CCNA AI and Network Operations Practice Question
A network administrator needs to configure VLANs and access ports on 200 managed switches across multiple locations. The administrator requires a solution that uses a push‑based deployment model, does not require any agent software to be installed on the switches, and can be executed from a central control node. Which automation tool is most suitable for this task?
⚠ Common exam trap
Cisco often tests the distinction between push-based (Ansible) and pull-based (Puppet, Chef) models, and the trap here is assuming that any scripting language like Python is a complete automation tool rather than a component that requires additional orchestration.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ansible
Ansible is the most suitable tool because it uses a push-based model (SSH) to apply configurations directly to network devices without requiring any agent software. It operates from a central control node, making it ideal for managing 200 switches across multiple locations with a single playbook execution.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Puppet
Why it's wrong here
Puppet uses a pull-based client-server model where managed nodes run a persistent agent that, on a configurable interval (often 30 minutes), contacts the Puppet master to request a configuration catalog. Because the agent initiates all communication, changes are not applied in real time, and you must deploy and maintain agent software on every target host. This makes Puppet inflexible for immediate, agentless SSH-driven tasks, unlike Ansible's push approach.
- ✗
Chef
Why it's wrong here
Chef is also built around a pull-based client-server architecture: nodes run the 'chef-client' agent, which periodically fetches recipes and cookbooks from a Chef server and applies them locally. It requires a separate Chef server, workstation, and bootstrap process, plus a Ruby-based DSL for writing configuration code. This heavyweight dependency chain and lack of direct push execution make Chef unsuitable when you want on-demand, agentless command execution over SSH.
- ✓
Ansible
Why this is correct
Ansible is the correct answer because it employs a push-based, agentless model over SSH (or WinRM). The control node connects directly to managed hosts, executes modules written in Python, and applies YAML playbooks in real time, with no persistent agent installed on targets. This makes Ansible ideal for immediate orchestration and configuration tasks, especially in dynamic environments where maintaining agents on every node is impractical.
- ✗
Python scripts
Why it's wrong here
Python scripts can certainly use libraries like Paramiko or Fabric to run SSH commands, but they are not a dedicated automation framework. You must manually implement host inventory, retries, error handling, idempotency, parallelism, and reporting, which is error-prone and duplicated across projects. Unlike Ansible's declarative playbooks and pre-built modules, custom Python code offers no standardized state model or dependency management, making it expensive to maintain beyond simple ad-hoc tasks.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓AnsibleCorrect answer▾
Why this is correct
Ansible is the correct answer because it employs a push-based, agentless model over SSH (or WinRM). The control node connects directly to managed hosts, executes modules written in Python, and applies YAML playbooks in real time, with no persistent agent installed on targets. This makes Ansible ideal for immediate orchestration and configuration tasks, especially in dynamic environments where maintaining agents on every node is impractical.
✗PuppetWrong answer — click to see why▾
Why this is wrong here
Requires agents and is pull‑based, failing both the agentless and push requirements.
✗ChefWrong answer — click to see why▾
Why this is wrong here
Agents are mandatory, and the pull mechanism contradicts the push requirement.
✗Python scriptsWrong answer — click to see why▾
Why this is wrong here
Lacks built‑in push‑based orchestration, idempotency, and agentless design without significant custom development, making it less suitable than a purpose‑built tool.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Agentic AI in Network Operations
Key term
SSH
SSH (Secure Shell) is a cryptographic network protocol that provides secure, encrypted communication and remote administration between two devices over an unsecured network.
Key term
CAN
A CAN (Controller Area Network) is a robust vehicle bus standard designed to allow microcontrollers and devices to communicate with each other without a host computer.
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.