350-401 Cisco DNA Center — 10 Questions

Question 1

A network engineer is deploying Cisco DNA Center in a large campus network with 5000+ devices. After initial setup, the engineer notices that the Assurance module is not receiving telemetry data from many access switches. The switches are running IOS-XE 16.12 and are reachable via SNMP. What is the most likely cause of this issue?

Accepted Answer

The switches are not configured with NETCONF/YANG or telemetry streaming.. Cisco DNA Center Assurance relies on telemetry data collected via NETCONF/YANG or gRPC, not just SNMP. If the switches are not configured for telemetry, Assurance will not receive the necessary data. SNMP is used for inventory and basic monitoring, but not for the rich telemetry required by Assurance.

Answer

The DNA Center appliance is not licensed for the Assurance module.

Answer

The switches are not running the correct IOS-XE version for DNA Center compatibility.

Answer

The SNMP community string is incorrect on the switches.

Question 2

A network engineer is using Cisco DNA Center to automate the deployment of a new VLAN across multiple access switches. The engineer creates a new network profile with the VLAN definition and assigns it to a site. However, after provisioning, the VLAN is not created on any of the switches. The engineer verifies that the devices are in the Inventory and are reachable. What is the most likely cause?

Accepted Answer

The engineer did not run the Provision workflow to push the configuration to the devices.. In Cisco DNA Center, network profiles are used to define settings, but they must be applied to a site and then the devices must be provisioned with that site's settings. If the engineer only created the profile and assigned it to a site, but did not run the provisioning workflow (which pushes the configuration to devices), the VLAN will not be created.

Answer

The VLAN ID conflicts with an existing VLAN on the switches.

Answer

The switches do not support the VLAN ID range.

Answer

The DNA Center appliance is not licensed for the Automation module.

Question 3

A network engineer is troubleshooting a wireless connectivity issue in a campus network managed by Cisco DNA Center. The Assurance module shows that several access points have high client association failures. The engineer checks the wireless controller configuration and finds that the APs are registered and functional. What is the most likely cause of the association failures?

Accepted Answer

RF interference or poor signal-to-noise ratio on the affected APs.. Cisco DNA Center Assurance can correlate client association failures with RF interference, authentication issues, or configuration mismatches. Since the APs are registered and functional, the issue is likely related to RF interference or signal quality. DNA Center's Assurance can analyze client association events and highlight RF issues as a common cause.

Answer

The APs are not running the recommended firmware version.

Answer

The wireless controller has reached its maximum number of APs.

Answer

The DNA Center Assurance module is not properly configured to monitor wireless events.

Question 4

A network engineer is deploying Cisco DNA Center in a brownfield network. The engineer wants to use DNA Center to automate the configuration of QoS policies across all access switches. After discovering the devices and adding them to Inventory, the engineer creates a QoS policy and assigns it to a site. However, when attempting to provision, DNA Center reports that the devices are in 'Compliance Error' state. What is the most likely reason?

Accepted Answer

The devices have existing QoS configurations that conflict with the new policy.. In brownfield deployments, devices may have existing configurations that conflict with the intended policies. DNA Center performs a compliance check before provisioning. If the current device configuration does not match the intended configuration (e.g., existing QoS settings), DNA Center reports a compliance error. The engineer must either update the device configuration to match the intent or modify the intent to accommodate the existing configuration.

Answer

The devices are not running a supported IOS-XE version for QoS automation.

Answer

The DNA Center appliance does not have enough storage to process the QoS policy.

Answer

The QoS policy was created with an invalid DSCP value.

Question 5

A network engineer is using Cisco DNA Center to manage a network with multiple sites. The engineer wants to ensure that all devices at a remote site have the same NTP server configuration. The engineer creates a network profile with the NTP settings and assigns it to the site. After provisioning, the engineer checks one of the switches and finds that the NTP configuration is missing. What should the engineer check first?

Accepted Answer

Verify that the device is assigned to the correct site in DNA Center.. In Cisco DNA Center, network profiles are applied to sites, but devices must be assigned to the correct site hierarchy. If a device is not assigned to the site where the profile is applied, it will not receive the configuration. The engineer should verify that the device is in the correct site within DNA Center's hierarchy.

Answer

Check if the NTP server is reachable from the device.

