350-601 · domain
Automation
Practise Cisco DCCOR / CCNP Data Center Core 350-601 Automation practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice Automation questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Automation
Automation questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common Automation exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All Automation questions (128)
Click any question to see the full explanation, or start a practice session above.
An engineer uses the APIC REST API to create a new EPG. The API endpoint for creating an EPG under a specific tenant and application profile uses which object class?
Hard2Which tool provides a programmatic HTTP-based interface to execute CLI commands on Cisco Nexus switches and returns structured JSON data?
Easy3An engineer is writing a Python script using the cisco_nxapi library to configure a Nexus switch. Which of the following is a valid step to establish a connection using NX-API?
Medium4A network automation engineer is developing a CI/CD pipeline for network configuration changes. Which tool would best serve as a version control system for Infrastructure as Code (IaC) files in a data center network?
Medium5A network engineer is implementing automated configuration management using Cisco NSO (Network Services Orchestrator). The team wants to ensure that any configuration changes made directly on the devices (out-of-band) are detected and reconciled. Which NSO feature should be used?
Hard6An engineer is designing an automation solution for a large data center with multiple Cisco UCS Manager domains. Which approach best ensures idempotent configuration operations?
Hard7Which THREE statements about Cisco Network Services Orchestrator (NSO) are true?
Medium8An automation engineer is using the cisco_nxapi Python library to configure a Nexus switch. Which step is required before using the library?
Medium9Refer to the exhibit. An Ansible playbook targeting an NX-OS switch fails with this error. What is the most likely cause?
Easy10A network engineer wants to automate the deployment of a new VLAN across all Cisco Nexus switches in a data center using Python scripts. Which tool is most appropriate for this task?
Easy11A financial services company operates a multi-site data center with Cisco ACI. The automation team uses Ansible Tower to manage configurations. They have a playbook that configures EPGs using the 'aci_epg' module. The playbook runs successfully for most sites but fails on one site with the error 'Object 'uni/tn-Tenant1/ap-AP1/epg-EPG1' doesn't exist'. The engineer checks the ACI fabric and confirms that the tenant, application profile, and EPG exist on that site. The playbook uses the same credentials and variables across all sites. What is the most likely cause of the failure?
Hard12Which feature on Nexus switches provides a Linux shell environment to run Python scripts and tools directly on the switch?
Easy13In an ACI fabric, an automation engineer needs to create a new tenant with an application profile and EPG using the APIC REST API. The engineer decides to use the Cobra SDK for Python. Which statement about the Cobra SDK is true?
Hard14A data center team is automating network changes and wants to ensure that only validated configurations are deployed to production. Which CI/CD practice specifically addresses this?
Hard15A Python script using NX-API returns HTTP 401. What is the most likely cause?
Medium16A data center team is troubleshooting an automation script that uses REST API to configure a Cisco Nexus 9000 switch. The script fails with a '401 Unauthorized' error. What is the most likely cause?
Medium17An engineer is writing a Python script to interact with a Nexus 9000 switch using the NX-API REST interface. Which Python library is designed for this purpose?
Medium18A network engineer wants to use Ansible to automate the configuration of Nexus switches. Which two statements about the cisco.nxos Ansible collection are correct? (Choose two.)
Medium19What is the primary purpose of NX-API on Cisco Nexus switches in a data center automation context?
Easy20A network team is planning to automate configuration management of a brownfield Nexus 9000 fabric using YANG data models and NETCONF. Which consideration is critical when implementing this solution?
Hard21Which TWO are features of the Embedded Event Manager (EEM) with Python applets on Cisco NX-OS? (Choose two.)
Medium22Which protocol is used by NETCONF to transport YANG-defined configuration data between a controller and a network device?
Easy23A DevOps team uses Ansible to automate the configuration of Cisco Nexus switches. After running a playbook, some switches have the correct configuration but others do not. The playbook uses the 'nxos_config' module. Which action should be taken to ensure consistent configuration?
Medium24A network engineer wants to send NX-OS CLI commands via HTTP/HTTPS to a Nexus switch programmatically. Which API should be used?
