307 questions total · 5pages · All types, answers revealed
Page 1 of 5
Page 2In a Jinja2 template designed for Junos configuration, how do you correctly output the value of a variable named 'hostname'?
Correct. Double curly braces output the evaluated value of a variable.
Why this answer
Jinja2 uses double curly braces to print or evaluate variables.
Which PyEZ utility module should you import if you need to upgrade the Junos operating system on a remote device via a Python script?
Correct. SW is the PyEZ software utility module.
Why this answer
The SW utility module from jnpr.junos.utils.sw is used for software installation and upgrades.
Your CI/CD pipeline includes a linters step before deployment. Why is running a linter against YAML or Jinja2 template files critical in a Junos automation workflow?
Correct. Linters validate static code and markup syntax prior to runtime execution.
Why this answer
Linters catch syntax errors, formatting inconsistencies, and indentation mistakes before files are processed by automation tools or sent to devices.
An engineer needs to convert an existing YAML-formatted inventory file into JSON format using a Python script. Which workflow accomplishes this transformation?
Correct. Parsing YAML into native Python objects allows them to be re-serialized into JSON.
Why this answer
To convert YAML to JSON, the engineer must read and parse the YAML file into a Python data structure using yaml.safe_load(), and then serialize that structure into a JSON string using json.dumps().
You want to retrieve only the system hostname from the Junos running configuration using NETCONF. Which filtering technique is most efficient?
Subtree filtering uses specific XML elements to mirror the configuration tree and filter the output.
Why this answer
Tag-based filtering allows requesting specific configuration hierarchies by including empty container tags in the <get-config> request.
415 Unsupported Media Type is explicitly caused by missing or invalid Content-Type headers.
You are writing a Python automation tool that reads telemetry data from a Junos device. The data is received as a JSON string containing forward slashes escaped as '\/'. When you load this string using json.loads(), how does Python handle the escaped slashes?
Correct. json.loads() decodes escaped forward slashes into standard slashes.
Why this answer
JSON allows forward slashes to be escaped as '\/' for embedding JSON inside HTML script tags. Python's json.loads() automatically unescapes '\/' into normal '/' characters in the resulting string.
When troubleshooting REST API authentication and authorization on Junos devices, which THREE log files or diagnostic tools can an administrator inspect? (Choose three)
Response codes (401, 403) provide immediate clues regarding auth failures.
Why this answer
Administrators can check jpagent traceoptions logs, messages log (/var/log/messages), and HTTP response headers/status codes for debugging.
Which TWO statements are true regarding PyEZ Table and View definitions? (Choose two)
Correct. Views specify field mappings.
Why this answer
Tables map to RPCs and Views map to item fields using YAML.
You are building a custom PyEZ application and need to catch exceptions specific to configuration parsing failures returned by Junos. Which exception class should your script import?
Correct. ConfigError handles configuration-related exceptions in PyEZ.
Why this answer
ConfigError is raised by PyEZ when configuration loading or committing fails.
When executing a NETCONF transaction on a Junos device, an automation script encounters an error or needs to discard changes made in the candidate datastore. Which THREE RPC elements or concepts apply to discarding or rolling back changes in Junos NETCONF workflows? (Choose three.)
Using <unlock> releases the datastore lock, which is a best practice in robust script error-handling blocks.
Why this answer
Junos NETCONF supports discarding candidate changes via <discard-changes>, rolling back committed configurations via rollback IDs in commit operations, and unlocking datastores upon error cleanup.
You want to retrieve the software version and hardware inventory of a Junos device in a single NETCONF request. Which RPC tag combines both hardware and software details?
Junos provides separate RPCs like <get-system-information> and <get-chassis-inventory> which can be batched or called sequentially.
Why this answer
The <get-software-information> and <get-chassis-inventory> RPCs can be combined, or <get-system-information> can be used; however, Junos provides specific RPCs like <get-software-information>.
