CCNA AI and Network Operations Practice Question
A network engineer is evaluating monitoring technologies for a large enterprise network that requires high-frequency, low-latency traffic data collection with support for custom fields. The solution must also support encryption and authentication to prevent tampering. Which technology best meets these requirements?
⚠ Common exam trap
Cisco often tests the misconception that SNMPv3 or NetFlow with custom records can provide both high-frequency push data and encryption, when in fact streaming telemetry with gRPC and TLS is the only solution that natively combines push-based collection, custom fields, and transport-layer security.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement streaming telemetry using gRPC with TLS and YANG data models.
Streaming telemetry using gRPC with TLS and YANG data models is correct because it provides high-frequency, low-latency push-based data collection, supports custom fields via YANG models, and ensures encryption and authentication through TLS. This meets all the requirements, unlike polling-based or unencrypted alternatives.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure SNMPv2c with community strings and polling every 30 seconds.
Why it's wrong here
SNMPv2c relies on plaintext community strings passed in every packet, offering no encryption, and its polling model means data is only collected at intervals, missing high-frequency or event-driven changes. A 30-second polling interval introduces significant latency and overhead, and it cannot push data on demand or support custom data models for granular, real-time metrics. This approach fundamentally lacks the low-latency, push-based architecture needed for streaming telemetry.
- ✓
Implement streaming telemetry using gRPC with TLS and YANG data models.
Why this is correct
Streaming telemetry with gRPC over TLS delivers continuous, high-frequency push updates, avoiding the overhead of repeated polling requests and reducing latency to near-real-time. The use of YANG data models provides a structured, vendor-neutral schema that supports custom fields and hierarchical data, unlike fixed-format flow records. TLS ensures both encryption and authentication, protecting the data stream in transit, which makes this the correct choice for modern scalable network monitoring.
- ✗
Deploy NetFlow v9 with custom flow records and SNMPv3 for encryption.
Why it's wrong here
NetFlow v9 is designed for export of sampled flow records, not for real-time streaming of device state or telemetry; its pull-based or scheduled export adds delay and is not event-driven. Adding SNMPv3 for encryption does not protect NetFlow data because they are separate protocols, and NetFlow v9 itself has no built-in security. Custom flow records still operate within the rigid flow template structure, falling short of the flexible, YANG-modeled data supported by gRPC streaming.
- ✗
Use IPFIX with UDP export and add authentication via MD5 hashing.
Why it's wrong here
IPFIX over UDP cannot provide the reliable, low-latency push required for streaming telemetry; UDP is connectionless and subject to packet loss without retransmission. MD5 hashing only authenticates message integrity, not confidentiality, and IPFIX templates must be exchanged out-of-band, adding complexity. Furthermore, IPFIX is flow-based, not a mechanism for continuous model-driven state streaming.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Implement streaming telemetry using gRPC with TLS and YANG data models.Correct answer▾
Why this is correct
Streaming telemetry with gRPC over TLS delivers continuous, high-frequency push updates, avoiding the overhead of repeated polling requests and reducing latency to near-real-time. The use of YANG data models provides a structured, vendor-neutral schema that supports custom fields and hierarchical data, unlike fixed-format flow records. TLS ensures both encryption and authentication, protecting the data stream in transit, which makes this the correct choice for modern scalable network monitoring.
✗Configure SNMPv2c with community strings and polling every 30 seconds.Wrong answer — click to see why▾
Why this is wrong here
SNMPv2c uses community strings transmitted in plain text, lacking encryption and authentication. Polling every 30 seconds is low-frequency and cannot provide high-frequency, low-latency data collection required for real-time monitoring.
Why candidates choose this
Students may confuse SNMP polling with streaming telemetry, thinking that frequent polling can achieve similar results, but polling introduces latency and overhead, and SNMPv2c lacks security.
✗Deploy NetFlow v9 with custom flow records and SNMPv3 for encryption.Wrong answer — click to see why▾
Why this is wrong here
NetFlow v9 is export-based and not a real-time push mechanism; it typically sends data in batches, introducing latency. SNMPv3 encryption does not apply to NetFlow data, so the combination does not provide secure, high-frequency streaming.
Why candidates choose this
NetFlow is a well-known monitoring technology, and students might think combining it with SNMPv3 adds security, but NetFlow itself does not support streaming telemetry's low-latency push model.
✗Use IPFIX with UDP export and add authentication via MD5 hashing.Wrong answer — click to see why▾
Why this is wrong here
IPFIX over UDP lacks built-in encryption, making data vulnerable to interception. MD5 hashing provides integrity but not encryption or authentication for the entire data stream, failing to meet the security requirements.
Why candidates choose this
IPFIX is an extension of NetFlow and supports custom fields, so students may assume it can be secured with hashing, but UDP transport and lack of encryption make it unsuitable for tamper-proof monitoring.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Agentic AI in Network Operations
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
Key term
YANG
YANG is a data modeling language used to define the structure and constraints of data exchanged between network devices and management applications.
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.