View Full Cisco CCNP 300-435 Exam Dumps and Practice Test Dumps

 

Question 321

Which Cisco SD-WAN component centrally manages device configurations?

1. vManage
2. vBond
3. vSmart
4. WAN Edge

Correct Answer: 1

Explanation:

Cisco vManage provides centralized management for Cisco SD-WAN environments. It allows administrators to configure devices, create and distribute policies, monitor network health, review operational information, and perform administrative tasks from a centralized interface. vBond primarily handles orchestration and assists with device onboarding and connectivity establishment. vSmart controllers distribute routing and policy information to SD-WAN edge devices. WAN Edge routers provide data-plane connectivity across the overlay. Understanding these roles is important when automating SD-WAN because different tasks are performed through different components. vManage is the primary management and automation entry point for many centralized SD-WAN operations.

Question 322

Which data format is traditionally associated with NETCONF messages?

1. YAML
2. XML
3. CSV
4. TOML

Correct Answer: 2

Explanation:

NETCONF traditionally uses XML to structure its remote procedure call messages and exchanged configuration data. XML provides a hierarchical representation that can describe network configuration and operational information in a machine-readable manner. NETCONF operations such as retrieving configuration, editing configuration, and committing changes are carried through structured RPC messages. YAML and TOML are commonly encountered in configuration files and automation tooling, while CSV represents tabular information. Although modern network automation frequently uses JSON with REST-based interfaces, XML remains fundamental to NETCONF. Engineers working with NETCONF should therefore understand XML hierarchy, elements, attributes, and namespaces.

Question 323

Which Python library is designed for SSH-based network device automation?

1. Requests
2. Flask
3. Netmiko
4. Pandas

Correct Answer: 3

Explanation:

Netmiko is a Python library specifically designed to simplify SSH connections and CLI automation across network devices. It supports numerous network platforms and provides functions for establishing sessions, sending commands, entering configuration mode, and collecting command output. This makes it useful when an automation workflow must interact with devices through their command-line interfaces. Requests is primarily an HTTP client library, Flask is a web framework, and Pandas focuses on data analysis. Netmiko is therefore particularly suitable for straightforward Python-based network automation where direct CLI interaction is required.

Question 324

Which Ansible file defines the hosts targeted by automation?

1. Inventory
2. Handler
3. Role
4. Task file

Correct Answer: 1

Explanation:

Ansible inventory defines the managed hosts that automation can target. It can organize devices into groups and provide variables such as connection information, platform details, or environment-specific parameters. Automation tasks can then reference these groups instead of individually listing every device. A handler performs a task when triggered by a notification, while roles provide a structured way to organize reusable automation content. Individual task files contain executable tasks but do not serve as the primary host-definition mechanism. Proper inventory organization becomes especially important when automating large Cisco environments containing multiple device types and locations.

Question 325

What is the main advantage of idempotent automation?

1. It guarantees faster interfaces
2. It enables predictable reruns
3. It disables configuration checks
4. It removes device authentication

Correct Answer: 2

Explanation:

Idempotent automation can be executed repeatedly while maintaining the intended target state without unnecessarily applying the same change again. This characteristic is valuable in network environments because automation jobs may be rerun after failures, during scheduled enforcement, or across multiple deployment stages. If a device already matches the desired configuration, an idempotent process should recognize that no additional modification is required. This reduces unnecessary changes and helps make automated workflows safer. Idempotency is especially important for configuration management systems where the same playbook or workflow may execute regularly to maintain consistency across network infrastructure.

Question 326

Which protocol is commonly used with streaming network telemetry?

1. FTP
2. TFTP
3. gNMI
4. SMTP

Correct Answer: 3

Explanation:

gNMI, or gRPC Network Management Interface, is commonly used for modern model-driven network management and streaming telemetry. It supports operations that allow automation and monitoring systems to retrieve structured information and establish subscriptions for continuously streamed data. This approach can provide more timely operational visibility than traditional polling techniques. FTP and TFTP are file-transfer protocols, while SMTP is used for electronic mail transport. gNMI commonly works with YANG-modeled data, allowing telemetry consumers to subscribe to specific paths and receive updates from network devices. It is therefore an important technology in modern network observability and automation architectures.

Question 327

What does a YANG model define for a network device?

1. Packet forwarding speed
2. Physical rack dimensions
3. Data structure and constraints
4. Optical transceiver wavelength

Correct Answer: 3

Explanation:

YANG is a data modeling language used to define the structure and semantics of configuration and operational data. A YANG model can describe containers, lists, leaves, data types, relationships, and constraints associated with network information. Network management protocols such as NETCONF and RESTCONF can use these models to expose structured device information. YANG does not primarily define physical equipment dimensions, optical characteristics, or forwarding performance. Instead, it gives automation systems a consistent model for understanding the information available on a device. This makes YANG an important foundation for model-driven network management and automation.