Which THREE mechanisms are valid methods for authenticating and establishing a NETCONF session with a Junos device? (Choose three)
Correct. Junos supports AAA for NETCONF/SSH sessions.
Which THREE advanced features or methods are available on a PyEZ Device instance for session management and inspection? (Choose three)
Correct. dev.timeout manages command timeouts.
Why this answer
PyEZ Device instances provide methods to check connection status, manage timeout values, and inspect capabilities.
This command enables secure HTTP (HTTPS) access for the jpagent.
In the context of network DevOps, what is the purpose of implementing idempotency in automation scripts or playbooks targeting Junos devices?
Correct. Idempotent operations can be run repeatedly with safe, predictable outcomes.
Why this answer
Idempotency ensures that running the same automation task multiple times yields the same result without making unintended changes if the state is already correct.
Which symbol represents the beginning of a single YAML document stream?
Correct. Three dashes indicate the start of a YAML document.
Why this answer
YAML documents can optionally begin with a document start marker consisting of three dashes (---).
When using PyEZ to push a configuration, you want to log out all NETCONF XML traffic exchanged between the script and the Junos device for debugging purposes. How do you enable this logging in Python?
Correct. PyEZ uses the standard logging module; setting 'jnpr.junos' to DEBUG logs all XML traffic.
Why this answer
Python's standard logging module configured for the jnpr.junos logger enables debug output.
RPCs are invoked via the operational RPC URI endpoint in Junos REST API.
What is JSNAPy primarily used for in Junos network automation?
Correct. JSNAPy automates capturing and comparing operational states.
Why this answer
JSNAPy (Junos Snapshot Administrator) is used to capture operational state snapshots of Junos devices and compare them to detect changes or anomalies.
Which TWO Python exceptions might be raised when attempting to parse a malformed JSON string using the standard 'json' module? (Choose two)
Correct. JSONDecodeError is raised for invalid JSON structure.
Why this answer
json.loads() raises JSONDecodeError (which inherits from ValueError) when encountering invalid JSON syntax.
Which TWO advantages does structured telemetry and data streaming offer over traditional SNMP polling in Junos automation? (Choose two)
Correct. Telemetry provides fine-grained, real-time data.
Why this answer
Streaming telemetry provides real-time push-based data with high granularity, avoiding the polling overhead of SNMP.
An automation engineer wants to log structured data from a Junos device automation run. The Python script formats a dictionary into a JSON string and prints it. However, the engineer wants all keys sorted alphabetically to ensure consistent log diffing. Which parameter accomplishes this in json.dumps()?
Correct. sort_keys=True ensures that dictionary keys are output in alphabetical order.
Why this answer
The sort_keys parameter in json.dumps() sorts the output of dictionaries by key alphabetically.
An enterprise network is adopting a CI/CD pipeline for Junos network changes using GitLab CI. A developer wants to ensure that a test job automatically runs whenever a merge request is opened against the main branch. In which configuration file must this pipeline behavior be defined, and what is the primary keyword used to control branch execution?
GitLab CI uses .gitlab-ci.yml and controls branch triggers using keywords such as rules or only.
Why this answer
GitLab CI pipelines are defined in a .gitlab-ci.yml file located in the root of the repository, and jobs use the 'rules' or 'only/except' keywords to control execution on specific branches.
What Jinja2 feature allows you to include the contents of another template file into your main configuration template?
Correct. The include statement embeds another template.
Why this answer
The {% include %} tag allows inserting another template's content.
You need to lock the candidate configuration datastore in your NETCONF script to prevent concurrent modifications by other administrators. Which XML element accomplishes this?
The <lock> operation allows the client to lock the configuration system datastore.
Why this answer
The <lock> RPC takes a target element specifying which datastore to lock, such as the candidate datastore.
When writing a Python script to interact with a Junos device via PyEZ, you receive an object representing RPC output. You want to serialize a custom Python class instance containing device metadata into JSON, but calling json.dumps() raises a TypeError. What is the standard approach to resolve this?
Correct. The 'default' parameter accepts a function that is called for objects that can't otherwise be serialized.
