Automation and Assurance practice questions

A service provider is implementing network automation using YANG data models. They need to ensure that the automation solution supports both configuration and operational state data retrieval. Which NETCONF operation should be used to retrieve operational state data?

Trap 1: <edit-config>

Used to edit configuration, not retrieve data.

Trap 2: <get-config>

Retrieves only configuration data, not operational state.

Trap 3: <lock>

Used to lock a datastore, not retrieve data.

A
<edit-config>
Why wrong: Used to edit configuration, not retrieve data.
B
<get-config>
Why wrong: Retrieves only configuration data, not operational state.
C
<get>
Retrieves both configuration and operational state data.
D
<lock>
Why wrong: Used to lock a datastore, not retrieve data.

Study the full Python automation breakdown →

Question 2easymultiple choice

Which tool is used to validate YANG data models against device capabilities and to generate Python bindings for automation scripts?

Trap 1: RESTCONF

An HTTP-based protocol for YANG data.

Trap 2: Ansible

Automation tool, not a YANG validator.

Trap 3: NETCONF

A network configuration protocol, not a tool.

A
RESTCONF
Why wrong: An HTTP-based protocol for YANG data.
B
pyang
Validates YANG models and can generate Python bindings.
C
Ansible
Why wrong: Automation tool, not a YANG validator.
D
NETCONF
Why wrong: A network configuration protocol, not a tool.

Open the full BGP breakdown →

Question 3hardmultiple choice

A network engineer is automating BGP configuration using the Cisco IOS-XE YANG model. They want to enable the 'always-compare-med' feature under BGP. Which XPath expression correctly targets this leaf?

Trap 1: /bgp/global/always-compare-med

Missing the 'native/router' prefix.

Trap 2: /native/router/bgp/always-compare-med

Missing the 'scope/global' containers.

Trap 3: /router/bgp/global/always-compare-med

Missing 'native' container.

A
/bgp/global/always-compare-med
Why wrong: Missing the 'native/router' prefix.
B
/native/router/bgp/scope/global/always-compare-med
Correct path according to Cisco IOS-XE YANG model.
C
/native/router/bgp/always-compare-med
Why wrong: Missing the 'scope/global' containers.
D
/router/bgp/global/always-compare-med
Why wrong: Missing 'native' container.

Question 4mediummultiple choice

A service provider uses RESTCONF to automate interface configuration. They need to add a new IPv4 address to an existing interface. Which HTTP method and URI should be used?

Trap 1: DELETE /restconf/data/ietf-interfaces:interfaces/interface=GigabitEt…

DELETE removes the entire interface.

Trap 2: POST /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthe…

POST is used to create a new resource, not to add to an existing list.

Trap 3: PUT /restconf/data/ietf-interfaces:interfaces/interface=GigabitEther…

PUT replaces the entire address list, not add.

A
DELETE /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/1
Why wrong: DELETE removes the entire interface.
B
PATCH /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/1/ietf-ip:ipv4/address
PATCH merges the new address into the list.
C
POST /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/1/ietf-ip:ipv4
Why wrong: POST is used to create a new resource, not to add to an existing list.
D
PUT /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet0/1/ietf-ip:ipv4/address
Why wrong: PUT replaces the entire address list, not add.

Question 5easymultiple choice

What is the primary benefit of using model-driven telemetry over traditional SNMP polling for network assurance?

Trap 1: Reduces the need for YANG models

Telemetry actually uses YANG models.

Trap 2: Increases security by using SSH

Both can use secure transports.

Trap 3: Simplifies device configuration

Telemetry configuration can be complex.

A
Provides real-time data streaming without polling overhead
Push-based telemetry eliminates polling.
B
Reduces the need for YANG models
Why wrong: Telemetry actually uses YANG models.
C
Increases security by using SSH
Why wrong: Both can use secure transports.
D
Simplifies device configuration
Why wrong: Telemetry configuration can be complex.

Question 6hardmultiple choice

A network operator uses gRPC Network Management Interface (gNMI) to collect telemetry data from routers. They notice that some updates are missing. Which gNMI mode should be used to ensure that all state changes are captured?

Trap 1: TARGET_DEFINED

Not a standard gNMI mode.

Trap 2: POLL

Polling is not a gNMI subscription mode.

Trap 3: SAMPLE

Periodic sampling may miss changes between intervals.

A
ON_CHANGE
Sends updates only when a value changes, capturing all changes.
B
TARGET_DEFINED
Why wrong: Not a standard gNMI mode.
C
POLL
Why wrong: Polling is not a gNMI subscription mode.
D
SAMPLE
Why wrong: Periodic sampling may miss changes between intervals.

