CCNP Automation Practice Question
A network engineer is new to network automation and wants to use a declarative, agentless tool that uses YAML playbooks to push configuration to Cisco IOS devices over SSH. Which tool should the engineer choose?
⚠ Common exam trap
The trap here is assuming that any declarative automation tool uses YAML playbooks and is agentless, when in fact Ansible is uniquely characterized by these traits in common network automation contexts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ansible
Ansible is known for being agentless, using YAML playbooks, and connecting over SSH. These features align perfectly with the engineer's requirements. Puppet and Chef typically require agents and use different configuration languages, while SaltStack, though YAML-based, uses a different architecture and terminology.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Puppet
Why it's wrong here
Puppet is a declarative automation tool, but it typically requires an agent installed on managed nodes, although it can be agentless with SSH for some modules. However, it uses its own DSL, not YAML, and is less commonly used for network device configuration in this manner.
- ✗
SaltStack
Why it's wrong here
SaltStack is a declarative automation tool that can be agentless or agent-based, but it uses YAML for state files, not playbooks, and often requires a master-minion architecture. It is less commonly used for network device configuration compared to Ansible.
- ✓
Ansible
Why this is correct
Ansible is a declarative, agentless automation tool that uses YAML playbooks and connects to devices over SSH. It does not require an agent on the managed device, making it ideal for network automation. The scenario describes exactly these characteristics.
- ✗
Chef
Why it's wrong here
Chef is a declarative automation tool that uses Ruby-based recipes and typically requires an agent on managed nodes. It is not agentless and does not use YAML playbooks, so it does not match the scenario requirements.
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.