View Full Cisco CCNP 300-435 Exam Dumps and Practice Test Dumps

 

Question 361

Which Cisco technology provides centralized campus provisioning?

1. Cisco ISE
2. Cisco DNA Center
3. Cisco Umbrella
4. Cisco Secure Firewall

Correct Answer: 2

Explanation:

Cisco DNA Center provides centralized provisioning and automation capabilities for Cisco enterprise campus networks. It can discover infrastructure, maintain device information, apply configuration templates, provision network devices, and provide centralized operational visibility. This allows administrators to automate deployment tasks across multiple devices instead of configuring each device independently. Cisco ISE focuses on identity and access policies, while Cisco Umbrella provides cloud-delivered security services. Cisco Secure Firewall provides network security functions. DNA Center is therefore particularly relevant when automation requirements involve centralized campus device provisioning and lifecycle management.

Question 362

Which NETCONF operation changes device configuration?

1. <get>
2. <lock>
3. <edit-config>
4. <close-session>

Correct Answer: 3

Explanation:

The NETCONF <edit-config> operation modifies configuration data in a specified datastore. Automation applications can use it to add, remove, replace, or modify configuration elements according to the device’s supported YANG model. The <get> operation retrieves information, <lock> prevents conflicting configuration access, and <close-session> terminates the NETCONF session. Configuration changes may subsequently require a commit operation when the device uses a candidate datastore. Understanding these operations allows engineers to build structured automation workflows without relying on CLI command parsing.

Question 363

Which Python library provides vendor-independent network automation abstractions?

1. NAPALM
2. NumPy
3. Django
4. BeautifulSoup

Correct Answer: 1

Explanation:

NAPALM, or Network Automation and Programmability Abstraction Layer with Multivendor support, provides a common interface for automating network devices from different vendors. It offers standardized methods for operations such as retrieving facts, accessing configuration, and managing device state. This abstraction can reduce the need to write completely different automation logic for every supported platform. NumPy is used for numerical computing, Django is a web framework, and BeautifulSoup is primarily used for parsing HTML and XML documents. NAPALM is therefore particularly useful when automation needs a consistent interface across heterogeneous network environments.

Question 364

Which mechanism allows Ansible to gather device information automatically?

1. Templates
2. Facts
3. Roles
4. Tags

Correct Answer: 2

Explanation:

Ansible facts provide information gathered from managed systems and can be used by automation tasks during execution. Depending on the platform and connection method, gathered information may include operating-system details, interfaces, addresses, platform attributes, and other device characteristics. Automation can use these values to make decisions dynamically rather than relying entirely on hardcoded information. Templates generate configuration files, roles organize reusable automation components, and tags control task selection. Facts are particularly useful when playbooks need to adapt their behavior according to the discovered characteristics of each managed device.

Question 365

Which API response indicates that authentication is required?

1. 200
2. 201
3. 404
4. 401

Correct Answer: 4

Explanation:

HTTP status code 401 indicates that the request lacks valid authentication credentials or that authentication is required. In network automation, an API may return 401 when a token is missing, expired, invalid, or otherwise unacceptable. Automation scripts should detect this response and handle authentication appropriately rather than treating the request as successful. Status 200 indicates successful processing, 201 commonly indicates successful resource creation, and 404 means the requested resource was not found. Properly handling authentication responses is important for reliable API-driven network automation.

Question 366

Which method safely retrieves information without modifying a REST resource?

1. GET
2. POST
3. PUT
4. DELETE

Correct Answer: 1

Explanation:

GET is normally used to retrieve information from a REST resource without requesting a modification. Network automation applications frequently use GET requests to obtain device status, interface information, configuration details, or operational statistics. POST commonly creates resources or initiates actions, PUT generally replaces or updates a resource, and DELETE removes a resource. Proper understanding of HTTP methods helps prevent accidental changes when developing automation scripts. A read-only information-gathering workflow should normally use GET when the API documentation defines the requested information as a retrievable resource.

Question 367

Which Cisco SD-WAN component assists with controller and edge onboarding?