Read the full MPLS explanation →

Question 7mediummultiple choice

A service provider is deploying a new automation framework using Ansible to configure MPLS VPNs. They need to ensure that the Ansible playbook can handle configuration rollback in case of failure. Which Ansible feature should be used?

Trap 1: Use 'tags' to selectively apply tasks

Helps run specific tasks, not rollback.

Trap 2: Use 'check_mode' to validate changes before applying

Validates but does not provide backup for rollback.

Trap 3: Set 'ignore_errors' to true

Ignores errors, does not provide rollback.

A
Use the 'backup' option in the ios_config module
Backs up running config before changes for rollback.
B
Use 'tags' to selectively apply tasks
Why wrong: Helps run specific tasks, not rollback.
C
Use 'check_mode' to validate changes before applying
Why wrong: Validates but does not provide backup for rollback.
D
Set 'ignore_errors' to true
Why wrong: Ignores errors, does not provide rollback.

Question 8hardmultiple choice

A network engineer is troubleshooting a NETCONF session that fails to establish between a controller and a router. The router supports NETCONF over SSH on port 830. The controller can reach the router but the session fails. What is the most likely cause?

Trap 1: The router's NETCONF capability is disabled

If disabled, the router wouldn't listen on port 830.

Trap 2: The controller is using the wrong port (e.g., 22)

The engineer knows port 830 is correct.

Trap 3: The router does not support YANG models

NETCONF sessions can establish even without YANG models, but models are needed for data access.

A
The router's NETCONF capability is disabled
Why wrong: If disabled, the router wouldn't listen on port 830.
B
The SSH host key of the router is not in the controller's known_hosts file
SSH host key verification failure can cause session failure.
C
The controller is using the wrong port (e.g., 22)
Why wrong: The engineer knows port 830 is correct.
D
The router does not support YANG models
Why wrong: NETCONF sessions can establish even without YANG models, but models are needed for data access.

Question 9easymulti select

Which TWO statements about YANG data models are true? (Choose two.)

Trap 1: YANG models can be directly converted to SNMP MIBs.

YANG and SNMP MIBs are different; conversion is not direct.

Trap 2: YANG models define only configuration data, not state data.

YANG models define both config and state data.

Trap 3: YANG models define CLI commands.

YANG models define data, not CLI commands.

A
YANG models can be directly converted to SNMP MIBs.
Why wrong: YANG and SNMP MIBs are different; conversion is not direct.
B
YANG models define only configuration data, not state data.
Why wrong: YANG models define both config and state data.
C
YANG models define CLI commands.
Why wrong: YANG models define data, not CLI commands.
D
YANG models are used to model data for NETCONF and RESTCONF.
YANG is the data modeling language for NETCONF/RESTCONF.
E
YANG models can be augmented to extend existing models.
Augmentation is a key feature of YANG.

Question 10mediummulti select

Which THREE components are required for model-driven telemetry with gRPC? (Choose three.)

Trap 1: SNMP trap receiver

SNMP traps are not part of gRPC telemetry.

Trap 2: NETCONF session

gRPC telemetry does not use NETCONF.

A
SNMP trap receiver
Why wrong: SNMP traps are not part of gRPC telemetry.
B
NETCONF session
Why wrong: gRPC telemetry does not use NETCONF.
C
YANG data model
Defines the data to be streamed.
D
gRPC dial-out from the network device
Device pushes data to the receiver.
E
Telemetry receiver
Collects the streamed data.

Read the full Automation and Assurance explanation →

Question 11hardmulti select

Which TWO statements about Cisco NSO (Network Services Orchestrator) are true? (Choose two.)

Trap 1: NSO automatically generates Python scripts for device configuration.

NSO uses templates and code, not automatic Python generation.

Trap 2: NSO eliminates the need for SNMP in network management.

NSO can use SNMP but does not eliminate it.

Trap 3: NSO only supports CLI-based device management.

NSO supports NETCONF, SNMP, and CLI.

A
NSO automatically generates Python scripts for device configuration.
Why wrong: NSO uses templates and code, not automatic Python generation.
B
NSO provides northbound APIs using NETCONF and RESTCONF.
NSO exposes NETCONF and RESTCONF northbound.
C
NSO eliminates the need for SNMP in network management.
Why wrong: NSO can use SNMP but does not eliminate it.
D
NSO only supports CLI-based device management.
Why wrong: NSO supports NETCONF, SNMP, and CLI.
E
NSO uses YANG models to define service parameters.
YANG is used for service modeling in NSO.

