Courseiva

350-601 · domain

Automation

Practise Cisco DCCOR / CCNP Data Center Core 350-601 Automation practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

128 questions34 easy58 medium36 hard

Focused practice

Practice Automation questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Automation

Automation questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Automation exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All Automation questions (128)

Click any question to see the full explanation, or start a practice session above.

1

An engineer uses the APIC REST API to create a new EPG. The API endpoint for creating an EPG under a specific tenant and application profile uses which object class?

Hard
2

Which tool provides a programmatic HTTP-based interface to execute CLI commands on Cisco Nexus switches and returns structured JSON data?

Easy
3

An engineer is writing a Python script using the cisco_nxapi library to configure a Nexus switch. Which of the following is a valid step to establish a connection using NX-API?

Medium
4

A network automation engineer is developing a CI/CD pipeline for network configuration changes. Which tool would best serve as a version control system for Infrastructure as Code (IaC) files in a data center network?

Medium
5

A network engineer is implementing automated configuration management using Cisco NSO (Network Services Orchestrator). The team wants to ensure that any configuration changes made directly on the devices (out-of-band) are detected and reconciled. Which NSO feature should be used?

Hard
6

An engineer is designing an automation solution for a large data center with multiple Cisco UCS Manager domains. Which approach best ensures idempotent configuration operations?

Hard
7

Which THREE statements about Cisco Network Services Orchestrator (NSO) are true?

Medium
8

An automation engineer is using the cisco_nxapi Python library to configure a Nexus switch. Which step is required before using the library?

Medium
9

Refer to the exhibit. An Ansible playbook targeting an NX-OS switch fails with this error. What is the most likely cause?

Easy
10

A network engineer wants to automate the deployment of a new VLAN across all Cisco Nexus switches in a data center using Python scripts. Which tool is most appropriate for this task?

Easy
11

A financial services company operates a multi-site data center with Cisco ACI. The automation team uses Ansible Tower to manage configurations. They have a playbook that configures EPGs using the 'aci_epg' module. The playbook runs successfully for most sites but fails on one site with the error 'Object 'uni/tn-Tenant1/ap-AP1/epg-EPG1' doesn't exist'. The engineer checks the ACI fabric and confirms that the tenant, application profile, and EPG exist on that site. The playbook uses the same credentials and variables across all sites. What is the most likely cause of the failure?

Hard
12

Which feature on Nexus switches provides a Linux shell environment to run Python scripts and tools directly on the switch?

Easy
13

In an ACI fabric, an automation engineer needs to create a new tenant with an application profile and EPG using the APIC REST API. The engineer decides to use the Cobra SDK for Python. Which statement about the Cobra SDK is true?

Hard
14

A data center team is automating network changes and wants to ensure that only validated configurations are deployed to production. Which CI/CD practice specifically addresses this?

Hard
15

A Python script using NX-API returns HTTP 401. What is the most likely cause?

Medium
16

A data center team is troubleshooting an automation script that uses REST API to configure a Cisco Nexus 9000 switch. The script fails with a '401 Unauthorized' error. What is the most likely cause?

Medium
17

An engineer is writing a Python script to interact with a Nexus 9000 switch using the NX-API REST interface. Which Python library is designed for this purpose?

Medium
18

A network engineer wants to use Ansible to automate the configuration of Nexus switches. Which two statements about the cisco.nxos Ansible collection are correct? (Choose two.)

Medium
19

What is the primary purpose of NX-API on Cisco Nexus switches in a data center automation context?

Easy
20

A network team is planning to automate configuration management of a brownfield Nexus 9000 fabric using YANG data models and NETCONF. Which consideration is critical when implementing this solution?

Hard
21

Which TWO are features of the Embedded Event Manager (EEM) with Python applets on Cisco NX-OS? (Choose two.)

Medium
22

Which protocol is used by NETCONF to transport YANG-defined configuration data between a controller and a network device?

Easy
23

A DevOps team uses Ansible to automate the configuration of Cisco Nexus switches. After running a playbook, some switches have the correct configuration but others do not. The playbook uses the 'nxos_config' module. Which action should be taken to ensure consistent configuration?

Medium
24

A network engineer wants to send NX-OS CLI commands via HTTP/HTTPS to a Nexus switch programmatically. Which API should be used?