1. vManage
2. vBond
3. vSmart
4. WAN Edge

Correct Answer: 2

Explanation:

Cisco vBond acts as the orchestration component within the SD-WAN architecture and assists with establishing initial relationships between SD-WAN components. During onboarding, it helps devices locate appropriate controllers and facilitates the connection process. vManage provides centralized management, vSmart handles control-plane functions and policy distribution, and WAN Edge devices provide data-plane connectivity. Understanding the individual roles of these components is important when automating SD-WAN deployments because onboarding and operational management involve different control functions. vBond is therefore associated with orchestration and initial connectivity establishment.

Question 368

Which Git operation combines changes from separate branches?

1. Clone
2. Fetch
3. Merge
4. Commit

Correct Answer: 3

Explanation:

Git merge combines changes from one branch into another branch. In network automation development, engineers can create separate branches for new playbooks, scripts, or configuration changes and later merge approved work into a primary branch. This workflow supports collaboration while keeping experimental changes isolated during development and testing. Clone creates a local repository copy, fetch retrieves remote updates without integrating them, and commit records a specific local state. Understanding merge operations is important when multiple engineers contribute automation changes to the same repository.

Question 369

Which automation approach executes commands in a specified sequence?

1. Declarative
2. Imperative
3. Event-driven
4. Reactive

Correct Answer: 2

Explanation:

Imperative automation focuses on specifying the actions or commands that should be executed and often defines their sequence explicitly. For example, a script might connect to a device, enter configuration mode, issue several commands, and then save the configuration. Declarative automation instead defines the desired end state and allows the automation system to determine the required changes. Event-driven automation focuses on responding to events, while reactive describes behavior based on detected conditions. Understanding the distinction between imperative and declarative approaches helps engineers select appropriate automation methods for different network tasks.

Question 370

Which technology can validate network configurations against a defined model?

1. Schema validation
2. Packet mirroring
3. Port security
4. MAC learning

Correct Answer: 1

Explanation:

Schema validation checks whether structured configuration data conforms to an expected model or schema. In model-driven network automation, schemas can define permitted elements, data types, relationships, and constraints. Validation before deployment can identify malformed or unsupported configuration data and prevent avoidable errors from reaching network devices. Packet mirroring copies traffic for analysis, port security controls endpoint access, and MAC learning builds forwarding information. Schema validation is therefore an important quality-control mechanism when automation systems generate structured configuration from templates or programmatic workflows.

Question 371

Which protocol is commonly used to collect traditional network management data?

1. SMTP
2. SNMP
3. SSH
4. NTP

Correct Answer: 2

Explanation:

SNMP, or Simple Network Management Protocol, is widely used for traditional network monitoring and management. Monitoring systems can use SNMP to retrieve counters and status information from network devices and, in some implementations, receive asynchronous notifications such as traps. SNMP polling generally involves a management system periodically requesting information from devices. SSH is primarily used for secure remote access, NTP synchronizes clocks, and SMTP handles email transport. Modern automation increasingly uses model-driven telemetry and APIs, but SNMP remains common in established monitoring environments.

Question 372

Which HTTP status represents a resource that cannot be found?

1. 200
2. 301
3. 403
4. 404

Correct Answer: 4

Explanation:

HTTP status code 404 indicates that the requested resource could not be found on the server. In network automation, an API might return 404 when a script requests an object using an incorrect identifier or an endpoint that does not exist. Status 200 indicates successful processing, 301 represents a redirect, and 403 indicates that access is forbidden despite the request being understood. Automation applications should inspect HTTP response codes and handle errors appropriately rather than assuming that every API request succeeds.

Question 373

Which automation practice maintains a historical record of configuration changes?

1. Version control
2. Packet filtering
3. Address translation
4. Traffic shaping

Correct Answer: 1

Explanation:

Version control maintains a historical record of changes made to automation files and configuration definitions. Git is commonly used for this purpose and can record commits, branches, merges, and other repository activities. In network automation, version control makes it easier to identify who changed an automation workflow, understand what was modified, compare revisions, and restore an earlier version when necessary. Packet filtering, address translation, and traffic shaping are network forwarding or security functions rather than change-management mechanisms. Version control therefore provides an important foundation for controlled automation development.

Question 374

Which Ansible feature limits execution to selected tasks?