Read the full MPLS explanation →

Question 12mediummultiple choice

You are a network automation engineer for a large service provider. Your team is tasked with automating the provisioning of new MPLS L3VPN services across a multi-vendor environment (Cisco and Juniper). The automation framework uses Ansible with Jinja2 templates and NETCONF as the transport protocol. During a pilot deployment, the automation successfully configures the Cisco devices but fails on Juniper devices with a 'syntax error' when applying the generated XML configuration. The Jinja2 templates are designed to generate Cisco-style configuration. You need to modify the automation to support both vendors. Which approach is most effective?

Trap 1: Write a Python script that translates Cisco XML to Juniper XML…

Translation layer is brittle and requires ongoing maintenance.

Trap 2: Switch to CLI-based automation using SSH to avoid XML syntax issues.

CLI-based automation is less reliable and not model-driven.

Trap 3: Create a single Jinja2 template that uses conditional statements to…

Leads to complex, hard-to-debug templates.

A
Use IETF YANG models and create separate Jinja2 templates for Cisco and Juniper that map to their respective native YANG models.
Vendor-neutral models with separate templates ensure compatibility.
B
Write a Python script that translates Cisco XML to Juniper XML before sending.
Why wrong: Translation layer is brittle and requires ongoing maintenance.
C
Switch to CLI-based automation using SSH to avoid XML syntax issues.
Why wrong: CLI-based automation is less reliable and not model-driven.
D
Create a single Jinja2 template that uses conditional statements to generate different XML for each vendor.
Why wrong: Leads to complex, hard-to-debug templates.

Open the full BGP breakdown →

Question 13hardmultiple choice

You are responsible for network assurance for a Tier-1 ISP that has deployed model-driven telemetry using gNMI with ON_CHANGE subscriptions on all core routers. Recently, the NMS team reported that some BGP route flaps are not being captured in the telemetry data, even though the routers' syslogs show the flaps occurred. The telemetry subscription is for the path '/bgp/neighbors/neighbor/state/messages/received'. The NMS is using a gNMI collector that supports both ON_CHANGE and SAMPLE subscriptions. You suspect the issue is with the subscription configuration. Upon reviewing the router configuration, you see that the telemetry subscription uses the SAMPLE mode instead of ON_CHANGE. What is the most appropriate action to ensure all BGP route flap events are captured?

Trap 1: Configure the router to send syslogs to the NMS and parse them for…

Syslogs are not structured telemetry and are not real-time.

Trap 2: Add a second subscription with ON_CHANGE for the same paths to…

Redundant subscriptions are unnecessary and increase load.

Trap 3: Change the subscription to SAMPLE with a 1-second interval to…

Even 1-second sampling may miss brief flaps.

A
Configure the router to send syslogs to the NMS and parse them for BGP flaps.
Why wrong: Syslogs are not structured telemetry and are not real-time.
B
Add a second subscription with ON_CHANGE for the same paths to ensure redundancy.
Why wrong: Redundant subscriptions are unnecessary and increase load.
C
Change the subscription to SAMPLE with a 1-second interval to capture flaps more frequently.
Why wrong: Even 1-second sampling may miss brief flaps.
D
Modify the subscription to use ON_CHANGE mode for the BGP neighbor paths.
ON_CHANGE ensures every state change is reported.

Review the full routing breakdown →

Question 14mediumdrag order

Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 15mediummatching

Study the full multicast explanation →

Match each multicast protocol to its role.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Host-to-router protocol for joining multicast groups

Sparse mode multicast routing using RP

Dense mode multicast routing assuming all routers want traffic

Protocol for connecting multiple PIM-SM domains

Bootstrap Router for automatic RP election

Question 16easymultiple choice

Study the full Python automation breakdown →

A network engineer wants to automate the backup of router configurations using Python and NETCONF. Which YANG model should the engineer use to access the running configuration?

Trap 1: urn:ietf:params:netconf:capability:rollback-on-error:1.0

This capability provides error rollback, not config retrieval.

Trap 2: urn:ietf:params:netconf:capability:candidate:1.0

Candidate capability allows using a candidate datastore, but for retrieval, any datastore works.

Trap 3: urn:ietf:params:netconf:capability:confirmed-commit:1.0

This capability enables confirmed commits, not retrieving config.