Why this answer
The json module does not know how to serialize custom Python object instances by default. You must provide a custom serialization function and pass it to the 'default' parameter of json.dumps().
You are writing a Python script to convert a complex Juniper device inventory from YAML format into JSON format using PyYAML and the built-in json module. Which THREE considerations must you keep in mind regarding differences between YAML and JSON during this conversion? (Choose three)
YAML allows plain unquoted strings in many contexts, but JSON requires explicit double-quote wrapping.
Why this answer
JSON does not support comments, requires double quotes for strings/keys, and only permits string keys in objects, whereas YAML allows comments, optional quotes, and non-string keys.
Installing or trusting the appropriate certificate solves SSL verification errors securely.
Why this answer
Self-signed certificates on Junos devices cause SSL verification errors. The best practice is to install the device's CA certificate in the client's trust store, rather than disabling verification globally in production.
Which of the following primitive data types is NOT supported natively in JSON?
Correct. 'undefined' is a JavaScript concept and is not supported in JSON (which uses 'null').
Why this answer
JSON does not support undefined, functions, or undefined date types natively. Among standard choices, undefined or complex numbers are absent.
In a Git repository managing Junos configurations, which TWO files or directories are typically added to the '.gitignore' file to prevent sensitive or temporary files from being tracked? (Choose two)
Correct. IDE artifacts and temp outputs should be ignored.
Why this answer
.gitignore should exclude temporary build files, secret key files, and IDE-specific settings.
An automation engineer is using Git and needs to undo the last local commit while keeping the modified changes in their working directory as unstaged changes. Which command should they execute?
Correct. git reset HEAD~1 keeps the working tree changes intact while undoing the commit.
Why this answer
'git reset --soft HEAD~1' or 'git reset HEAD~1' resets the commit while keeping working tree files modified/staged depending on flags. 'git reset HEAD~1' defaults to mixed (keeps changes unstaged).
An automation script needs to compare pre- and post-change states on a Junos device using JSNAPy (Junos Snapshot Administrator). Which configuration file format is used by JSNAPy to define snapshot checks and test assertions?
JSNAPy test files and check definitions are written in YAML format.
Why this answer
JSNAPy uses YAML configuration files to define which RPC commands to run and what expected values or expressions should be evaluated against the resulting snapshots.
Which Jinja2 construct is used to define reusable blocks of template code that can be called with arguments like a function?
Correct. Macros allow creating reusable template functions.
Why this answer
Macros in Jinja2 act like functions for templates.
You need to load a set of configuration changes into the Junos candidate datastore from an inline XML string using NETCONF. Which RPC element is used to load configuration data?
<load-configuration> is the Junos proprietary extension RPC for loading granular configurations.
Why this answer
The <load-configuration> RPC is a Juniper-specific extension used within NETCONF to load configuration data with formats like XML, text, or set.
An engineer is comparing how NETCONF and the Junos REST API handle candidate configuration validation. In NETCONF, the client can issue a <validate> RPC. How is configuration validation typically handled in the Junos REST API workflow?
REST API supports validate/check actions analogous to NETCONF validation.
Why this answer
The Junos REST API supports validation parameters or actions (such as checking candidate syntax during configuration updates or invoking validation actions via commit parameters) to ensure correctness before committing.
A DevOps engineer is implementing a CI/CD pipeline for automated testing of Junos configurations. During the build stage, the pipeline executes a syntax check on candidate configurations before staging them for deployment. Which tool natively provides configuration syntax validation against the Junos schema without applying the configuration to the routing engine?
The PyEZ cu.validate() method checks the candidate configuration against the device syntax and semantic rules.
Why this answer
The Junos PyEZ library provides a configuration management module that allows validation of candidate configurations locally or on the device using validate() without committing changes.
An automation script executes a NETCONF <edit-config> transaction that updates multiple routing protocols. You need to ensure that the changes take effect immediately without requiring a manual commit. Does NETCONF require a separate commit for candidate changes?
