Python for Network Automation practice questions

Study all Python for Network Automation common traps →

A network engineer is writing a Python script to automate the backup of running configurations from a list of 50 Cisco IOS-XE devices. The script uses the netmiko library and a for loop to connect to each device, execute 'show run', and write the output to a file. After running the script, the engineer notices that the script fails on the 15th device with a timeout error, and the remaining devices are not processed. The engineer wants to ensure that if one device fails, the script continues with the next device. What is the best way to modify the script?

Trap 1: Increase the global timeout value in the netmiko connection handler.

Incorrect because increasing the timeout may delay the failure but will not prevent the script from stopping when an exception occurs.

Trap 2: Use the concurrent.futures module to run each connection in a…

Incorrect because multithreading does not automatically handle exceptions; a failure in one thread would still need to be caught, and the script may still stop if not handled.

Trap 3: Replace the for loop with a while loop that retries the connection…

Incorrect because a while loop with retries does not prevent the script from stopping if an unhandled exception occurs; it only adds retry logic.

A
Increase the global timeout value in the netmiko connection handler.
Why wrong: Incorrect because increasing the timeout may delay the failure but will not prevent the script from stopping when an exception occurs.
B
Use the concurrent.futures module to run each connection in a separate thread.
Why wrong: Incorrect because multithreading does not automatically handle exceptions; a failure in one thread would still need to be caught, and the script may still stop if not handled.
C
Wrap the connection and backup logic inside a try-except block within the for loop.
Correct because a try-except block catches the exception for the failing device and allows the loop to continue to the next device.
D
Replace the for loop with a while loop that retries the connection three times before moving on.
Why wrong: Incorrect because a while loop with retries does not prevent the script from stopping if an unhandled exception occurs; it only adds retry logic.

Question 2mediummultiple choice

Study all Python for Network Automation common traps →

An engineer is using the Cisco DNA Center REST API to retrieve a list of network devices and their health scores. The engineer writes a Python script using the requests library. The script successfully retrieves data for the first 100 devices, but when trying to get the next 100, the API returns an empty list. The engineer checks the API documentation and finds that the endpoint supports pagination with the 'offset' and 'limit' parameters. The current script does not handle pagination. What should the engineer do to retrieve all devices?

Trap 1: Increase the 'limit' parameter to 1000 in a single API call.

Incorrect because the API likely enforces a maximum limit per call, and setting it too high may result in an error or truncated data.

Trap 2: Use the 'next' URL from the response headers to automatically fetch…

Incorrect because the scenario states the API does not provide a 'next' link; it uses offset and limit parameters.

Trap 3: Switch to using the Cisco DNA Center Python SDK which handles…

Incorrect because while the SDK may help, the question asks what the engineer should do with the current script, and the SDK is not the only solution.

A
Increase the 'limit' parameter to 1000 in a single API call.
Why wrong: Incorrect because the API likely enforces a maximum limit per call, and setting it too high may result in an error or truncated data.
B
Use the 'next' URL from the response headers to automatically fetch the next page.
Why wrong: Incorrect because the scenario states the API does not provide a 'next' link; it uses offset and limit parameters.
C
Write a loop that increments the 'offset' parameter by the 'limit' value until all pages are retrieved.
Correct because this implements standard pagination by adjusting the offset parameter in each iteration until no more data is returned.
D
Switch to using the Cisco DNA Center Python SDK which handles pagination automatically.
Why wrong: Incorrect because while the SDK may help, the question asks what the engineer should do with the current script, and the SDK is not the only solution.

Question 3hardmultiple choice

Study all Python for Network Automation common traps →

A network engineer is automating the configuration of VLANs on a Cisco Nexus 9000 switch using Python and the NX-API. The engineer sends a Python dictionary with the CLI commands to the API and receives a successful response. However, when checking the switch, the VLANs are not created. The engineer verifies that the credentials and IP address are correct, and the API is enabled. The engineer also notices that the API response contains a 'code' field of '200' and a 'result' field that shows the command output. What is the most likely cause of the issue?

Trap 1: The API response code of 200 indicates an error, and the engineer…

Incorrect because HTTP 200 means success; the issue is not with the status code.

Trap 2: The VLAN commands are incorrect; the engineer should use 'vlan 10'…

Incorrect because the range syntax is valid on Nexus switches.

