummultiple choice

A network engineer is implementing a CI/CD pipeline for network configuration changes. The pipeline uses Git for version control and Jenkins for orchestration. The engineer wants to ensure that configuration changes are validated before deployment to production devices. Which approach best integrates validation into the pipeline?

Question 174hardmultiple choice

A network automation team is using the Cisco DNA Center Intent API to create a new site hierarchy and assign devices. The API call to create the site returns HTTP 202 Accepted, but a subsequent call to assign a device to that site fails with an error that the site does not exist. The team is polling the task endpoint but has not yet received a success status. What is the most likely explanation?

Question 175mediummultiple choice

A network team is using Ansible to manage a fleet of Cisco IOS XE switches. The team wants to ensure that the Ansible playbook can connect to the switches without prompting for passwords and without storing passwords in plaintext. The team has generated an SSH key pair and copied the public key to the switches. Which Ansible connection method and authentication mechanism should the team use?

Question 176hardmultiple choice

A network automation engineer is using Cisco DNA Center's Intent API to retrieve a list of all network devices. The engineer writes a Python script that sends a GET request to the /dna/intent/api/v1/network-device endpoint. The script receives an HTTP 403 Forbidden response. The engineer has verified that the username and password are correct and that the user has the SUPER-ADMIN-ROLE. What is the most likely cause of the issue?

Question 177mediummultiple choice

A network engineer wants to automate configuration backups for a fleet of Cisco IOS XE devices using Ansible. The engineer uses the ios_config module with the backup: yes option and sets the backup directory via the ANSIBLE_BACKUP_DIR environment variable. After running the playbook, the engineer finds that no backup files are created on the control node. What is the most likely cause?

Question 178easymultiple choice

A network administrator is using Cisco SD-WAN to manage a large enterprise network. They want to automate the deployment of a new branch site using a template. Which component of Cisco SD-WAN is responsible for pushing the configuration to the WAN edge devices?

Question 179mediummultiple choice

A network engineer is writing a Python script to retrieve the configured hostname from a Cisco IOS XE device using RESTCONF. The device has RESTCONF enabled, and the engineer sends a GET request to https://10.1.1.1/restconf/data/Cisco-IOS-XE-native:native/hostname with the header 'Accept: application/yang-data+json'. However, the request fails with HTTP 401 Unauthorized. The engineer verifies that the device is reachable and RESTCONF is enabled. What is the most likely reason for the failure?

Question 180hardmultiple choice

A network automation engineer is using the ncclient Python library to retrieve configuration from a Cisco IOS XE device via NETCONF. The engineer sends a <get-config> RPC with a filter for the interface configuration. The device returns a large XML response, but the engineer only needs the interface description and IP address. Which NETCONF capability should the engineer use to filter the response to only the required data?

Question 181mediummulti select

Read the full VPN explanation →

A network engineer is evaluating Cisco SD-WAN (Viptela) for a large enterprise. The engineer needs to automate the deployment of vEdge routers using zero-touch provisioning. Which two components are required to enable zero-touch provisioning for vEdge routers? (Choose two.)

Question 182mediummultiple choice

A network engineer is using the Cisco SD-WAN vManage API to automate the creation of a new VPN template. The engineer sends a POST request to /dataservice/template/feature with a JSON body and receives an HTTP 400 Bad Request error. The JSON payload is syntactically valid. What is the most likely cause of this error?

Question 183hardmultiple choice

A network automation team is using NETCONF to configure a Cisco IOS XE device. They send an <edit-config> RPC with the default-operation set to 'merge'. The target configuration already has an interface GigabitEthernet0/1 with an IP address of 10.1.1.1/24. The RPC payload includes a new IP address of 10.1.1.2/24 for the same interface. What will be the result on the device?

Question 184mediummultiple choice

A network engineer at a logistics company is building a Python script that must retrieve the running configuration of a Cisco IOS XE router without parsing CLI screen-scraping output. The engineer wants a programmatic, model-driven interface that returns structured data over HTTPS. Which approach best satisfies this requirement?

Question 185mediummultiple choice

A network engineer is using the ncclient Python library to send NETCONF RPCs to a Cisco IOS XE device. The engineer wants to lock the running configuration datastore before making changes to prevent other NETCONF sessions from modifying it concurrently. Which NETCONF operation should be used?

Question 186mediummultiple choice

A network automation engineer is developing a Python script that will retrieve interface statistics from a Cisco IOS XE device using NETCONF. The engineer needs to discover which YANG models are supported by the device before constructing the RPC. Which NETCONF capability exchange message should the script send first to obtain this information?

Question 187hardmultiple choice

A network engineer is using Ansible to manage a fleet of Cisco IOS XE devices. The engineer wants to ensure that the playbook is idempotent and only makes changes when necessary. The playbook uses the ios_config module with a set of lines to configure an interface. After running the playbook, the engineer notices that the task always reports 'changed' even when the configuration is already present. What is the most likely reason for this behavior?

Question 188mediummultiple choice

A network automation engineer is using the Cisco DNA Center Intent API to retrieve a list of all network devices. The engineer needs to authenticate to the API. Which authentication method should be used to obtain a token for subsequent API calls?

Question 189hardmultiple choice

A healthcare provider runs a Python script that issues a RESTCONF PATCH to a Cisco IOS XE switch to modify an interface description. The device returns HTTP 400 with an error-tag of 'invalid-value'. The JSON body is syntactically valid and the URI targets the correct interface. Which action most directly resolves this error?

Question 190easymultiple choice

A retail company wants its network engineers to push consistent OSPF configurations to dozens of Cisco IOS XE routers using a declarative, agentless automation tool that connects over SSH and does not require installing software on the managed devices. Which tool best fits these requirements?

Question 191hardmulti select

A network engineer is designing a Python script to interact with a Cisco Catalyst Center (formerly DNA Center) appliance using its Intent API. The script must retrieve a list of all network devices and then update the location of a specific device. Which two steps are required to authenticate and authorize the API requests? (Choose two.)

Question 192mediummulti select

A network automation team is evaluating YANG as the data modeling language underpinning its Cisco IOS XE automation. Which two statements accurately describe YANG in this context? (Choose two.)

Question 193hardmultiple choice

A network engineer is using the Cisco Catalyst Center (formerly DNA Center) Intent API to retrieve a list of all network devices. The engineer sends a GET request to /dna/intent/api/v1/network-device but receives a 401 Unauthorized error. The engineer has already obtained a valid authentication token from /dna/system/api/v1/auth/token. What is the most likely reason for the 401 error?

Question 194easymultiple choice

A network engineer is using a Python script with the requests library to retrieve interface information from a Cisco IOS XE device via RESTCONF. The script sends a GET request to https://192.168.1.1/restconf/data/ietf-interfaces:interfaces but receives a 401 Unauthorized error. The engineer has verified that the device has RESTCONF enabled and the URL is correct. Which action should the engineer take to resolve the error?

Question 195mediummultiple choice

A financial services firm wants to automate configuration backups of 200 Cisco IOS XE switches. The team prefers an imperative, script-driven approach where Python code calls a structured API and stores the retrieved configuration in a version-controlled repository. Which method best aligns with this goal?

Question 196easymultiple choice

A network engineer is new to automation and wants to use a Python script to configure a Cisco IOS XE device. The engineer prefers a protocol that uses HTTP methods and JSON for data encoding, as it is easier to read and debug. Which protocol should the engineer choose?

Question 197hardmultiple choice