Easy25A network administrator wants to send NX-OS CLI commands to a Nexus switch via HTTP/HTTPS. Which API should be used?
Easy26Which three components are part of the ACI Management Information Tree (MIT)? (Choose three.)
Hard27Match each Cisco data center high availability feature to its description.
Medium28Which TWO methods are supported by Cisco NX-API for automating Nexus switches? (Choose two.)
Easy29Refer to the exhibit. What is the intended effect of this Ansible playbook task?
Easy30A network engineer needs to automate the configuration of BGP on a Nexus switch using Ansible. Which Ansible module from the cisco.nxos collection is appropriate for managing BGP configuration?
Medium31Refer to the exhibit. A Python script is processing the response from NX-API. It attempts to extract the interface state using `response['ins_api']['outputs']['output']['body']['ROW_interface']['state']` but receives a KeyError. What is the most likely reason?
Hard32In an ACI fabric, an automation engineer needs to deploy tenant policies in an idempotent manner. Which approach is most aligned with best practices?
Hard33Which statement accurately describes the APIC REST API?
Easy34Which YANG model is commonly used for vendor-neutral network configuration and operations?
Easy35Which two of the following are benefits of using YANG data models for network automation? (Choose two.)
Medium36Which YANG-based protocol uses RESTful operations (GET, POST, PUT, DELETE) over HTTP/HTTPS for network configuration?
Easy37An engineer is writing a Python script to automate ACI fabric discovery using the APIC SDK. The script needs to wait until the fabric formation is complete before proceeding. Which approach is most reliable?
Hard38A DevOps engineer is building a CI/CD pipeline for network changes. After a configuration change is pushed to a Nexus switch, which step should be included to verify that the change did not cause any operational issues?
Hard39An organization is migrating from traditional SNMP monitoring to model-driven telemetry on their Nexus 9000 switches. They have configured a telemetry destination using gRPC and have defined sensor paths for interface statistics. After several hours, the collector (a Linux server running Telegraf) reports no data received. The engineer verifies that the switch can reach the collector via ICMP. On the switch, 'show telemetry data collector details' indicates the destination is 'connected', but the 'last data sent' timestamp is several hours old. Which action should the engineer take next?
Medium40Ansible playbook that deploys VLANs on NX-OS fails on a particular switch with 'privilege escalation required'. What should be checked first?
Medium41Arrange the steps to configure a port-channel (LAG) on a Cisco Nexus switch.
Medium42A network automation engineer wants to use EEM with Python applets on a Nexus switch to trigger a script when an interface goes down. Which EEM configuration is required to invoke the Python script?
Medium43Which THREE statements about Cisco UCS Manager automation using XML API are correct? (Choose three.)
Hard44Which THREE components are required to successfully use NETCONF for configuration automation on a Nexus 9000 switch?
Hard45Which of the following is a benefit of using OpenConfig YANG models for network automation?
Easy46A network administrator needs to automate ACI configuration using a Python library that abstracts the APIC REST API. Which library should be used?
Medium47Which TWO of the following are valid methods to run Python scripts on a Cisco Nexus switch? (Choose two.)
Medium48Which THREE are valid characteristics of using Terraform for ACI automation? (Choose three.)
Hard49A network engineer needs to automate the configuration of BGP on a Nexus 9000 switch using Ansible. The playbook uses the cisco.nxos.nxos_bgp module. Which of the following parameters is required in the module to specify the local AS number?
Hard50Which Ansible module from the cisco.nxos collection is used to apply a set of CLI commands on a Nexus switch?
Easy51A network engineer needs to retrieve the operational state of interfaces from a Nexus switch using a YANG-based protocol. Which protocol should be used to get structured data via REST?
Medium52An engineer needs to trigger a Python script on a Nexus switch when a specific syslog message appears. Which Cisco technology allows event-driven execution of Python applets?
Medium53An engineer is implementing CI/CD for network changes. Which tool is commonly used for version control of network configuration files and infrastructure code?
Hard54A Python script uses NX-API's XML output to extract interface status. Which method is most robust and recommended for parsing the XML?