Candidate datastore edits require a separate commit operation unless target is running.
Why this answer
When using the candidate datastore in NETCONF, changes must be explicitly committed using the <commit> RPC unless direct datastore is used.
An automation scripter needs to load a YAML configuration file in Python. To prevent arbitrary code execution vulnerabilities associated with untrusted files, which function should always be called?
Correct. yaml.safe_load() restricts the loader to standard data types, mitigating security risks.
Why this answer
yaml.safe_load() restricts loading to simple Python types like scalars, lists, and dicts, preventing instantiation of arbitrary Python objects.
Which THREE features are provided by the Junos REST API daemon (jpagent) when running on a Junos device? (Choose three)
jpagent translates web API payloads into Junos internal data formats.
Which TWO characters or sequences are valid in YAML for representing lists or sequences? (Choose two)
Correct. Block sequences use hyphens.
Why this answer
YAML sequences can be represented using block style with hyphens (-) or flow style with square brackets ([]).
Creating an already existing resource via POST usually triggers a conflict response.
Which TWO benefits are provided by implementing automated CI/CD pipelines for Junos network changes? (Choose two)
Correct. Automated testing ensures consistency.
Why this answer
CI/CD provides faster delivery, automated error checking, reduced manual toil, and consistent deployments.
When retrieving operational data using the Junos XML API, how do you request pretty-printed or indented XML output?
The indent='true' attribute instructs the Junos device to format output with clean indentation.
Why this answer
Junos XML API supports formatting attributes such as indent="true" in RPC requests.
An automation script connects to a Junos device and attempts to load a candidate configuration using NETCONF. The script needs to ensure that if any part of the configuration fails validation, the entire transaction is discarded and the candidate database is left untouched. Which NETCONF capability or tag should be utilized?
Correct. NETCONF provides atomic transaction capabilities where the candidate configuration is verified and committed atomically.
Why this answer
NETCONF supports robust transaction handling, ensuring that configuration changes are validated as a block and rolled back on error.
Which TWO characteristics describe declarative network automation compared to imperative scripting? (Choose two)
Correct. Declarative tools focus on what state to achieve.
Why this answer
Declarative automation defines the desired state, leaving the system to determine how to reach it, whereas imperative scripts specify exact steps.
An enterprise uses Git for tracking Junos configurations. An engineer wants to see the exact line-by-line history of changes made to a specific routing policy file over the past month, including who made each change. Which Git command should they use?
Correct. 'git blame' shows line authorship, and 'git log -p' shows patch/diff history per file.
Why this answer
'git blame' shows what revision and author last modified each line of a file, while 'git log' shows commit history.
Which TWO methods can an administrator use to verify that a Python script successfully established a NETCONF session with a Junos device? (Choose two)
This operational command lists active NETCONF sessions on the device.
Why this answer
Session verification can be performed by checking active system sessions on the device or inspecting script connection outputs.
An engineer compares NETCONF and Junos REST API when fetching operational state via RPCs. How does the REST API transmit an RPC request compared to a NETCONF <rpc> wrapper?
This accurately contrasts the transport and message formatting of REST vs NETCONF.
Why this answer
An automation engineer writes a Python script that reads a Junos configuration file serialized in JSON. The file opens successfully, but parsing fails with a JSONDecodeError due to trailing commas at the end of object lists. How does standard JSON handle trailing commas compared to YAML?
Correct. JSON syntax rules do not allow trailing commas, while YAML parsers accommodate them.
Why this answer
Standard JSON strictly prohibits trailing commas in objects and arrays, whereas YAML is much more lenient and allows trailing commas in sequences and mappings.
When converting a deeply nested JSON data structure representing Junos device health metrics into YAML using PyYAML, the output uses complex block styles that are difficult for team members to read. Which parameter in yaml.safe_dump() can force scalar values or containers to prefer flow style (JSON-like curly braces and brackets) instead?
Correct. default_flow_style=True forces PyYAML to serialize collections in flow style (JSON-like syntax).