Easy
25

A network administrator wants to send NX-OS CLI commands to a Nexus switch via HTTP/HTTPS. Which API should be used?

Easy
26

Which three components are part of the ACI Management Information Tree (MIT)? (Choose three.)

Hard
27

Match each Cisco data center high availability feature to its description.

Medium
28

Which TWO methods are supported by Cisco NX-API for automating Nexus switches? (Choose two.)

Easy
29

Refer to the exhibit. What is the intended effect of this Ansible playbook task?

Easy
30

A network engineer needs to automate the configuration of BGP on a Nexus switch using Ansible. Which Ansible module from the cisco.nxos collection is appropriate for managing BGP configuration?

Medium
31

Refer to the exhibit. A Python script is processing the response from NX-API. It attempts to extract the interface state using `response['ins_api']['outputs']['output']['body']['ROW_interface']['state']` but receives a KeyError. What is the most likely reason?

Hard
32

In an ACI fabric, an automation engineer needs to deploy tenant policies in an idempotent manner. Which approach is most aligned with best practices?

Hard
33

Which statement accurately describes the APIC REST API?

Easy
34

Which YANG model is commonly used for vendor-neutral network configuration and operations?

Easy
35

Which two of the following are benefits of using YANG data models for network automation? (Choose two.)

Medium
36

Which YANG-based protocol uses RESTful operations (GET, POST, PUT, DELETE) over HTTP/HTTPS for network configuration?

Easy
37

An engineer is writing a Python script to automate ACI fabric discovery using the APIC SDK. The script needs to wait until the fabric formation is complete before proceeding. Which approach is most reliable?

Hard
38

A DevOps engineer is building a CI/CD pipeline for network changes. After a configuration change is pushed to a Nexus switch, which step should be included to verify that the change did not cause any operational issues?

Hard
39

An organization is migrating from traditional SNMP monitoring to model-driven telemetry on their Nexus 9000 switches. They have configured a telemetry destination using gRPC and have defined sensor paths for interface statistics. After several hours, the collector (a Linux server running Telegraf) reports no data received. The engineer verifies that the switch can reach the collector via ICMP. On the switch, 'show telemetry data collector details' indicates the destination is 'connected', but the 'last data sent' timestamp is several hours old. Which action should the engineer take next?

Medium
40

Ansible playbook that deploys VLANs on NX-OS fails on a particular switch with 'privilege escalation required'. What should be checked first?

Medium
41

Arrange the steps to configure a port-channel (LAG) on a Cisco Nexus switch.

Medium
42

A network automation engineer wants to use EEM with Python applets on a Nexus switch to trigger a script when an interface goes down. Which EEM configuration is required to invoke the Python script?

Medium
43

Which THREE statements about Cisco UCS Manager automation using XML API are correct? (Choose three.)

Hard
44

Which THREE components are required to successfully use NETCONF for configuration automation on a Nexus 9000 switch?

Hard
45

Which of the following is a benefit of using OpenConfig YANG models for network automation?

Easy
46

A network administrator needs to automate ACI configuration using a Python library that abstracts the APIC REST API. Which library should be used?

Medium
47

Which TWO of the following are valid methods to run Python scripts on a Cisco Nexus switch? (Choose two.)

Medium
48

Which THREE are valid characteristics of using Terraform for ACI automation? (Choose three.)

Hard
49

A network engineer needs to automate the configuration of BGP on a Nexus 9000 switch using Ansible. The playbook uses the cisco.nxos.nxos_bgp module. Which of the following parameters is required in the module to specify the local AS number?

Hard
50

Which Ansible module from the cisco.nxos collection is used to apply a set of CLI commands on a Nexus switch?

Easy
51

A network engineer needs to retrieve the operational state of interfaces from a Nexus switch using a YANG-based protocol. Which protocol should be used to get structured data via REST?

Medium
52

An engineer needs to trigger a Python script on a Nexus switch when a specific syslog message appears. Which Cisco technology allows event-driven execution of Python applets?

Medium
53

An engineer is implementing CI/CD for network changes. Which tool is commonly used for version control of network configuration files and infrastructure code?

Hard
54

A Python script uses NX-API's XML output to extract interface status. Which method is most robust and recommended for parsing the XML?