Trap 3: The switch requires a 'commit' command after configuration changes…

Incorrect because Nexus switches do not require a commit unless in a specific feature like configuration session; NX-API applies changes immediately.

A
The API response code of 200 indicates an error, and the engineer should check for a different status code.
Why wrong: Incorrect because HTTP 200 means success; the issue is not with the status code.
B
The VLAN commands are incorrect; the engineer should use 'vlan 10' instead of 'vlan 10-20'.
Why wrong: Incorrect because the range syntax is valid on Nexus switches.
C
The engineer used the 'show' message type in the API request instead of 'cli_conf'.
Correct because NX-API requires the 'cli_conf' type to execute configuration commands; 'show' only executes show commands and does not apply changes.
D
The switch requires a 'commit' command after configuration changes via NX-API.
Why wrong: Incorrect because Nexus switches do not require a commit unless in a specific feature like configuration session; NX-API applies changes immediately.

Question 4mediummultiple choice

Study all Python for Network Automation common traps →

A junior engineer is tasked with writing a Python script that uses the Cisco IOS-XE RESTCONF API to retrieve the hostname of a router. The engineer uses the requests library and sends a GET request to the URL 'https://router/restconf/data/Cisco-IOS-XE-native:native/hostname'. The request returns a 404 Not Found error. The engineer has verified that the RESTCONF service is enabled and the credentials are correct. What is the most likely reason for the 404 error?

Trap 1: The hostname data node does not exist in the YANG model.

Incorrect because the hostname is a standard data node in the Cisco-IOS-XE-native model.

Trap 2: The engineer forgot to include the 'Accept:…

Incorrect because while the Accept header is recommended, its absence does not cause a 404; it may cause a 406 or the server may still respond.

Trap 3: The engineer must use a different HTTP method like POST to retrieve…

Incorrect because GET is the correct method to retrieve data.

A
The hostname data node does not exist in the YANG model.
Why wrong: Incorrect because the hostname is a standard data node in the Cisco-IOS-XE-native model.
B
The engineer forgot to include the 'Accept: application/yang-data+json' header in the request.
Why wrong: Incorrect because while the Accept header is recommended, its absence does not cause a 404; it may cause a 406 or the server may still respond.
C
The URL path should be '/restconf/data/Cisco-IOS-XE-native:hostname' instead of including 'native' in the path.
Correct because the YANG module name is 'Cisco-IOS-XE-native', and the top-level node is 'hostname', so the path should be '/restconf/data/Cisco-IOS-XE-native:hostname'.
D
The engineer must use a different HTTP method like POST to retrieve the hostname.
Why wrong: Incorrect because GET is the correct method to retrieve data.

Question 5mediummultiple choice

Study all Python for Network Automation common traps →

A network engineer is using the Cisco Meraki Dashboard API to automate the creation of VLANs across multiple networks. The engineer writes a Python script that uses the 'createNetworkVlan' endpoint. The script runs successfully for the first few networks, but then starts returning HTTP 429 errors. The engineer checks the API documentation and finds that the Meraki API has rate limits. The script currently sends requests as fast as possible. What should the engineer implement to avoid hitting the rate limit?

Trap 1: Reduce the number of networks being processed in a single script…

Incorrect because this only delays the problem; the engineer still needs to process all networks eventually.

Trap 2: Increase the 'per-second' rate limit by setting a higher value in…

Incorrect because rate limits are enforced by the server and cannot be changed by the client.

Trap 3: Switch to using the Meraki API version 1.0 which has no rate limits.

Incorrect because all versions of the Meraki API have rate limits.

A
Reduce the number of networks being processed in a single script run.
Why wrong: Incorrect because this only delays the problem; the engineer still needs to process all networks eventually.
B
Increase the 'per-second' rate limit by setting a higher value in the API request header.
Why wrong: Incorrect because rate limits are enforced by the server and cannot be changed by the client.
C
Add a retry mechanism with exponential backoff when a 429 response is received.
Correct because exponential backoff is a standard technique to handle rate limits by pausing and retrying after increasing intervals.
D
Switch to using the Meraki API version 1.0 which has no rate limits.
Why wrong: Incorrect because all versions of the Meraki API have rate limits.

