Infrastructure as Code (IaC) Characteristics for Cisco DevNet Associate
Which TWO statements accurately describe characteristics of infrastructure as code (IaC) in network automation?
Quick Answer
The answer is that IaC allows network configurations to be stored in version control and tested before deployment. This is correct because Infrastructure as Code treats network state as machine-readable definition files—whether declarative (desired end state) or imperative (step-by-step)—which can be committed to Git, reviewed, and validated in a staging environment before touching production. On the Cisco DevNet Associate 200-901 exam, this characteristic tests your understanding of how tools like Ansible, Terraform, or Cisco NSO enforce consistency and prevent configuration drift. A common trap is confusing IaC with simple scripting: IaC’s key differentiator is its repeatability through version-controlled, testable templates, not just automation. Remember the memory tip “Version, Test, Repeat”—if a solution lacks version control or pre-deployment testing, it is not true IaC.
⚠ Common exam trap
Cisco often tests the misconception that IaC is only for virtual or cloud environments, when in fact it is designed to manage any programmable network device, including physical hardware, via standard interfaces like NETCONF/RESTCONF.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
IaC tools use declarative or imperative models to define the desired state of network infrastructure.
Infrastructure as Code (IaC) tools like Ansible, Terraform, and Cisco NSO allow network engineers to define the desired state of infrastructure using either declarative (what the end state should be) or imperative (step-by-step instructions) models. This abstraction enables consistent, repeatable deployments and reduces configuration drift across the network.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
IaC eliminates the need for manual review of configuration changes before deployment.
Why it's wrong here
Manual review is still often part of the process for safety.
- ✗
IaC requires that all network devices be replaced with software-based equivalents.
Why it's wrong here
IaC manages existing hardware, not replaces it.
- ✗
IaC is only applicable to virtual network functions, not physical devices.
Why it's wrong here
Physical devices can be managed via IaC using APIs or SSH.
- ✓
IaC tools use declarative or imperative models to define the desired state of network infrastructure.
Why this is correct
IaC can be declarative (e.g., Terraform) or imperative (e.g., Ansible).
- ✓
IaC allows network configurations to be stored in version control and tested before deployment.
Why this is correct
Version control and CI/CD pipelines are key benefits.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 200-901
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO of the following are characteristics of a declarative automation model? (Select exactly 2.)
medium- A.It requires procedural scripts
- ✓ B.You specify the desired end state
- C.Idempotency is not a concern
- ✓ D.The tool handles ordering and dependencies
- E.You specify the exact steps to achieve the state
Why B: In a declarative automation model, you specify the desired end state of the system, not the steps to achieve it. This is a core characteristic because the automation tool (e.g., Ansible, Terraform, Puppet) interprets the desired state and determines the necessary actions to reach it, making option B correct.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.