Why this answer
The default_flow_style parameter in yaml.safe_dump() controls how collections are dumped. Setting default_flow_style=False uses block style, while True or None dictates flow style formatting.
You are writing a script that uses PyEZ to load a Junos configuration file, but you want to replace an entire hierarchy level (e.g., protocols bgp) rather than merging the changes. Which parameter should you pass to the load method?
Correct. Setting action='replace' loads the configuration with the replace directive.
Why this answer
The action='replace' parameter tells PyEZ to replace the specified hierarchy level in the candidate configuration.
When troubleshooting Junos REST API integration issues, which THREE factors should an engineer examine if API requests return connection timeouts or refused errors? (Choose three)
Firewall filters protecting the Routing Engine can block REST API ports.
Why this answer
Connection refused or timeouts indicate that jpagent might not be enabled, firewall filters are blocking ports 3000/3443, or management network routing/reachability issues exist.
When comparing the Junos REST API workflow to the NETCONF protocol workflow, which characteristic is unique to the REST API?
REST APIs rely on standard HTTP verbs to perform CRUD operations.
You are rendering a Jinja2 template in Python that includes a loop over a list of VLANs. Which Jinja2 block syntax correctly iterates over a list named 'vlan_list'?
Correct. The percent-brace syntax defines control structures like loops.
Why this answer
Jinja2 uses {% for item in list %} ... {% endfor %} syntax for iteration.
An automation engineer is writing a Python script to parse a Juniper Junos NETCONF reply received in XML format and needs to convert it into a JSON structure for easier manipulation in a web application. Which built-in Python module is primarily used to handle JSON data serialization and deserialization?
The json module provides methods like dump(), dumps(), load(), and loads() for handling JSON data.
Why this answer
The 'json' module is the standard built-in Python library used for parsing, serializing, and deserializing JSON data.
Why is it considered a best practice to store sensitive secrets (such as SNMP community strings or API tokens) outside of plaintext Jinja2 templates in a Git repository?
Correct. Version control history is public/shared among teams, so secrets should be encrypted or managed externally.
Why this answer
Storing secrets in plaintext in version control risks exposure of sensitive credentials to anyone with repository access.
When writing Jinja2 templates for Junos configurations, which THREE control flow or filtering constructs are valid? (Choose three)
Correct. Loops use for/endfor.
Why this answer
Jinja2 supports filters, loops, and conditional statements.
You are writing a Python script that parses a multi-document YAML stream containing Junos device site configurations. One of the documents contains a custom YAML tag. When parsing with yaml.safe_load_all(), how does the safe loader handle custom tags?
Correct. Unknown tags in safe load mode trigger a ConstructorError.
Why this answer
The safe loader in PyYAML does not know how to construct objects from custom tags by default and will raise a ConstructorError unless a custom constructor has been explicitly registered.
Which term describes the practice of continuously building, testing, and validating software or network configurations in an automated pipeline?
Correct. CI/CD automates integration, testing, and deployment.
Why this answer
Continuous Integration / Continuous Deployment (CI/CD) describes automated building and testing.
Returned when authentication credentials are missing or invalid.
Why this answer
401 Unauthorized is returned for bad or missing credentials, and 400 Bad Request is returned for malformed payload syntax.
Correct. The csv module handles parsing and generating CSV formatted tabular data.
Why this answer
The Python standard library includes the 'csv' module, which provides reader and writer objects for tabular CSV data.
You are writing a Python automation script that reads a Junos configuration file in JSON format. The JSON file contains duplicate keys within the same object scope. According to the JSON specification RFC 8259, how should a conforming JSON parser handle duplicate keys?
Correct. Standard JSON parsers overwrite earlier keys with later ones when duplicates occur.
Why this answer
RFC 8259 states that while names within an object SHOULD be unique, the specification does not mandate how parsers should handle duplicates, resulting in behavior dependent on the parser (typically keeping the last encountered key-value pair).