Hard
55

A network engineer wants to automate the configuration of VLANs on a Nexus 9000 switch using REST-based APIs. Which approach should be used to send NX-OS commands via HTTP/HTTPS in JSON format?

Medium
56

Which two statements about the Cisco NX-API REST interface are true? (Choose two.)

Medium
57

A developer wants to run a Python script directly on a Nexus switch to automate local operations. Which feature allows executing a Python script in a Linux environment on the switch?

Medium
58

Refer to the exhibit. A Python script using the Cisco ACI Cobra SDK fails with 'AuthenticationError'. Which of the following is the most likely cause?

Hard
59

A Python script using the pyATS framework to parse 'show interface' output on a Nexus 9000 switch fails with a parsing error, even though the CLI command runs successfully. What is the most likely missing component?

Medium
60

An administrator wants to use the APIC REST API to create a new Tenant in ACI. Which object in the Management Information Tree (MIT) should be the target of the POST request?

Medium
61

A network engineer wants to automate the deployment of VLANs across 50 Nexus switches in a data center. Which approach provides the most consistent and repeatable results with minimal manual effort?

Easy
62

Refer to the exhibit. An automation script queries the Cisco Nexus 9000 using the NX-API JSON format and receives the above output. The script is designed to validate that interface Eth1/1 is in access mode with VLAN 100. However, the script reports a failure. What is the most likely reason?

Hard
63

Which TWO statements about Cisco NX-API are correct? (Choose two.)

Medium
64

A DevOps team wants to apply Infrastructure as Code principles to manage their data center network. Which tool is best suited for declaratively managing ACI configurations using Terraform?

Medium
65

An engineer is writing an Ansible playbook to configure BGP on a Nexus 9000 switch. Which module from the cisco.nxos collection should be used to manage BGP configuration?

Hard
66

Which protocol is recommended for streaming model-driven telemetry from NX-OS to a collector?

Easy
67

An engineer wants to automate the creation of VLANs on a Nexus 9000 switch using Python scripts. Which on-box solution allows running Python scripts directly on the switch without an external server?

Easy
68

A NETCONF session to an NX-OS switch fails with 'Connection refused'. What is the most likely cause?

Easy
69

An engineer wants to automate VLAN configuration on a Cisco Nexus 9000 switch using a Python script running in the guest shell. Which library should the engineer use to send NX-OS commands via the NX-API?

Easy
70

A team is using Cisco DCNM for fabric management. They need to integrate with an external CI/CD pipeline. Which API should they use to trigger a network configuration change?

Medium
71

An engineer needs to automate configuration backups on NX-OS switches using Python. Which Python library is specifically designed for this purpose?

Easy
72

In ACI, the management information tree (MIT) organizes managed objects hierarchically. Which object is the parent of an Application Profile (AP)?

Medium
73

When using Cisco NSO (Network Services Orchestrator) to automate service creation across a data center network, what is a key consideration regarding device compatibility?

Medium
74

Which protocol is used by NETCONF for transport?

Easy
75

Which three components are part of the ACI Management Information Tree (MIT)? (Choose three.)

Hard
76

For consistent multi-data-center automation, which tool is best suited to orchestrate both NX-OS and ACI across sites?

Medium
77

A data center team is implementing configuration automation for a fleet of Nexus 9000 switches. They need a solution that supports idempotent configuration, works well with version control, and does not require an agent on the switches. Which two tools should they consider?

Medium
78

An engineer receives an error 'XML namespace mismatch' when using NETCONF to configure a Nexus switch. The YANG model used is from the Cisco NX-OS openconfig model. What is the most likely cause?

Hard
79

Which two statements about the NX-API REST interface on Nexus switches are true? (Choose two.)

Easy
80

In ACI automation, the APIC REST API interacts with the Management Information Tree (MIT). Which of the following represents a typical hierarchical object path in the MIT?

Medium
81

Which THREE are correct about using Ansible with Cisco NX-OS? (Choose three.)

Medium
82

Match each Cisco ACI component to its role.

Medium
83

A DevOps team wants to version control network device configurations. Which tool is best suited for tracking changes and collaborating on configuration files?

Medium
84

Which TWO of the following are components of the Cisco ACI Management Information Tree (MIT)? (Choose two.)

Medium
85

In the context of Ansible automation for Cisco Nexus switches, which module can be used to manage VLAN configurations?