Hard55A network engineer wants to automate the configuration of VLANs on a Nexus 9000 switch using REST-based APIs. Which approach should be used to send NX-OS commands via HTTP/HTTPS in JSON format?
Medium56Which two statements about the Cisco NX-API REST interface are true? (Choose two.)
Medium57A developer wants to run a Python script directly on a Nexus switch to automate local operations. Which feature allows executing a Python script in a Linux environment on the switch?
Medium58Refer to the exhibit. A Python script using the Cisco ACI Cobra SDK fails with 'AuthenticationError'. Which of the following is the most likely cause?
Hard59A Python script using the pyATS framework to parse 'show interface' output on a Nexus 9000 switch fails with a parsing error, even though the CLI command runs successfully. What is the most likely missing component?
Medium60An administrator wants to use the APIC REST API to create a new Tenant in ACI. Which object in the Management Information Tree (MIT) should be the target of the POST request?
Medium61A network engineer wants to automate the deployment of VLANs across 50 Nexus switches in a data center. Which approach provides the most consistent and repeatable results with minimal manual effort?
Easy62Refer to the exhibit. An automation script queries the Cisco Nexus 9000 using the NX-API JSON format and receives the above output. The script is designed to validate that interface Eth1/1 is in access mode with VLAN 100. However, the script reports a failure. What is the most likely reason?
Hard63Which TWO statements about Cisco NX-API are correct? (Choose two.)
Medium64A DevOps team wants to apply Infrastructure as Code principles to manage their data center network. Which tool is best suited for declaratively managing ACI configurations using Terraform?
Medium65An engineer is writing an Ansible playbook to configure BGP on a Nexus 9000 switch. Which module from the cisco.nxos collection should be used to manage BGP configuration?
Hard66Which protocol is recommended for streaming model-driven telemetry from NX-OS to a collector?
Easy67An engineer wants to automate the creation of VLANs on a Nexus 9000 switch using Python scripts. Which on-box solution allows running Python scripts directly on the switch without an external server?
Easy68A NETCONF session to an NX-OS switch fails with 'Connection refused'. What is the most likely cause?
Easy69An engineer wants to automate VLAN configuration on a Cisco Nexus 9000 switch using a Python script running in the guest shell. Which library should the engineer use to send NX-OS commands via the NX-API?
Easy70A team is using Cisco DCNM for fabric management. They need to integrate with an external CI/CD pipeline. Which API should they use to trigger a network configuration change?
Medium71An engineer needs to automate configuration backups on NX-OS switches using Python. Which Python library is specifically designed for this purpose?
Easy72In ACI, the management information tree (MIT) organizes managed objects hierarchically. Which object is the parent of an Application Profile (AP)?
Medium73When using Cisco NSO (Network Services Orchestrator) to automate service creation across a data center network, what is a key consideration regarding device compatibility?
Medium74Which protocol is used by NETCONF for transport?
Easy75Which three components are part of the ACI Management Information Tree (MIT)? (Choose three.)
Hard76For consistent multi-data-center automation, which tool is best suited to orchestrate both NX-OS and ACI across sites?
Medium77A data center team is implementing configuration automation for a fleet of Nexus 9000 switches. They need a solution that supports idempotent configuration, works well with version control, and does not require an agent on the switches. Which two tools should they consider?
Medium78An engineer receives an error 'XML namespace mismatch' when using NETCONF to configure a Nexus switch. The YANG model used is from the Cisco NX-OS openconfig model. What is the most likely cause?
Hard79Which two statements about the NX-API REST interface on Nexus switches are true? (Choose two.)
Easy80In ACI automation, the APIC REST API interacts with the Management Information Tree (MIT). Which of the following represents a typical hierarchical object path in the MIT?
Medium81Which THREE are correct about using Ansible with Cisco NX-OS? (Choose three.)
Medium82Match each Cisco ACI component to its role.
Medium83A DevOps team wants to version control network device configurations. Which tool is best suited for tracking changes and collaborating on configuration files?
Medium84Which TWO of the following are components of the Cisco ACI Management Information Tree (MIT)? (Choose two.)
Medium85In the context of Ansible automation for Cisco Nexus switches, which module can be used to manage VLAN configurations?