Question 6hardmultiple choice

Study all Python for Network Automation common traps →

An engineer is writing a Python script to parse the output of 'show ip interface brief' from multiple Cisco routers. The engineer uses the netmiko library to collect the output and then uses regular expressions to extract the interface name, IP address, and status. The script works correctly for most routers, but on one router, the output format is slightly different (e.g., extra spaces or different column headers). The engineer wants to make the parsing more robust. What is the best approach?

Trap 1: Write a custom parser that handles each router's output format…

Incorrect because this is not scalable and requires manual effort for each router.

Trap 2: Use the 'split()' method to tokenize each line and then extract the…

Incorrect because this is brittle and fails if the column order or spacing changes.

Trap 3: Use the 're' module with a more complex regular expression that…

Incorrect because while this may help, it is still less robust than textfsm and harder to maintain.

A
Write a custom parser that handles each router's output format individually.
Why wrong: Incorrect because this is not scalable and requires manual effort for each router.
B
Use the 'split()' method to tokenize each line and then extract the relevant fields by position.
Why wrong: Incorrect because this is brittle and fails if the column order or spacing changes.
C
Use the 'textfsm' library with a pre-defined template for 'show ip interface brief'.
Correct because textfsm templates are designed to handle variations in output format and provide structured data.
D
Use the 're' module with a more complex regular expression that accounts for optional whitespace.
Why wrong: Incorrect because while this may help, it is still less robust than textfsm and harder to maintain.

Question 7easymultiple choice

Study all Python for Network Automation common traps →

A network engineer is automating the deployment of a new VLAN configuration across 100 Cisco IOS-XE switches using Ansible. The engineer writes a playbook that uses the 'ios_config' module. The playbook runs, but the engineer notices that the configuration is applied to only 50 switches before the playbook stops with an error. The error message indicates that one switch is unreachable. The engineer wants to ensure that the playbook continues with the remaining switches even if some are unreachable. What Ansible configuration should the engineer use?

Trap 1: Set 'timeout: 60' in the playbook to allow more time for…

Incorrect because this only increases the timeout; the playbook will still stop on failure.

Trap 2: Set 'gather_facts: no' to speed up the playbook and avoid timeouts.

Incorrect because this does not handle unreachable hosts.

Trap 3: Set 'serial: 10' to run the playbook on 10 switches at a time.

Incorrect because this controls parallelism, not error handling.

A
Set 'timeout: 60' in the playbook to allow more time for connections.
Why wrong: Incorrect because this only increases the timeout; the playbook will still stop on failure.
B
Set 'gather_facts: no' to speed up the playbook and avoid timeouts.
Why wrong: Incorrect because this does not handle unreachable hosts.
C
Set 'ignore_errors: yes' on the task that configures the VLAN.
Correct because this tells Ansible to continue even if the task fails on a host.
D
Set 'serial: 10' to run the playbook on 10 switches at a time.
Why wrong: Incorrect because this controls parallelism, not error handling.

Study the full QoS explanation →

Question 8hardmultiple choice

An engineer is using the Cisco pyATS framework to test the configuration of a new QoS policy on a router. The engineer writes a testbed file and a test script that logs into the router, applies the configuration, and then verifies the output of 'show policy-map interface'. The test script fails because the verification step cannot find the expected output. The engineer confirms that the configuration was applied successfully. What is the most likely cause of the failure?

Trap 1: The pyATS library requires Python 3.8 or later, and the engineer is…

Incorrect because pyATS supports multiple Python versions; this is not the issue.

Trap 2: The testbed file has incorrect credentials for the router.

Incorrect because the engineer confirmed the configuration was applied, so login was successful.

Trap 3: The test script uses the 'genie' library instead of 'pyats' for…

Incorrect because genie is a part of pyATS and is the correct library for parsing.

Study all Python for Network Automation common traps →

A
The pyATS library requires Python 3.8 or later, and the engineer is using an older version.
Why wrong: Incorrect because pyATS supports multiple Python versions; this is not the issue.
B
The testbed file has incorrect credentials for the router.
Why wrong: Incorrect because the engineer confirmed the configuration was applied, so login was successful.
C
The test script does not include a sleep or wait mechanism after applying the configuration.
Correct because QoS policies may take a few seconds to be reflected in the output; the script should wait before verifying.
D
The test script uses the 'genie' library instead of 'pyats' for parsing.
Why wrong: Incorrect because genie is a part of pyATS and is the correct library for parsing.