Medium
86

Arrange the steps to recover a lost admin password on a Cisco Nexus switch.

Medium
87

A DevOps team is implementing CI/CD for network configuration changes on Nexus switches. Which tool is most suitable for version control of network configuration files?

Easy
88

Which TWO methods are supported for authenticating to the APIC REST API?

Easy
89

An organization wants to adopt Infrastructure as Code (IaC) principles for their data center network. Which practice best aligns with IaC for network configuration?

Hard
90

Which TWO of the following are characteristics of the NETCONF protocol? (Choose two.)

Medium
91

In an ACI environment, an automation script uses the acitoolkit Python library to create a new EPG. The script connects to the APIC using login credentials. After creating the EPG, what must be called to commit the changes?

Hard
92

Which API uses RESTful principles and supports both XML and JSON encoding for network configuration, as defined in RFC 8040?

Medium
93

Which Python library is part of the ACI SDK and provides a high-level object-oriented interface for interacting with the APIC?

Medium
94

Which TWO are best practices when automating ACI fabric configuration using Ansible?

Hard
95

A network engineer is automating a repetitive configuration task on a Nexus 9000 switch using Python scripts with NX-API. The script sends a CLI command via POST request but receives HTTP 400 status with error 'Invalid request payload'. What is the most likely cause?

Medium
96

A large financial institution has recently migrated its data center network to a new Cisco ACI fabric. The operations team is tasked with automating the provisioning of new application tenants, including EPGs, contracts, and bridge domains, using the APIC REST API. They have developed a comprehensive set of Python scripts that successfully performed these actions in their lab environment. However, when deploying the scripts to production, they receive an 'SSL: CERTIFICATE_VERIFY_FAILED' error from the requests library. The production APIC cluster uses a self-signed certificate for HTTPS, and the corporate security policy strictly prohibits the use of HTTP or disabling certificate verification. Additionally, the policy does not allow replacing the self-signed certificate with a CA-signed one without a lengthy approval process that could delay the automation project. The team needs an immediate solution that maintains security best practices. What should the team do?

Easy
97

An engineer wants to automate the configuration of BGP on a Nexus switch using Ansible. Which module from the cisco.nxos collection is appropriate?

Medium
98

A large enterprise data center uses Cisco UCS Manager to manage hundreds of blade servers. The automation team has been using Python SDK scripts to provision service profiles. Recently, after a UCS Manager firmware upgrade, several scripts that previously worked are now failing with 'AttributeError: 'ServiceProfile' object has no attribute 'set_vnic_order''. The team confirms that the UCS Manager version changed from 4.0 to 4.2. Which course of action should the engineer take to resolve the issue?

Medium
99

Which THREE of the following are components of an Ansible playbook for automating Cisco Nexus configuration? (Choose three.)

Hard
100

Which of the following is a YANG data model developed by the OpenConfig working group to provide vendor-neutral configuration for network interfaces?

Hard
101

A DevOps team is implementing CI/CD for network configuration using Git. They want to ensure that any changes to the YANG-based configuration are automatically validated before merging. Which tool is used for network automation with YANG models and supports NETCONF/RESTCONF?

Medium
102

An organization is deploying Ansible for network automation across multiple Nexus 9000 leaf switches. They need to ensure that configuration tasks are idempotent and only apply changes when necessary. Which best practice should be followed when using the cisco.nxos.nxos_config module?

Hard
103

Which two features allow running Python scripts directly on a Cisco Nexus switch? (Choose two.)

Medium
104

Which TWO statements are true regarding the differences between REST API (NX-API) and NETCONF for automating Nexus switches?

Easy
105

Which TWO are benefits of using the Cisco NX-API for network automation compared to traditional SSH-based scripting?

Medium
106

An engineer is automating ACI configuration using Terraform. Which provider and resource should be used to create an Application Profile under a Tenant?

Medium
107

An engineer is writing an Ansible playbook to configure a Nexus switch. The playbook uses the cisco.nxos.nxos_config module. Which Ansible concept is used to ensure the playbook is idempotent?

Medium
108

Which two of the following are valid methods to automate Nexus switch configuration using Python? (Choose two.)

Medium
109

Which THREE statements are true regarding YANG models in the context of data center automation? (Choose three.)

