CCNP Automation Practice Question
A network team is evaluating automation tools to manage a large Cisco IOS XE environment. They need a tool that uses a declarative, agentless approach and can be run from a central server without installing software on managed devices. Which tool best fits this requirement?
⚠ Common exam trap
It's easy for candidates to confuse agentless operation with tools that can optionally run agentless; Ansible is inherently agentless, while others are primarily agent-based.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ansible
Ansible is agentless, using SSH or NETCONF to connect to devices, and uses declarative YAML playbooks. It runs from a central control node without installing agents on managed devices. Puppet, Chef, and SaltStack typically require agents, making them less suitable for this specific requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Puppet
Why it's wrong here
Puppet typically requires an agent installed on managed nodes, although it can operate in agentless mode via SSH for some devices. However, its primary model is agent-based, and network device support often relies on agents or proxies. For a purely agentless approach without installing software, Ansible is more suitable. Puppet is less common for Cisco network automation.
- ✗
SaltStack
Why it's wrong here
SaltStack can operate in agentless mode using SSH, but its typical architecture includes minion agents on managed nodes. It is not exclusively agentless and often requires a master-minion setup. For Cisco network automation, Ansible is more commonly used and simpler for agentless operations.
- ✗
Chef
Why it's wrong here
Chef uses an agent called chef-client that must be installed on managed nodes. It is not agentless. While Chef can manage network devices with additional components, it does not meet the requirement of no software installation on devices. Chef is more focused on server configuration management.
- ✓
Ansible
Why this is correct
Ansible is an agentless automation tool that uses SSH or NETCONF to connect to devices, requiring no agent installation on managed nodes. It uses declarative playbooks written in YAML. This aligns perfectly with the requirement for an agentless, declarative tool run from a central server. Ansible is widely used for Cisco network automation.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.