A
urn:ietf:params:netconf:capability:rollback-on-error:1.0
Why wrong: This capability provides error rollback, not config retrieval.
B
urn:ietf:params:netconf:capability:candidate:1.0
Why wrong: Candidate capability allows using a candidate datastore, but for retrieval, any datastore works.
C
urn:ietf:params:netconf:capability:confirmed-commit:1.0
Why wrong: This capability enables confirmed commits, not retrieving config.
D
urn:ietf:params:netconf:capability:xpath:1.0
Why wrong: XPath capability enables filtering, not required for full config retrieval.
E
urn:ietf:params:netconf:capability:writable-running:1.0
Why wrong: This capability allows writing to running, but retrieving is standard.

Review the full routing breakdown →

Question 17easymultiple choice

A network engineer needs to automate configuration of multiple Cisco routers and wants to use a protocol that supports both datastore operations and selective retrieval of configuration. Which protocol should be used?

Trap 1: SNMPv3

SNMPv3 is used for monitoring and management, not for configuration automation.

Trap 2: gRPC

gRPC is typically used for streaming telemetry, not for configuration management.

Trap 3: OpenFlow

OpenFlow is a protocol for SDN forwarding, not for device configuration.

A
SNMPv3
Why wrong: SNMPv3 is used for monitoring and management, not for configuration automation.
B
gRPC
Why wrong: gRPC is typically used for streaming telemetry, not for configuration management.
C
NETCONF
NETCONF supports full datastore operations and selective retrieval using XPath filters.
D
OpenFlow
Why wrong: OpenFlow is a protocol for SDN forwarding, not for device configuration.
E
RESTCONF
Why wrong: RESTCONF is simpler and supports CRUD operations but lacks comprehensive datastore operations like NETCONF.

Read the full Automation and Assurance explanation →

Question 18easymultiple choice

An SP customer reports intermittent voice quality issues. The engineer wants to measure jitter and packet loss between two remote sites using Cisco IP SLA. Which IP SLA operation type should be configured?

Trap 1: DNS Query

DNS Query measures DNS resolution time, not relevant for voice quality.

Trap 2: ICMP Echo

ICMP Echo only measures round-trip time, not jitter or packet loss.

Trap 3: HTTP Get

HTTP Get measures HTTP server response time, not network jitter.

A
DNS Query
Why wrong: DNS Query measures DNS resolution time, not relevant for voice quality.
B
ICMP Echo
Why wrong: ICMP Echo only measures round-trip time, not jitter or packet loss.
C
HTTP Get
Why wrong: HTTP Get measures HTTP server response time, not network jitter.
D
TCP Connect
Why wrong: TCP Connect measures TCP connection setup time, not jitter or loss.
E
UDP Jitter
UDP Jitter measures jitter, packet loss, and one-way delay, ideal for voice quality monitoring.

Question 19easymultiple choice

A service provider wants to stream interface counters from a Cisco router to a collector using model-driven telemetry. The collector is behind NAT and cannot be reached from the router. Which telemetry model should be used?

Trap 1: SNMP traps

SNMP traps are not model-driven and lack structured data.

Trap 2: gNMI

gNMI is a protocol for telemetry but typically uses dial-in; it may not solve the NAT issue.

Trap 3: NETCONF

NETCONF is for configuration management, not streaming telemetry.

A
Dial-out
Dial-out lets the router push telemetry to the collector, working even if the collector is behind NAT.
B
SNMP traps
Why wrong: SNMP traps are not model-driven and lack structured data.
C
gNMI
Why wrong: gNMI is a protocol for telemetry but typically uses dial-in; it may not solve the NAT issue.
D
NETCONF
Why wrong: NETCONF is for configuration management, not streaming telemetry.
E
Dial-in
Why wrong: Dial-in requires the collector to initiate the connection, but the collector is behind NAT.

Question 20mediummultiple choice

An engineer is using RESTCONF to configure an interface on a Cisco IOS-XE device. The request returns a 400 Bad Request error. What is the most likely cause?

Trap 1: The device does not support RESTCONF

If RESTCONF were not supported, the response would be 501 or 404, not 400.

Trap 2: The user does not have sufficient privileges

Insufficient privileges would result in a 401 or 403 error.

Trap 3: The URI is incorrect

An incorrect URI typically yields a 404 Not Found.

A
The device does not support RESTCONF
Why wrong: If RESTCONF were not supported, the response would be 501 or 404, not 400.
B
The user does not have sufficient privileges
Why wrong: Insufficient privileges would result in a 401 or 403 error.
C
The URI is incorrect
Why wrong: An incorrect URI typically yields a 404 Not Found.
D
The YANG module is not loaded
Why wrong: YANG module not loaded would cause a 404 error, not 400.
E
The JSON payload contains incorrect data types or missing mandatory leafs
400 Bad Request indicates a client-side error; invalid payload is a common cause.