Question 328

Which SD-WAN component distributes control policies to edge routers?

1. vManage
2. vBond
3. WAN Edge
4. vSmart

Correct Answer: 4

Explanation:

Cisco vSmart controllers distribute control-plane information and policies to SD-WAN edge devices. They participate in the overlay control architecture and use the SD-WAN control protocol to exchange routing and policy information. vManage provides centralized management and configuration, while vBond performs orchestration functions such as facilitating initial connectivity and authentication relationships. WAN Edge devices forward user traffic through the SD-WAN data plane. Understanding these distinct roles helps engineers troubleshoot policy distribution and design automation workflows correctly. When a requirement specifically concerns centralized control-plane policy distribution, vSmart is the relevant SD-WAN component.

Question 329

Which HTTP method normally retrieves a REST API resource?

1. GET
2. POST
3. PATCH
4. DELETE

Correct Answer: 1

Explanation:

The HTTP GET method is generally used to retrieve information from a REST API resource without requesting a modification to that resource. Network automation applications commonly use GET requests to retrieve interface details, device information, operational statistics, or configuration data exposed through an API. POST is commonly associated with creating resources or initiating actions, PATCH is used for partial modifications, and DELETE is intended to remove resources. Understanding these methods helps automation developers construct API requests correctly. When a script needs to read information from a network management platform without changing its state, GET is normally the appropriate HTTP method.

Question 330

Which protocol provides REST-based access to YANG-modeled data?

1. SCP
2. RESTCONF
3. Telnet
4. SFTP

Correct Answer: 2

Explanation:

RESTCONF provides a REST-style interface for accessing and manipulating YANG-modeled configuration and operational data. It uses HTTP-based communication and can represent information using structured formats such as JSON or XML. This makes RESTCONF useful for automation applications that are designed around web APIs and need structured interaction with network devices. NETCONF provides similar model-driven management capabilities but uses its own RPC-oriented protocol framework. SCP and SFTP are primarily file-transfer mechanisms, while Telnet provides remote terminal access. RESTCONF is therefore the appropriate choice when an automation requirement specifically calls for REST principles combined with YANG-modeled network data.

Question 331

Which practice helps prevent configuration drift in automated networks?

1. Manual edits only
2. Untracked changes
3. Desired-state enforcement
4. Independent device tuning

Correct Answer: 3

Explanation:

Desired-state enforcement helps prevent configuration drift by maintaining a defined target configuration and periodically ensuring that managed devices conform to it. Drift can occur when administrators make manual changes, when devices are configured inconsistently, or when unexpected modifications remain undetected. An automation system can compare actual state with the approved desired state and apply corrective actions when appropriate. This approach improves consistency across large environments. Manual editing and independent device tuning can increase differences between devices, while untracked changes make troubleshooting more difficult. Desired-state automation therefore supports repeatability, consistency, and controlled configuration management.

Question 332

Which format is commonly used to write Ansible playbooks?

1. JSON
2. INI
3. XML
4. YAML

Correct Answer: 4

Explanation:

YAML is the standard format commonly used for writing Ansible playbooks. Its hierarchical structure makes it suitable for representing plays, hosts, variables, tasks, conditions, and module parameters in a relatively readable form. Ansible relies heavily on indentation and structured key-value relationships, so correct YAML formatting is important. JSON can also represent structured information but is not the normal authoring format for Ansible playbooks. XML is commonly associated with technologies such as NETCONF, while INI syntax may be used for certain configuration files. Engineers creating Ansible automation should therefore be comfortable with YAML syntax and indentation rules.

Question 333

Which Git object records a specific version of tracked automation files?

1. Commit
2. Tag
3. Remote
4. Stash

Correct Answer: 1

Explanation:

A Git commit records a specific state of tracked files at a particular point in the repository history. In network automation projects, commits can capture changes to Python scripts, Ansible playbooks, templates, variables, and other automation assets. Each commit normally includes identifying information and a message describing the change. Tags can mark important repository states, remotes identify external repositories, and stashes temporarily save uncommitted work. Commit history provides a valuable audit trail and allows engineers to compare changes or restore earlier versions when necessary. This makes Git commits an essential part of controlled automation development.

Question 334

Which CI activity can identify syntax problems before deployment?