Medium86Arrange the steps to recover a lost admin password on a Cisco Nexus switch.
Medium87A DevOps team is implementing CI/CD for network configuration changes on Nexus switches. Which tool is most suitable for version control of network configuration files?
Easy88Which TWO methods are supported for authenticating to the APIC REST API?
Easy89An organization wants to adopt Infrastructure as Code (IaC) principles for their data center network. Which practice best aligns with IaC for network configuration?
Hard90Which TWO of the following are characteristics of the NETCONF protocol? (Choose two.)
Medium91In an ACI environment, an automation script uses the acitoolkit Python library to create a new EPG. The script connects to the APIC using login credentials. After creating the EPG, what must be called to commit the changes?
Hard92Which API uses RESTful principles and supports both XML and JSON encoding for network configuration, as defined in RFC 8040?
Medium93Which Python library is part of the ACI SDK and provides a high-level object-oriented interface for interacting with the APIC?
Medium94Which TWO are best practices when automating ACI fabric configuration using Ansible?
Hard95A network engineer is automating a repetitive configuration task on a Nexus 9000 switch using Python scripts with NX-API. The script sends a CLI command via POST request but receives HTTP 400 status with error 'Invalid request payload'. What is the most likely cause?
Medium96A large financial institution has recently migrated its data center network to a new Cisco ACI fabric. The operations team is tasked with automating the provisioning of new application tenants, including EPGs, contracts, and bridge domains, using the APIC REST API. They have developed a comprehensive set of Python scripts that successfully performed these actions in their lab environment. However, when deploying the scripts to production, they receive an 'SSL: CERTIFICATE_VERIFY_FAILED' error from the requests library. The production APIC cluster uses a self-signed certificate for HTTPS, and the corporate security policy strictly prohibits the use of HTTP or disabling certificate verification. Additionally, the policy does not allow replacing the self-signed certificate with a CA-signed one without a lengthy approval process that could delay the automation project. The team needs an immediate solution that maintains security best practices. What should the team do?
Easy97An engineer wants to automate the configuration of BGP on a Nexus switch using Ansible. Which module from the cisco.nxos collection is appropriate?
Medium98A large enterprise data center uses Cisco UCS Manager to manage hundreds of blade servers. The automation team has been using Python SDK scripts to provision service profiles. Recently, after a UCS Manager firmware upgrade, several scripts that previously worked are now failing with 'AttributeError: 'ServiceProfile' object has no attribute 'set_vnic_order''. The team confirms that the UCS Manager version changed from 4.0 to 4.2. Which course of action should the engineer take to resolve the issue?
Medium99Which THREE of the following are components of an Ansible playbook for automating Cisco Nexus configuration? (Choose three.)
Hard100Which of the following is a YANG data model developed by the OpenConfig working group to provide vendor-neutral configuration for network interfaces?
Hard101A DevOps team is implementing CI/CD for network configuration using Git. They want to ensure that any changes to the YANG-based configuration are automatically validated before merging. Which tool is used for network automation with YANG models and supports NETCONF/RESTCONF?
Medium102An organization is deploying Ansible for network automation across multiple Nexus 9000 leaf switches. They need to ensure that configuration tasks are idempotent and only apply changes when necessary. Which best practice should be followed when using the cisco.nxos.nxos_config module?
Hard103Which two features allow running Python scripts directly on a Cisco Nexus switch? (Choose two.)
Medium104Which TWO statements are true regarding the differences between REST API (NX-API) and NETCONF for automating Nexus switches?
Easy105Which TWO are benefits of using the Cisco NX-API for network automation compared to traditional SSH-based scripting?
Medium106An engineer is automating ACI configuration using Terraform. Which provider and resource should be used to create an Application Profile under a Tenant?
Medium107An engineer is writing an Ansible playbook to configure a Nexus switch. The playbook uses the cisco.nxos.nxos_config module. Which Ansible concept is used to ensure the playbook is idempotent?
Medium108Which two of the following are valid methods to automate Nexus switch configuration using Python? (Choose two.)
Medium109Which THREE statements are true regarding YANG models in the context of data center automation? (Choose three.)
