350-401 Python for Network Automation — Timed 10 Questions

Question 1

A network engineer is writing a Python script to automate the backup of running configurations from a list of 50 Cisco IOS-XE devices. The script uses the netmiko library and a for loop to connect to each device, execute 'show run', and write the output to a file. After running the script, the engineer notices that the script fails on the 15th device with a timeout error, and the remaining devices are not processed. The engineer wants to ensure that if one device fails, the script continues with the next device. What is the best way to modify the script?

Accepted Answer

Wrap the connection and backup logic inside a try-except block within the for loop.. The correct answer uses a try-except block to catch exceptions and continue the loop. Option A is incorrect because removing the timeout will not prevent the script from stopping on failure. Option B is incorrect because multithreading adds complexity and does not inherently handle failures gracefully. Option D is incorrect because a while loop does not solve the issue of handling exceptions within the loop.

Answer

Increase the global timeout value in the netmiko connection handler.

Answer

Use the concurrent.futures module to run each connection in a separate thread.

Answer

Replace the for loop with a while loop that retries the connection three times before moving on.

Question 2

An engineer is using the Cisco DNA Center REST API to retrieve a list of network devices and their health scores. The engineer writes a Python script using the requests library. The script successfully retrieves data for the first 100 devices, but when trying to get the next 100, the API returns an empty list. The engineer checks the API documentation and finds that the endpoint supports pagination with the 'offset' and 'limit' parameters. The current script does not handle pagination. What should the engineer do to retrieve all devices?

Accepted Answer

Write a loop that increments the 'offset' parameter by the 'limit' value until all pages are retrieved.. The correct answer implements a loop that increments the offset parameter until all pages are retrieved. Option A is incorrect because increasing the limit may exceed the maximum allowed value. Option B is incorrect because the API does not return a 'next' link in this scenario. Option D is incorrect because using a different library does not solve the pagination issue.

Answer

Increase the 'limit' parameter to 1000 in a single API call.

Answer

Use the 'next' URL from the response headers to automatically fetch the next page.

Answer

Switch to using the Cisco DNA Center Python SDK which handles pagination automatically.

Question 3

A network engineer is automating the configuration of VLANs on a Cisco Nexus 9000 switch using Python and the NX-API. The engineer sends a Python dictionary with the CLI commands to the API and receives a successful response. However, when checking the switch, the VLANs are not created. The engineer verifies that the credentials and IP address are correct, and the API is enabled. The engineer also notices that the API response contains a 'code' field of '200' and a 'result' field that shows the command output. What is the most likely cause of the issue?

Accepted Answer

The engineer used the 'show' message type in the API request instead of 'cli_conf'.. The correct answer is that the engineer used the 'show' command type instead of 'cli_conf' for configuration commands. Option A is incorrect because a 200 response indicates the API call was successful. Option B is incorrect because the commands are valid. Option D is incorrect because the API does not require a commit command by default.

Answer

The API response code of 200 indicates an error, and the engineer should check for a different status code.

Answer

The VLAN commands are incorrect; the engineer should use 'vlan 10' instead of 'vlan 10-20'.

Answer

The switch requires a 'commit' command after configuration changes via NX-API.

Question 4

A junior engineer is tasked with writing a Python script that uses the Cisco IOS-XE RESTCONF API to retrieve the hostname of a router. The engineer uses the requests library and sends a GET request to the URL 'https://router/restconf/data/Cisco-IOS-XE-native:native/hostname'. The request returns a 404 Not Found error. The engineer has verified that the RESTCONF service is enabled and the credentials are correct. What is the most likely reason for the 404 error?

Accepted Answer

The URL path should be '/restconf/data/Cisco-IOS-XE-native:hostname' instead of including 'native' in the path.. The correct answer is that the URL path is incorrect; the correct path should include the module namespace correctly. Option A is incorrect because the hostname is a valid data node. Option B is incorrect because the Content-Type header is not required for GET requests. Option D is incorrect because the error is not related to authentication.

Answer

The hostname data node does not exist in the YANG model.

Answer

The engineer forgot to include the 'Accept: application/yang-data+json' header in the request.

Answer

The engineer must use a different HTTP method like POST to retrieve the hostname.

Question 5

A network engineer is using the Cisco Meraki Dashboard API to automate the creation of VLANs across multiple networks. The engineer writes a Python script that uses the 'createNetworkVlan' endpoint. The script runs successfully for the first few networks, but then starts returning HTTP 429 errors. The engineer checks the API documentation and finds that the Meraki API has rate limits. The script currently sends requests as fast as possible. What should the engineer implement to avoid hitting the rate limit?

Accepted Answer

Add a retry mechanism with exponential backoff when a 429 response is received.. The correct answer is to implement exponential backoff with retries. Option A is incorrect because reducing the number of networks does not solve the rate limit issue for the remaining networks. Option B is incorrect because increasing the limit is not possible; the limit is enforced by the API. Option D is incorrect because using a different API version does not change the rate limit policy.

Answer

Reduce the number of networks being processed in a single script run.