1. Cable testing
2. Automated linting
3. Interface cleaning
4. Rack inspection

Correct Answer: 2

Explanation:

Automated linting can identify formatting, syntax, and structural issues before automation code reaches production. In a network automation pipeline, linting may be applied to Python programs, YAML playbooks, templates, or other configuration artifacts. Detecting problems early reduces the chance that malformed automation will execute against production infrastructure. CI pipelines can combine linting with unit tests, schema validation, security checks, and other quality controls. Physical activities such as cable testing, interface cleaning, and rack inspection remain important operational tasks but are unrelated to automated source-code validation. Linting therefore provides an early quality gate within an automation workflow.

Question 335

Which telemetry model sends updates without repeated polling requests?

1. Model-driven streaming
2. Manual CLI collection
3. Periodic spreadsheet export
4. Scheduled screen scraping

Correct Answer: 1

Explanation:

Model-driven streaming telemetry allows network devices to continuously transmit selected operational information to a collector based on configured subscriptions. This differs from traditional polling, where a monitoring system repeatedly requests information from a device at scheduled intervals. Streaming can provide more timely data and can reduce the overhead associated with frequent polling. The information is commonly structured according to YANG models, allowing consumers to subscribe to specific data paths. Manual CLI collection, spreadsheet exports, and screen scraping require separate retrieval activities. Model-driven streaming is therefore well suited to modern network monitoring, analytics, and automation systems.

Question 336

Which tool can automate configuration changes across Cisco devices using SSH?

1. Grafana
2. Prometheus
3. Netmiko
4. Kibana

Correct Answer: 3

Explanation:

Netmiko provides Python-based functionality for establishing SSH sessions with network devices and executing CLI commands. It can be used to automate repetitive configuration tasks across multiple Cisco devices, making it useful for environments where structured APIs are unavailable or where CLI-based workflows are still required. Prometheus is primarily a monitoring and metrics platform, Grafana provides visualization and dashboards, and Kibana is associated with data visualization and analysis. Netmiko can be combined with Python logic, data files, or other automation frameworks to create repeatable workflows. It is particularly useful for straightforward SSH-driven device automation.

Question 337

Which HTTP method is commonly associated with removing a REST resource?

1. PUT
2. POST
3. DELETE
4. GET

Correct Answer: 3

Explanation:

The HTTP DELETE method is commonly used to request removal of a REST API resource. In network automation, its exact effect depends on the API implementation and resource being addressed, so engineers should always consult the relevant API documentation before issuing destructive operations. GET normally retrieves information, POST is commonly used to create resources or initiate operations, and PUT generally replaces or updates a resource. Correct HTTP method selection is important when building automation because an incorrect method can produce unexpected results. DELETE should therefore be used carefully and normally within controlled, validated automation workflows.

Question 338

Which secure protocol can transfer files through an SSH session?

1. SCP
2. TFTP
3. HTTP
4. Telnet

Correct Answer: 1

Explanation:

SCP, or Secure Copy Protocol, provides file transfer through an SSH-based secure channel. It can be used to transfer configuration files, software images, scripts, or other artifacts between trusted systems while benefiting from SSH authentication and encryption. TFTP does not inherently provide comparable security protections, HTTP is primarily a web transfer protocol unless protected by HTTPS, and Telnet provides remote terminal access rather than secure file transfer. In automation workflows, secure file movement is important because configuration files and software artifacts may contain sensitive information. SCP is therefore a common choice when SSH-based secure file transfer is required.

Question 339

What does a webhook typically trigger in an event-driven workflow?

1. A physical reboot
2. An automated action
3. A routing protocol
4. A hardware upgrade

Correct Answer: 2

Explanation:

A webhook allows one application to notify another system when a defined event occurs. In network automation, a webhook can trigger an automated workflow after events such as a source-code update, monitoring alert, deployment request, or configuration change. This event-driven model reduces the need for continuous polling and allows automation to react quickly to external events. The receiving application determines what action should follow the notification. A webhook itself does not represent a routing protocol or hardware upgrade mechanism. Its primary purpose is to provide an application-to-application event notification that can initiate an automated process.

Question 340

Which approach specifies the target condition rather than individual commands?

1. Imperative automation
2. CLI scripting
3. Desired-state automation
4. Manual configuration

Correct Answer: 3

Explanation:

Desired-state automation defines the condition that infrastructure should ultimately reach rather than requiring an engineer to specify every individual command needed to achieve it. The automation system determines which changes are necessary to make the actual configuration match the defined target state. This approach can improve consistency and simplify large-scale configuration management. Imperative automation generally focuses on explicitly ordered actions, while CLI scripting and manual configuration commonly emphasize individual commands or procedures. Desired-state methods are especially valuable when managing many devices because the same target definition can be applied repeatedly while reducing unnecessary configuration changes.