CCNP Automation Practice Question
A network administrator is new to automation and wants to use a simple, agentless tool to push configuration changes to Cisco IOS XE devices. The administrator prefers using YAML for playbook definitions and wants to avoid installing software on the managed devices. Which tool best fits these requirements?
⚠ Common exam trap
The trap here is assuming that all configuration management tools are agentless and use YAML; only Ansible is agentless by default and uses YAML for playbooks.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ansible
Ansible is an agentless automation tool that uses YAML for playbooks, making it easy to learn and use. It connects to network devices via SSH or NETCONF and does not require installing software on the devices. This aligns perfectly with the administrator's need for a simple, agentless solution.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Ansible
Why this is correct
Ansible is an agentless automation tool that uses YAML for playbooks. It connects to devices over SSH or NETCONF and does not require installing agents on managed nodes. It has modules like ios_config for Cisco IOS XE. This matches the administrator's requirements for simplicity and no agent installation.
- ✗
Chef
Why it's wrong here
Chef uses a Ruby-based DSL for recipes and typically requires an agent (chef-client) on managed nodes. It is not agentless by default and does not use YAML for playbooks. While it can automate network devices with additional tooling, it does not meet the criteria of being simple and agentless with YAML.
- ✗
SaltStack
Why it's wrong here
SaltStack can operate in an agentless mode using SSH, but it typically uses YAML for state files and may require a master and minion architecture. It is more complex to set up than Ansible. While it can be agentless, it is not as commonly used for simple network automation as Ansible, and the learning curve is steeper.
- ✗
Puppet
Why it's wrong here
Puppet typically requires an agent installed on managed nodes, although it can run agentless in some modes. Its manifests use a Ruby-based DSL, not YAML. While it can manage network devices, it is not as lightweight or agentless by default as Ansible. The requirement for no agent installation makes Puppet less suitable.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.