Hard
110

Refer to the exhibit. An NX-API request returns this JSON error. What is the most likely cause?

Medium
111

What is a key advantage of using structured data (e.g., JSON or XML) from Cisco NX-API responses compared to traditional CLI scraping (e.g., using regular expressions)?

Easy
112

A data center engineer is implementing model-driven telemetry using Cisco NX-OS. Which three components are required in the telemetry configuration? (Choose three.)

Hard
113

A company wants to automate backup of running-configurations for 200 Nexus switches. Which solution provides the best combination of reliability and version history?

Medium
114

A data center has 100 Nexus switches in a fabric managed by Cisco Nexus Dashboard Orchestrator (NDO). The network team needs to automate the creation of a new network template that includes multiple VLANs and VRF configurations. They want to ensure that the template is applied consistently across all leaf switches without manual intervention. The engineer writes a Python script using the NDO REST API to create the template and deploy it. However, the deployment fails with an error 'Template validation failed: overlapping IP subnets'. Upon reviewing the template, the engineer notices that two VLANs have overlapping subnet definitions. Which action should the engineer take to resolve this issue efficiently?

Easy
115

An organization adopts Infrastructure as Code (IaC) for network automation. Which tool is commonly used to manage ACI fabric configuration declaratively?

Easy
116

An engineer needs to collect streaming telemetry from a Nexus 9000 switch. Which two protocols can be used to transmit telemetry data to a collector? (Choose two.)

Easy
117

A network engineer wants to use Terraform to automate the creation of an Application Profile in ACI. Which provider should be used?

Easy
118

A Nexus switch configured with 'feature nxapi' and 'nxapi https port 443' fails to respond to REST API calls from a monitoring system. The engineer can ping the management IP. Which troubleshooting step should be taken first?

Hard
119

An engineer wants to run a Python script on a Nexus switch without copying it to the bootflash. The script interacts with the switch's CLI and file system. Which feature allows this?

Medium
120

A network automation engineer is writing an Ansible playbook to configure Nexus switches. Which three modules are available to manage NX-OS configuration? (Choose three.)

Medium
121

An engineer wants to automate the configuration of VLANs on a Nexus switch using Ansible. Which module from the cisco.nxos collection should be used?

Easy
122

An Ansible playbook using the cisco.nxos.nxos_config module fails with the error: 'Unsupported parameters for (cisco.nxos.nxos_config) module: connection type setting'. What is the most likely cause?

Hard
123

Refer to the exhibit. An engineer is using an Ansible playbook to configure a Nexus switch. The playbook task uses the nxos_config module to set an MTU value on an interface. What is the most likely issue?

Hard
124

Refer to the exhibit. An automation script is used to configure a new VLAN 40 on Eth1/2 trunk. The script sends the following NX-API command: 'switchport trunk allowed vlan add 40'. After execution, the engineer runs 'show running-config interface eth1/2' and sees that the trunk allowed VLAN list shows '10,20,30'. The automation script logs indicate success for adding VLAN 40, but the running config does not show the change. What is the most likely issue?

Medium
125

Which three of the following are characteristics of the ACI Management Information Tree (MIT)? (Choose three.)

Hard
126

Refer to the exhibit. An engineer configured NX-API on a Nexus 9000 switch. The REST API client receives 'SSL_ERROR_BAD_CERT_DOMAIN'. What is the most likely cause?

Medium
127

A large enterprise runs a multi-site Cisco ACI fabric with APICs in a cluster. The automation team uses Python scripts with the Cobra SDK to create and manage tenant policies. Recently, after upgrading the APIC firmware from version 4.2(3) to 5.2(1), a script that previously worked now fails with an 'Unauthorized' error when calling the APIC REST API. The script uses a service account with a locally stored password. The automation engineer verifies that the account credentials are correct and that the account is not locked. The script was not modified during the upgrade. Which action should the engineer take to resolve the issue?

Hard
128

A data center automation script uses Python's requests library to call the NX-API for a Nexus 9000 switch. The script works but returns HTTP 400. Which is a likely cause?

Easy

Frequently asked questions

What does the Automation domain cover on the 350-601 exam?
Automation questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 128 Automation questions in the 350-601 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Automation questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
cisco-ccnp-datacenter CISCO-CCNP-DATACENTER dccor automation Practice Questions