mediumMultiple SelectObjective-mapped
350-401 Practice Question: Which two statements about Ansible automation in…
Which two statements about Ansible automation in a Cisco environment are true? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ansible uses a push-based model to configure network devices.
Ansible uses a push-based model where the control node pushes modules to managed nodes. It is agentless, relying on SSH or API connections. Ansible Tower provides a web UI and RBAC, while the default inventory is INI-based. Playbooks are written in YAML, not Python. Ansible Galaxy is a community hub for roles.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Ansible uses a push-based model to configure network devices.
Why this is correct
Correct: Ansible pushes configurations from the control node to managed nodes using SSH or APIs.
- ✗
Ansible requires an agent to be installed on managed Cisco devices.
Why it's wrong here
Incorrect: Ansible is agentless; it connects via SSH or API without requiring any agent.
- ✓
Ansible Tower provides a web-based GUI and role-based access control.
Why this is correct
Correct: Ansible Tower (now Red Hat Ansible Automation Platform) offers a GUI, RBAC, and job scheduling.
- ✗
The default Ansible inventory file is written in YAML format.
Why it's wrong here
Incorrect: The default inventory file is INI-based; YAML is an alternative format.
- ✗
Ansible playbooks are written in Python.
Why it's wrong here
Incorrect: Playbooks are written in YAML, not Python. Python is used for modules and plugins.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.