Question 9easymultiple choice

Study all Python for Network Automation common traps →

A network engineer is automating the collection of syslog messages from a Cisco ASA firewall using a Python script that connects via SSH and runs 'show log'. The script uses the paramiko library. The script works for a few minutes, but then the SSH connection drops with an error 'Server connection dropped'. The engineer suspects that the ASA is closing the connection due to inactivity. What is the best way to keep the connection alive?

Trap 1: Increase the buffer size in the paramiko SSH client.

Incorrect because buffer size affects data transfer, not connection keepalive.

Trap 2: Run a dummy command like 'show clock' every 30 seconds to keep the…

Incorrect because while this may work, it is not the best practice; it adds unnecessary commands and may interfere with the log output.

Trap 3: Use the netmiko library instead, which automatically handles…

Incorrect because netmiko does not automatically enable keepalives; it uses paramiko under the hood and requires explicit configuration.

A
Increase the buffer size in the paramiko SSH client.
Why wrong: Incorrect because buffer size affects data transfer, not connection keepalive.
B
Run a dummy command like 'show clock' every 30 seconds to keep the session active.
Why wrong: Incorrect because while this may work, it is not the best practice; it adds unnecessary commands and may interfere with the log output.
C
Set the 'keepalive' parameter in the paramiko Transport object to send keepalive packets every 30 seconds.
Correct because keepalive packets prevent the firewall from closing the idle connection.
D
Use the netmiko library instead, which automatically handles keepalives.
Why wrong: Incorrect because netmiko does not automatically enable keepalives; it uses paramiko under the hood and requires explicit configuration.

Question 10mediummultiple choice

Study all Python for Network Automation common traps →

A network engineer writes the following Python script using Netmiko to configure a Cisco IOS-XE device:

```python

from netmiko import ConnectHandler

device = { 'device_type': 'cisco_ios', 'ip': '192.168.1.1', 'username': 'admin', 'password': 'cisco123',

connection = ConnectHandler(**device) output = connection.send_command('show ip interface brief')

print(output)

connection.disconnect() ```

What is the primary issue with this script?

Trap 1: The script will fail because the device_type should be…

cisco_ios is the correct device_type for IOS-XE; there is no separate type.

Trap 2: The script will fail because the send_command method cannot be used…

send_command works fine for show commands; it waits for the prompt.

Trap 3: The script will fail because the password is not encrypted; Netmiko…

Netmiko accepts plaintext passwords; encryption is not required.

A
The script will fail because the device_type should be 'cisco_ios_xe' for IOS-XE devices.
Why wrong: cisco_ios is the correct device_type for IOS-XE; there is no separate type.
B
The script will fail because the send_command method cannot be used for show commands; it requires send_command_timing.
Why wrong: send_command works fine for show commands; it waits for the prompt.
C
The script will fail because the device is not in enable mode, and 'show ip interface brief' may not execute or return restricted output.
Without enable mode, the command may be rejected or return limited output. The script should call connection.enable() after connecting.
D
The script will fail because the password is not encrypted; Netmiko requires an encrypted password.
Why wrong: Netmiko accepts plaintext passwords; encryption is not required.

Question 11mediummultiple choice

Study all Python for Network Automation common traps →

A network engineer uses NAPALM to retrieve the ARP table from a Cisco IOS-XE device:

```python

from napalm import get_network_driver

driver = get_network_driver('ios') device = driver('192.168.1.1', 'admin', 'cisco123') device.open() arp_table = device.get_arp_table()

print(arp_table)

device.close() ```

What is the expected data type of arp_table?

Trap 1: A dictionary with keys 'arp_table' and a list of tuples.

NAPALM does not wrap the result in a dictionary; it returns the list directly.

Trap 2: A string containing the raw CLI output of 'show arp'.

NAPALM parses the output into structured data, not raw text.

Trap 3: A list of strings, each representing an ARP entry.

The entries are dictionaries, not strings.

A
A list of dictionaries, each with keys such as 'interface', 'ip', 'mac', and 'age'.
NAPALM returns structured data as a list of dictionaries for ARP entries.
B
A dictionary with keys 'arp_table' and a list of tuples.
Why wrong: NAPALM does not wrap the result in a dictionary; it returns the list directly.
C
A string containing the raw CLI output of 'show arp'.
Why wrong: NAPALM parses the output into structured data, not raw text.
D
A list of strings, each representing an ARP entry.
Why wrong: The entries are dictionaries, not strings.