Answer

Ensure that the device is running a supported IOS version.

Answer

Recreate the network profile with the correct NTP settings.

Question 6

A network engineer is troubleshooting an issue where Cisco DNA Center is not sending configuration changes to a group of switches. The engineer checks the Provisioning dashboard and sees that the devices are in 'Pending' state. The engineer has already created the intent (network profile) and assigned it to the site. What is the most likely cause?

Accepted Answer

The engineer has not executed the Provision workflow to deploy the configuration.. In Cisco DNA Center, provisioning is a multi-step process. After creating intent, the engineer must explicitly run the Provision workflow to push the configuration. The 'Pending' state indicates that the intent has been defined but not yet deployed. The engineer must start the provisioning job to push the configuration to the devices.

Answer

The devices are not reachable from DNA Center.

Answer

The DNA Center appliance is out of disk space.

Answer

The network profile contains an invalid configuration.

Question 7

A network engineer is using Cisco DNA Center to monitor network health. The Assurance dashboard shows that a particular access switch has a high CPU utilization issue. The engineer wants to investigate the root cause using DNA Center's built-in tools. Which feature should the engineer use to analyze the switch's CPU utilization over time?

Accepted Answer

Use the 'Trends' feature in Assurance to view CPU utilization over time.. Cisco DNA Center's Assurance module provides historical and real-time data for network devices. The 'Trends' feature allows engineers to view metrics like CPU utilization over a selected time period, helping to identify patterns and root causes.

Answer

Use the 'Command Runner' to execute 'show process cpu' on the switch.

Answer

Use the 'Path Trace' tool to analyze traffic paths.

Answer

Use the 'Software Image Management' to check for software bugs.

Question 8

A network engineer is planning to use Cisco DNA Center to automate the deployment of a new branch office. The engineer has already discovered the devices and added them to Inventory. The engineer wants to use a template to configure the devices consistently. Which tool in DNA Center should the engineer use to create and apply the template?

Accepted Answer

Use the 'Template Editor' to create a CLI template and apply it during provisioning.. Cisco DNA Center includes a feature called 'Template Editor' (or 'Network Templates') that allows engineers to create CLI templates for device configuration. These templates can be parameterized and applied to devices during provisioning, ensuring consistent configuration across the branch.

Answer

Use the 'Policy Editor' to create a policy-based configuration.

Answer

Use the 'Command Runner' to execute commands on multiple devices.

Answer

Use the 'Network Profiles' to define the configuration.

Question 9

A network engineer is troubleshooting a problem where Cisco DNA Center is not receiving syslog messages from a critical core switch. The switch is configured to send syslog to the DNA Center's IP address. The engineer checks the DNA Center syslog collector and finds that it is enabled. What should the engineer check next?

Accepted Answer

Verify that the syslog port (UDP 514) is not blocked by a firewall or ACL.. Cisco DNA Center's syslog collector listens on specific ports (default UDP 514). If the switch is configured to send syslog but DNA Center is not receiving it, a common issue is that the syslog port is blocked by a firewall or ACL between the switch and DNA Center. The engineer should verify network connectivity and port accessibility.

Answer

Check if the syslog messages are in the correct format.

Answer

Ensure that the switch is in the Inventory and managed by DNA Center.

Answer

Restart the syslog collector service on DNA Center.

Question 10

A network engineer writes the following Python script to retrieve the list of devices from Cisco DNA Center using the REST API:

import requests
import json

url = "https://dna-center.local/dna/intent/api/v1/network-device"
headers = {
    "Content-Type": "application/json",
    "X-Auth-Token": "valid-token-here"
}
response = requests.get(url, headers=headers, verify=False)
if response.status_code == 200:
    devices = response.json()
    for device in devices["response"]:
        print(device["hostname"])
else:
    print("Error:", response.status_code)

What is the issue with this code?

Accepted Answer

The code uses verify=False which is insecure but functional; the main issue is missing pagination handling.. The code does not handle pagination. Cisco DNA Center API returns a maximum of 500 devices by default, and if more exist, the response includes a 'lastIndex' or similar field. The code only processes the first page.

Answer

The URL is incorrect; it should be /dna/intent/api/v1/network-device/list.

Answer

The code does not handle authentication properly; it should use Basic Auth.

Answer

The code fails because it does not import the json module correctly.