1. Variables
2. Templates
3. Tags
4. Facts

Correct Answer: 3

Explanation:

Ansible tags allow administrators to selectively execute specific tasks within a playbook. Tasks can be assigned one or more tags, and an operator can request only the tagged tasks relevant to a particular operation. This can be useful when a large playbook contains configuration, verification, remediation, and other task groups that do not always need to run together. Variables store values, templates generate files, and facts provide gathered system information. Tags therefore provide a practical mechanism for controlling which portions of an automation workflow are executed.

Question 375

Which SD-WAN protocol carries control-plane information between components?

1. OMP
2. SCP
3. LLDP
4. FTP

Correct Answer: 1

Explanation:

OMP, or Overlay Management Protocol, is a key control-plane protocol in Cisco SD-WAN. It operates between SD-WAN controllers and edge devices to exchange information such as routes, TLOCs, and policy-related information. This allows the SD-WAN control plane to determine available paths and distribute relevant information throughout the overlay. SCP and FTP provide file-transfer capabilities, while LLDP is primarily used for local neighbor discovery. Understanding OMP is important when automating and troubleshooting Cisco SD-WAN because routing and policy behavior depends on information exchanged through the SD-WAN control plane.

Question 376

Which API security mechanism commonly uses bearer tokens?

1. REST authentication
2. Console authentication
3. TFTP transfer
4. Serial access

Correct Answer: 1

Explanation:

REST APIs commonly use bearer tokens as an authentication mechanism. After obtaining a valid token through an authentication process, an automation client can include it in subsequent API requests, usually through an authorization header. The server then uses the token to determine whether the request is authenticated and authorized. Token handling should be implemented securely because possession of a valid bearer token may provide access to protected resources. Console access, TFTP, and serial connections use different mechanisms. Understanding token-based authentication is important when developing secure controller and network-management automation.

Question 377

Which telemetry characteristic reduces repeated polling overhead?

1. Streaming subscriptions
2. Manual collection
3. Scheduled screenshots
4. Periodic spreadsheets

Correct Answer: 1

Explanation:

Streaming subscriptions allow a network device to send updates to a collector based on an established subscription rather than requiring the collector to repeatedly request the same information. This can reduce polling overhead and provide more timely operational data. Modern telemetry systems can stream information such as interface counters, routing state, and system metrics according to configured policies. Manual collection, screenshots, and spreadsheet exports do not provide an efficient continuous telemetry mechanism. Streaming subscriptions are therefore useful when automation and monitoring platforms require frequent or near-real-time visibility into network conditions.

Question 378

Which protocol securely transfers files using SSH-based protection?

1. TFTP
2. SCP
3. FTP
4. HTTP

Correct Answer: 2

Explanation:

SCP transfers files through an SSH-protected connection and therefore provides authentication and encryption for the transfer. Network automation workflows can use SCP to move configuration files, scripts, software images, or other artifacts between systems. TFTP and traditional FTP do not provide the same SSH-based security, while HTTP is a general web transfer protocol and requires HTTPS for transport encryption. Secure file transfer is important when automation handles sensitive configurations or software packages. SCP is therefore an appropriate option when secure file movement through an SSH environment is required.

Question 379

Which design principle separates automation logic from environment-specific values?

1. Hardcoding
2. Variable abstraction
3. Manual entry
4. Static scripting

Correct Answer: 2

Explanation:

Variable abstraction separates reusable automation logic from values that differ between environments or devices. For example, a single playbook can reference variables for interface names, addresses, VLAN identifiers, or site-specific parameters rather than embedding those values directly into task definitions. This improves portability and makes automation easier to maintain. Hardcoding and static scripting can increase duplication and make changes more difficult when environments evolve. Variable abstraction is especially useful in large deployments where the same automation workflow must operate across multiple sites with different configuration values.

Question 380

Which deployment practice reduces risk by testing changes before production?

1. Direct deployment
2. Unreviewed execution
3. Staged rollout
4. Manual duplication

Correct Answer: 3

Explanation:

A staged rollout introduces automation changes progressively rather than applying them to the entire production environment immediately. Engineers can first validate a change in a lab, test environment, or limited group of devices and then expand deployment after successful verification. This approach can reduce the impact of unexpected behavior and provide opportunities to monitor results before wider implementation. Direct deployment and unreviewed execution provide fewer opportunities to identify problems, while manual duplication does not inherently provide controlled validation. Staged deployment is therefore a useful practice for managing automation changes across large network environments.