Question 12hardmultiple choice

Study all Python for Network Automation common traps →

A network engineer writes an Ansible playbook to configure a VLAN on a Cisco Nexus switch:

```yaml --- - name: Configure VLAN hosts: nxos_switches gather_facts: no tasks: - name: Create VLAN 100 cisco.nxos.nxos_vlan: vlan_id: 100 name: test_vlan state: present ```

What is a potential issue with this playbook?

Trap 1: The module name is incorrect; it should be 'nxos_vlan_config'…

cisco.nxos.nxos_vlan is a valid module for VLAN configuration.

Trap 2: The VLAN ID must be a string, not an integer.

The vlan_id parameter accepts integers.

Trap 3: The 'state: present' is invalid; it should be 'state: create'.

state: present is correct for ensuring the VLAN exists.

A
The module name is incorrect; it should be 'nxos_vlan_config' instead of 'nxos_vlan'.
Why wrong: cisco.nxos.nxos_vlan is a valid module for VLAN configuration.
B
The playbook is missing the 'connection: network_cli' and 'become: yes' directives to enable privileged mode.
Network modules require network_cli connection and privilege escalation.
C
The VLAN ID must be a string, not an integer.
Why wrong: The vlan_id parameter accepts integers.
D
The 'state: present' is invalid; it should be 'state: create'.
Why wrong: state: present is correct for ensuring the VLAN exists.

Question 13hardmultiple choice

Study all Python for Network Automation common traps →

A network engineer uses the Requests library to query a Cisco IOS-XE device via RESTCONF for interface statistics:

```python

import requests
from requests.auth import HTTPBasicAuth

url = 'https://192.168.1.1/restconf/data/Cisco-IOS-XE-interfaces-oper:interfaces/interface=GigabitEthernet1/statistics' headers = {'Accept': 'application/yang-data+json'} auth = HTTPBasicAuth('admin', 'cisco123') response = requests.get(url, headers=headers, auth=auth, verify=False)

print(response.json())

```

What is the most likely issue with this code?

Trap 1: The URL is missing the '/data' segment; it should be…

The URL already includes '/restconf/data/'.

Trap 2: The Accept header should be 'application/json' instead of…

RESTCONF uses 'application/yang-data+json' for YANG data.

Trap 3: The HTTP method should be POST instead of GET.

GET is correct for retrieving data.

A
The URL is missing the '/data' segment; it should be '/restconf/data/...'
Why wrong: The URL already includes '/restconf/data/'.
B
The interface name 'GigabitEthernet1/0/1' in the URL must be URL-encoded as 'GigabitEthernet1%2F0%2F1'.
The slash in the interface name must be percent-encoded to avoid being interpreted as a path separator.
C
The Accept header should be 'application/json' instead of 'application/yang-data+json'.
Why wrong: RESTCONF uses 'application/yang-data+json' for YANG data.
D
The HTTP method should be POST instead of GET.
Why wrong: GET is correct for retrieving data.

Question 14mediummultiple choice

Study all Python for Network Automation common traps →

A network engineer uses the Cisco DNA Center REST API to retrieve the list of devices. The API returns the following JSON:

```json

{
  "response": [
    {
      "id": "12345678-1234-1234-1234-123456789abc",
      "managementIpAddress": "192.168.1.1",
      "hostname": "Router1",
      "platformId": "ISR4331",
      "role": "ACCESS",
      "series": "ISR4300 Series"
    }
  ],
  "version": "1.0"
}

```

The engineer writes the following Python code to extract the hostname of the first device:

```python

import requests

url = 'https://dna-center.local/dna/intent/api/v1/network-device' headers = {'X-Auth-Token': 'valid_token', 'Accept': 'application/json'} response = requests.get(url, headers=headers, verify=False) data = response.json()