Answer

Increase the 'per-second' rate limit by setting a higher value in the API request header.

Answer

Switch to using the Meraki API version 1.0 which has no rate limits.

Question 6

An engineer is writing a Python script to parse the output of 'show ip interface brief' from multiple Cisco routers. The engineer uses the netmiko library to collect the output and then uses regular expressions to extract the interface name, IP address, and status. The script works correctly for most routers, but on one router, the output format is slightly different (e.g., extra spaces or different column headers). The engineer wants to make the parsing more robust. What is the best approach?

Accepted Answer

Use the 'textfsm' library with a pre-defined template for 'show ip interface brief'.. The correct answer is to use the 'textfsm' library with a pre-defined template for 'show ip interface brief'. Option A is incorrect because it is not scalable for many devices. Option B is incorrect because it does not handle format variations. Option D is incorrect because it does not change the parsing logic.

Answer

Write a custom parser that handles each router's output format individually.

Answer

Use the 'split()' method to tokenize each line and then extract the relevant fields by position.

Answer

Use the 're' module with a more complex regular expression that accounts for optional whitespace.

Question 7

A network engineer is automating the deployment of a new VLAN configuration across 100 Cisco IOS-XE switches using Ansible. The engineer writes a playbook that uses the 'ios_config' module. The playbook runs, but the engineer notices that the configuration is applied to only 50 switches before the playbook stops with an error. The error message indicates that one switch is unreachable. The engineer wants to ensure that the playbook continues with the remaining switches even if some are unreachable. What Ansible configuration should the engineer use?

Accepted Answer

Set 'ignore_errors: yes' on the task that configures the VLAN.. The correct answer is to set 'ignore_errors: yes' on the task or use 'max_fail_percentage'. Option A is incorrect because increasing the timeout does not prevent the playbook from stopping. Option B is incorrect because 'gather_facts: no' is unrelated. Option D is incorrect because 'serial' controls batch size, not error handling.

Answer

Set 'timeout: 60' in the playbook to allow more time for connections.

Answer

Set 'gather_facts: no' to speed up the playbook and avoid timeouts.

Answer

Set 'serial: 10' to run the playbook on 10 switches at a time.

Question 8

An engineer is using the Cisco pyATS framework to test the configuration of a new QoS policy on a router. The engineer writes a testbed file and a test script that logs into the router, applies the configuration, and then verifies the output of 'show policy-map interface'. The test script fails because the verification step cannot find the expected output. The engineer confirms that the configuration was applied successfully. What is the most likely cause of the failure?

Accepted Answer

The test script does not include a sleep or wait mechanism after applying the configuration.. The correct answer is that the test script is not waiting long enough for the QoS policy to take effect. Option A is incorrect because pyATS does not require a specific Python version. Option B is incorrect because the testbed file is correct. Option D is incorrect because the script is using the correct library.

Answer

The pyATS library requires Python 3.8 or later, and the engineer is using an older version.

Answer

The testbed file has incorrect credentials for the router.

Answer

The test script uses the 'genie' library instead of 'pyats' for parsing.

Question 9

A network engineer is automating the collection of syslog messages from a Cisco ASA firewall using a Python script that connects via SSH and runs 'show log'. The script uses the paramiko library. The script works for a few minutes, but then the SSH connection drops with an error 'Server connection dropped'. The engineer suspects that the ASA is closing the connection due to inactivity. What is the best way to keep the connection alive?

Accepted Answer

Set the 'keepalive' parameter in the paramiko Transport object to send keepalive packets every 30 seconds.. The correct answer is to enable keepalive packets in the SSH transport. Option A is incorrect because increasing the buffer size does not prevent disconnection. Option B is incorrect because running a command repeatedly may not be efficient and could interfere with the log collection. Option D is incorrect because using a different library does not automatically solve the keepalive issue.

Answer

Increase the buffer size in the paramiko SSH client.

Answer

Run a dummy command like 'show clock' every 30 seconds to keep the session active.

Answer

Use the netmiko library instead, which automatically handles keepalives.

Question 10

A network engineer writes the following Python script using Netmiko to configure a Cisco IOS-XE device:

```python
from netmiko import ConnectHandler

device = {
    'device_type': 'cisco_ios',
    'ip': '192.168.1.1',
    'username': 'admin',
    'password': 'cisco123',
}

connection = ConnectHandler(**device)
output = connection.send_command('show ip interface brief')
print(output)
connection.disconnect()
```

What is the primary issue with this script?

Accepted Answer

The script will fail because the device is not in enable mode, and 'show ip interface brief' may not execute or return restricted output.. The script does not enable privileged EXEC mode (enable) before running 'show ip interface brief', which requires privilege level 15. Netmiko's send_command does not automatically enter enable mode unless the device_type expects it, and cisco_ios requires an explicit enable() call or use of secret parameter.

Answer

The script will fail because the device_type should be 'cisco_ios_xe' for IOS-XE devices.

Answer

The script will fail because the send_command method cannot be used for show commands; it requires send_command_timing.

Answer

The script will fail because the password is not encrypted; Netmiko requires an encrypted password.