Courseiva

SAUTO · topic practice

Network Programmability Foundation practice questions

This domain covers the programmability foundations you need before automating Cisco security platforms: REST API mechanics, token-based authentication, and model-driven interfaces such as NETCONF. Questions are scenario-based, asking you to choose the correct HTTP method, header, endpoint, or data store behavior for tools like Cisco DNA Center and Firepower Management Center.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Editorial oversight:Johnson Ajibi· MSc IT Security, IEEE Senior Member
20 questionsDomain: Network Programmability Foundation

What the exam tests

What to know about Network Programmability Foundation

You must be able to authenticate to Cisco DNA Center and FMC APIs, carry the returned token on later calls, and set correct REST headers and methods. The single most important thing: know which header or token controls each request, since one wrong value breaks the whole call.

REST request semantics including HTTP methods, status codes, and headers such as Accept and Content-Type

Token-based authentication flows for Cisco DNA Center and Firepower Management Center APIs

NETCONF data stores: running, candidate, and startup, plus commit and discard operations

Python scripting with requests to authenticate, retain sessions, and parse JSON responses

Why learners struggle

Why Network Programmability Foundation questions are commonly missed

RAM questions are commonly missed because learners confuse physical form factors (DIMM vs SO-DIMM) and fail to distinguish between memory speed (MHz) and latency (CL).

  • ·DIMM vs SO-DIMM — desktop vs laptop form factor confusion
  • ·DDR3 vs DDR4 vs DDR5 — notch position and voltage differences
  • ·MHz vs CL — speed vs latency trade-offs in performance
  • ·Single-channel vs dual-channel — bandwidth impact misconception
  • ·ECC vs non-ECC — error correction support in servers vs desktops
  • ·32-bit vs 64-bit — maximum addressable RAM limit

Watch out for

Common Network Programmability Foundation exam traps

  • ▸Confusing the Accept header, which declares the desired response format, with Content-Type, which declares the format of the request body being sent.
  • ▸Assuming a token from one Cisco platform works on another; DNA Center and FMC issue separate tokens with different lifetimes and headers.
  • ▸Believing edits to the NETCONF candidate data store take effect immediately, when they require an explicit commit to reach the running store.

Practice set

Network Programmability Foundation questions

20 questions · select your answer, then reveal the explanation

You are parsing a complex JSON response from a Cisco ASA API call using the json.loads() method in Python. The response contains a nested list of access control entries. Which method is most efficient to extract all 'destination_ip' fields from every entry in the list?

Question 2hardmultiple choice
Read the full REST/YANG explanation →

You are developing a NETCONF client to modify the configuration of a Cisco IOS-XE device. You have sent an <edit-config> operation. What must you include in your message to ensure the changes are committed only if the validation succeeds, using the confirmed-commit capability?

You are testing a Cisco FMC REST API endpoint using Postman. Which TWO of the following configurations are mandatory to successfully authenticate and receive a 200 OK response?

Question 4mediummultiple choice
Study the full Python automation breakdown →

A network engineer is using the 'requests' library in Python to perform a POST operation to a Cisco FMC API. Which parameter is used to send data in the body of the HTTP request?

When interacting with the Cisco Firepower API, which authentication mechanism is typically required to obtain an access token?

In Postman, which feature allows you to automate a sequence of API calls and validate the output of each?

Question 7hardmultiple choice
Read the full REST/YANG explanation →

In the context of NETCONF, which capability allows a client to explicitly lock the datastore to prevent other users from making changes?

Question 8hardmulti select
Read the full REST/YANG explanation →

Which TWO of the following are valid datastores used in the NETCONF protocol?

Which THREE of the following are considered best practices for securing API-based automation?

Question 10hardmulti select
Read the full REST/YANG explanation →

Which TWO of the following are true regarding the NETCONF <rpc-reply> message?

Which TWO of the following are valid uses of the Python 'json' module?

You are using the Cisco DNA Center API to manage security policies. You need to verify that a task has successfully completed after submitting a POST request. Which field should you monitor in the response body?

Question 13hardmultiple choice
Read the full REST/YANG explanation →

You are debugging a NETCONF session to a Cisco device. The device sends an <rpc-reply> containing an <rpc-error>. Which element inside the <rpc-error> indicates the severity of the problem?

A network engineer is automating the configuration of a Cisco ASA using the REST API. The engineer needs to retrieve the current running configuration in JSON format. Which HTTP method and endpoint should be used?

Question 15mediummulti select
Read the full REST/YANG explanation →

You are designing a YANG model for a Cisco security appliance that includes both configuration and operational state data. You need to ensure that certain leaf nodes are read-only and reflect the current status of the device. Which TWO statements are true regarding the use of 'config' and 'state' data nodes in YANG? (Choose two.)

A security automation engineer needs to programmatically create a new network object on a Cisco Firepower Management Center using the REST API. The engineer wants the request to be idempotent so that re-running the script does not create duplicate objects. Which HTTP method should the script use for the create operation?

Question 17mediummultiple choice
Study the full Python automation breakdown →

You are writing a Python script to interact with the Cisco Firepower Management Center (FMC) API. You need to authenticate to obtain an authentication token. Which HTTP method and endpoint must your script utilize to initiate this process?

Question 18mediummulti select
Read the full REST/YANG explanation →

When working with YANG data models in Cisco security automation, which TWO statements accurately describe the role of the 'leaf' and 'leaf-list' nodes?

In the context of REST APIs, which status code indicates that a request was successful and a new resource was created on the server?

Question 20mediummultiple choice
Study the full Python automation breakdown →

When parsing a JSON response from a Cisco Adaptive Security Appliance (ASA) REST API call using the Python requests library, you notice the data structure contains a list of objects under the key 'items'. Which Python expression correctly accesses the 'name' field of the first object in that list?

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Network Programmability Foundation sessions

Start a Network Programmability Foundation only practice session

Every question in these sessions is drawn from the Network Programmability Foundation domain — nothing else.

Related practice questions

Related SAUTO topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the SAUTO exam test about Network Programmability Foundation?
You must be able to authenticate to Cisco DNA Center and FMC APIs, carry the returned token on later calls, and set correct REST headers and methods. The single most important thing: know which header or token controls each request, since one wrong value breaks the whole call.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Network Programmability Foundation questions in a focused session?
Yes — the session launcher on this page draws every question from the Network Programmability Foundation domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other SAUTO topics?
Use the topic links above to move to related areas, or go back to the SAUTO question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the SAUTO exam covers. They are not copied from any real exam or dump site.