Which TWO commands or tools are associated with running JSNAPy snapshot verifications from a CLI environment? (Choose two)
Correct. The snap command captures snapshots.
Why this answer
JSNAPy execution is invoked via command line tool 'jsnapy'.
You are writing a script that performs multiple configuration changes inside a single PyEZ Config context. How can you verify that the candidate configuration has syntax errors before committing it?
Correct. cu.validate() runs a check equivalent to 'commit check' in Junos CLI.
Why this answer
The .validate() method checks the candidate configuration for syntax and semantic errors without committing.
When interacting with Junos devices via NETCONF, which TWO RPC operations are part of standard NETCONF protocol capabilities? (Choose two)
Correct. <get-config> retrieves configuration data.
Why this answer
NETCONF standard operations include <get-config>, <edit-config>, <commit>, <lock>, etc.
Which Junos configuration statement enables the NETCONF service over SSH for remote automation clients?
This command starts the NETCONF SSH subsystem on Junos.
Why this answer
Enabling NETCONF on Junos requires configuring the system services netconf ssh hierarchy.
An engineer needs to explain the primary advantage of treating network configurations as code in a modern DevOps workflow. Which principle best describes this approach?
Correct. Network as code emphasizes version control systems (VCS) like Git for tracking history and peer review.
Why this answer
Treating network configurations as code allows infrastructure to be version-controlled, repeatedly deployed, and tested just like software code.
An engineer receives a YAML configuration snippet for a PyEZ automation script, but the script fails with a parser error. Upon inspection, the error is caused by improper indentation levels. Which rule must be strictly followed regarding indentation in YAML syntax?
YAML relies on a fixed indentation space count and prohibits tabs to prevent indentation ambiguity.
Why this answer
YAML requires the use of space characters for indentation. Tab characters are strictly forbidden for indentation purposes.
When executing a NETCONF <get-config> request, you specify <source><candidate/></source> but omit any filtering tags. What is returned in the <rpc-reply>?
Without a filter, the entire candidate datastore configuration is returned.
Why this answer
Omiting filter tags on a <get-config> request returns the entire contents of the specified configuration datastore.
You are troubleshooting a NETCONF session where the client sent an improperly formatted XML payload. Where would you expect to find detailed error logging related to this malformed XML request on the Junos device?
NETCONF operational logs and parsing errors appear in traceoptions files or /var/log/messages.
Why this answer
Junos logs NETCONF and XML API activity, including parsing errors, into the traceoptions log file if configured, or general system logs.
When configuring a JSNAPy test file, which section defines the specific RPCs or CLI commands that should be executed to gather operational data?
Correct. JSNAPy configuration files use command or rpc fields to specify what data to retrieve.
Why this answer
The snapcheck or check configuration structure uses test definitions pointing to specific commands.
You need to execute a Junos CLI command (such as 'show version') as an XML RPC request via NETCONF. Which RPC tag encapsulates raw Junos CLI operational commands?
The <command> tag wraps CLI text strings for execution within an RPC.
Why this answer
The <command> tag allows executing arbitrary operational CLI commands formatted as text within the Junos XML API.
An automation engineer needs to convert a JSON payload representing Junos interface configurations into equivalent YAML format to reuse in an Ansible playbook. Which fundamental structural relationship between JSON and YAML makes this conversion straightforward?
Correct. Because YAML includes JSON as a subset, JSON structures can be seamlessly interpreted by YAML parsers.
Why this answer
YAML is a superset of JSON, meaning any valid JSON document is technically also a valid YAML document, allowing direct mapping of data structures.
An automation engineer is reviewing data serialization formats used within Junos automation workflows. Which TWO statements are correct regarding JSON syntax and data types? (Choose two)
Standard JSON specification requires all keys in an object to be strings enclosed in double quotation marks.
Why this answer
JSON object keys must always be double-quoted strings, and null is a valid scalar value representing an empty or missing value.
Page 1 of 5
Page 2Practice JNCIA-DevOps by domain
Target a specific domain to shore up weak areas.