hostname = data['response'][0]['hostname']
print(hostname)

```

What is a potential issue with this code?

Trap 1: The URL is missing the '/v1' version segment.

The URL includes '/v1'.

Trap 2: The 'Accept' header should be 'application/yang-data+json' for DNA…

DNA Center uses standard JSON, not YANG-specific JSON.

Trap 3: The 'X-Auth-Token' header is not the correct authentication method;…

DNA Center uses token-based authentication via X-Auth-Token.

A
The URL is missing the '/v1' version segment.
Why wrong: The URL includes '/v1'.
B
The code does not check if the HTTP response status is 200 before parsing JSON, which could lead to errors if the token is invalid.
Without status check, a 401 or 500 error would cause the script to fail unpredictably.
C
The 'Accept' header should be 'application/yang-data+json' for DNA Center.
Why wrong: DNA Center uses standard JSON, not YANG-specific JSON.
D
The 'X-Auth-Token' header is not the correct authentication method; DNA Center uses Basic Auth.
Why wrong: DNA Center uses token-based authentication via X-Auth-Token.

Question 15hardmultiple choice

Study all Python for Network Automation common traps →

A network engineer configures model-driven telemetry on a Cisco IOS-XE device using gRPC dial-out. The subscription configuration snippet is:

``` telemetry ietf subscription 100 encoding encode-kvgpb filter xpath /interfaces/interface/statistics stream yang-push update-policy periodic 500 receiver ip address 10.1.1.1 50001 protocol grpc-tcp ```

What is the primary issue with this configuration?

Trap 1: The 'stream' should be 'yang-notif' instead of 'yang-push'.

yang-push is correct for periodic push updates.

Trap 2: The 'update-policy periodic' value must be between 100 and 1000…

The value is in seconds, and 500 is valid.

Trap 3: The 'receiver' command should specify 'protocol grpc' instead of…

grpc-tcp is the correct protocol keyword for gRPC over TCP.

A
The 'encoding' should be 'encode-json' or 'encode-gpb' instead of 'encode-kvgpb' for gRPC.
KVGPB is not a standard encoding for gRPC; JSON or GPB are used.
B
The 'stream' should be 'yang-notif' instead of 'yang-push'.
Why wrong: yang-push is correct for periodic push updates.
C
The 'update-policy periodic' value must be between 100 and 1000 milliseconds.
Why wrong: The value is in seconds, and 500 is valid.
D
The 'receiver' command should specify 'protocol grpc' instead of 'grpc-tcp'.
Why wrong: grpc-tcp is the correct protocol keyword for gRPC over TCP.

Question 16mediummultiple choice

Study all Python for Network Automation common traps →

A network engineer writes a Python script using Paramiko to execute a command on a Cisco IOS device:

```python

import paramiko

ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) ssh.connect('192.168.1.1', username='admin', password='cisco123') stdin, stdout, stderr = ssh.exec_command('show version') output = stdout.read().decode()

print(output)

ssh.close() ```

What is a potential issue with this approach?

Trap 1: The script will work fine because exec_command() sends the command…

Cisco IOS does not support exec_command() directly; it requires an interactive shell.

Trap 2: The script will fail because the username and password are passed…

Paramiko supports password authentication.

Trap 3: The script will fail because the output should be read using…

Both methods work, but read() is fine.

A
The script will work fine because exec_command() sends the command over SSH.
Why wrong: Cisco IOS does not support exec_command() directly; it requires an interactive shell.
B
The script will fail because the username and password are passed as plaintext; Paramiko requires key-based authentication.
Why wrong: Paramiko supports password authentication.
C
The script will fail because Cisco IOS does not support SSH command execution; it requires an interactive shell session.
Paramiko's exec_command() opens a single channel that may not work with IOS; using invoke_shell() is needed.
D
The script will fail because the output should be read using stdout.readlines() instead of stdout.read().
Why wrong: Both methods work, but read() is fine.

Question 17mediummultiple choice

Study all Python for Network Automation common traps →

A network engineer uses the Requests library to send a RESTCONF PATCH request to modify the hostname of a Cisco IOS-XE device:

```python

import requests
from requests.auth import HTTPBasicAuth

url = 'https://192.168.1.1/restconf/data/Cisco-IOS-XE-native:native/hostname' headers = {'Content-Type': 'application/yang-data+json'} auth = HTTPBasicAuth('admin', 'cisco123') payload = { 'Cisco-IOS-XE-native:hostname': 'NewRouter'

response = requests.patch(url, json=payload, headers=headers, auth=auth, verify=False)

print(response.status_code)

```

What is the expected HTTP status code if the request is successful?

Trap 1: 200 OK

While possible, the standard RESTCONF response for PATCH is 204 No Content.

Trap 2: 201 Created

201 is for POST when a new resource is created.

Trap 3: 202 Accepted

202 is for asynchronous operations, not typical for PATCH.

A
200 OK
Why wrong: While possible, the standard RESTCONF response for PATCH is 204 No Content.
B
201 Created
Why wrong: 201 is for POST when a new resource is created.
C
204 No Content
RESTCONF PATCH returns 204 on success.
D
202 Accepted
Why wrong: 202 is for asynchronous operations, not typical for PATCH.

Read the full Ansible explanation →

Question 18hardmultiple choice

A network engineer writes an Ansible playbook to gather facts from a Cisco IOS device using the ios_facts module:

```yaml --- - name: Gather IOS Facts hosts: ios_devices gather_facts: no tasks: - name: Collect facts cisco.ios.ios_facts: gather_subset: - hardware register: device_facts

- name: Show serial number debug: msg: "Serial number is {{ device_facts['ansible_facts']['ansible_net_serialnum'] }}" ```

What is a potential issue with this playbook?

Trap 1: The 'gather_subset' parameter is misspelled; it should be…

The parameter is correctly spelled as 'gather_subset'.

Trap 2: The registered variable 'device_facts' should be accessed as…

Both dot and bracket notation work in Ansible.

Trap 3: The 'hardware' subset is invalid; it should be 'all' to get serial…

The 'hardware' subset includes serial number.

Study all Python for Network Automation common traps →

A
The 'gather_subset' parameter is misspelled; it should be 'gather_subset' (correct spelling).
Why wrong: The parameter is correctly spelled as 'gather_subset'.
B
The playbook is missing 'connection: network_cli' and 'become: yes' to enable network device access.
Network modules require these settings to function properly.
C
The registered variable 'device_facts' should be accessed as 'device_facts.ansible_facts.ansible_net_serialnum' using dot notation.
Why wrong: Both dot and bracket notation work in Ansible.
D
The 'hardware' subset is invalid; it should be 'all' to get serial number.
Why wrong: The 'hardware' subset includes serial number.

Question 19mediummultiple choice

Study all Python for Network Automation common traps →

Examine the following Python script snippet that uses netmiko to configure a Cisco IOS-XE device:

```python

from netmiko import ConnectHandler

device = { 'device_type': 'cisco_ios', 'ip': '192.168.1.1', 'username': 'admin', 'password': 'cisco',

connection = ConnectHandler(**device) output = connection.send_command('show ip interface brief')

print(output)

connection.disconnect() ```

What is the primary purpose of this script?

Trap 1: It configures an IP address on an interface.

The script only sends a show command, not configuration commands.

Trap 2: It saves the running configuration to startup configuration.

There is no write memory or copy command in the script.

Trap 3: It backs up the configuration to a TFTP server.

No TFTP transfer is performed.

A
It configures an IP address on an interface.
Why wrong: The script only sends a show command, not configuration commands.
B
It retrieves and prints the output of 'show ip interface brief'.
The script connects, sends a show command, prints the output, and disconnects.
C
It saves the running configuration to startup configuration.
Why wrong: There is no write memory or copy command in the script.
D
It backs up the configuration to a TFTP server.
Why wrong: No TFTP transfer is performed.

Question 20mediummultiple choice

Study all Python for Network Automation common traps →

Consider the following Python script using the requests library to interact with a Cisco IOS-XE device via RESTCONF:

```python

import requests
from requests.auth import HTTPBasicAuth

url = 'https://192.168.1.1/restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=1/0/1' headers = { 'Accept': 'application/yang-data+json', 'Content-Type': 'application/yang-data+json'

auth = HTTPBasicAuth('admin', 'cisco')

response = requests.get(url, headers=headers, auth=auth, verify=False)

print(response.json())

```

What is the script attempting to do?

Trap 1: It updates the IP address of GigabitEthernet1/0/1.

A GET request only retrieves data; it does not modify configuration.

Trap 2: It deletes the interface configuration.

A DELETE method would be required to delete configuration.

Trap 3: It creates a new interface.

A POST or PUT method would be needed to create or modify configuration.

A
It updates the IP address of GigabitEthernet1/0/1.
Why wrong: A GET request only retrieves data; it does not modify configuration.
B
It retrieves the configuration of GigabitEthernet1/0/1 in JSON format.
The GET request with Accept header for YANG data+JSON retrieves the interface configuration.
C
It deletes the interface configuration.
Why wrong: A DELETE method would be required to delete configuration.
D
It creates a new interface.
Why wrong: A POST or PUT method would be needed to create or modify configuration.