Hard110Refer to the exhibit. An NX-API request returns this JSON error. What is the most likely cause?
Medium111What is a key advantage of using structured data (e.g., JSON or XML) from Cisco NX-API responses compared to traditional CLI scraping (e.g., using regular expressions)?
Easy112A data center engineer is implementing model-driven telemetry using Cisco NX-OS. Which three components are required in the telemetry configuration? (Choose three.)
Hard113A company wants to automate backup of running-configurations for 200 Nexus switches. Which solution provides the best combination of reliability and version history?
Medium114A data center has 100 Nexus switches in a fabric managed by Cisco Nexus Dashboard Orchestrator (NDO). The network team needs to automate the creation of a new network template that includes multiple VLANs and VRF configurations. They want to ensure that the template is applied consistently across all leaf switches without manual intervention. The engineer writes a Python script using the NDO REST API to create the template and deploy it. However, the deployment fails with an error 'Template validation failed: overlapping IP subnets'. Upon reviewing the template, the engineer notices that two VLANs have overlapping subnet definitions. Which action should the engineer take to resolve this issue efficiently?
Easy115An organization adopts Infrastructure as Code (IaC) for network automation. Which tool is commonly used to manage ACI fabric configuration declaratively?
Easy116An engineer needs to collect streaming telemetry from a Nexus 9000 switch. Which two protocols can be used to transmit telemetry data to a collector? (Choose two.)
Easy117A network engineer wants to use Terraform to automate the creation of an Application Profile in ACI. Which provider should be used?
Easy118A Nexus switch configured with 'feature nxapi' and 'nxapi https port 443' fails to respond to REST API calls from a monitoring system. The engineer can ping the management IP. Which troubleshooting step should be taken first?
Hard119An engineer wants to run a Python script on a Nexus switch without copying it to the bootflash. The script interacts with the switch's CLI and file system. Which feature allows this?
Medium120A network automation engineer is writing an Ansible playbook to configure Nexus switches. Which three modules are available to manage NX-OS configuration? (Choose three.)
Medium121An engineer wants to automate the configuration of VLANs on a Nexus switch using Ansible. Which module from the cisco.nxos collection should be used?
Easy122An Ansible playbook using the cisco.nxos.nxos_config module fails with the error: 'Unsupported parameters for (cisco.nxos.nxos_config) module: connection type setting'. What is the most likely cause?
Hard123Refer to the exhibit. An engineer is using an Ansible playbook to configure a Nexus switch. The playbook task uses the nxos_config module to set an MTU value on an interface. What is the most likely issue?
Hard124Refer to the exhibit. An automation script is used to configure a new VLAN 40 on Eth1/2 trunk. The script sends the following NX-API command: 'switchport trunk allowed vlan add 40'. After execution, the engineer runs 'show running-config interface eth1/2' and sees that the trunk allowed VLAN list shows '10,20,30'. The automation script logs indicate success for adding VLAN 40, but the running config does not show the change. What is the most likely issue?
Medium125Which three of the following are characteristics of the ACI Management Information Tree (MIT)? (Choose three.)
Hard126Refer to the exhibit. An engineer configured NX-API on a Nexus 9000 switch. The REST API client receives 'SSL_ERROR_BAD_CERT_DOMAIN'. What is the most likely cause?
Medium127A large enterprise runs a multi-site Cisco ACI fabric with APICs in a cluster. The automation team uses Python scripts with the Cobra SDK to create and manage tenant policies. Recently, after upgrading the APIC firmware from version 4.2(3) to 5.2(1), a script that previously worked now fails with an 'Unauthorized' error when calling the APIC REST API. The script uses a service account with a locally stored password. The automation engineer verifies that the account credentials are correct and that the account is not locked. The script was not modified during the upgrade. Which action should the engineer take to resolve the issue?
Hard128A data center automation script uses Python's requests library to call the NX-API for a Nexus 9000 switch. The script works but returns HTTP 400. Which is a likely cause?
EasyOther domains
All 350-601 exam domains
Frequently asked questions
- What does the Automation domain cover on the 350-601 exam?
- Automation questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 128 Automation questions in the 350-601 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Automation questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.