View Full Cisco CCNA Automation 200-901 Exam Dumps and Practice Test Dumps.

 

Question 221

Which protocol is commonly used by Ansible to securely manage Linux-based hosts remotely?

1. HTTP
2. SSH
3. FTP
4. Telnet

Correct Answer: 2

Explanation

SSH, or Secure Shell, is commonly used by Ansible to establish secure remote connections to managed Linux-based systems. Ansible can use SSH to execute modules and tasks on remote hosts without requiring a traditional agent to be installed on each managed system. SSH provides encrypted communication and supports authentication mechanisms such as passwords and public-key authentication. HTTP is commonly used for web communication, FTP is primarily used for file transfer, and Telnet provides remote access without the security protections normally associated with SSH. Therefore, SSH is the correct answer.

Question 222

Which Ansible file commonly defines the hosts and groups that automation can manage?

1. Inventory
2. Playbook
3. Template
4. Handler

Correct Answer: 1

Explanation

An Ansible inventory defines the managed hosts and can organize them into groups. Inventory information can include hostnames, IP addresses, group membership, and variables associated with specific hosts or groups. Playbooks define automation tasks, templates generate dynamic text or configurations, and handlers perform actions triggered by changes. An inventory provides Ansible with the target systems against which playbooks can execute. Depending on the environment, inventories can be static files or dynamically generated. Therefore, the inventory is the correct component for defining managed hosts and groups.

Question 223

Which Ansible module is commonly used to test whether a remote host is reachable?

1. ping
2. reach
3. network-check
4. test-host

Correct Answer: 1

Explanation

The Ansible ping module is commonly used to verify that Ansible can connect to a managed host and execute a basic operation. Despite its name, it does not simply send an ICMP ping packet like the traditional network utility. Instead, it verifies Ansible connectivity and Python execution requirements on the target where applicable. This makes it useful as an initial troubleshooting step when setting up automation. The other listed names are not standard Ansible modules for this purpose. Therefore, ping is the correct answer.

Question 224

Which Ansible concept allows variables to be assigned to a particular host or group of hosts?

1. Inventory variables
2. HTTP headers
3. Git tags
4. Jinja comments

Correct Answer: 1

Explanation

Ansible inventory variables allow values to be associated with individual hosts or groups. These variables can contain information such as connection parameters, device-specific values, environment settings, or other data required by playbooks. Group variables can apply common values to multiple hosts, while host variables can override or specialize values for particular systems. HTTP headers belong to web communication, Git tags identify repository states, and Jinja comments are used for template documentation. Therefore, inventory variables are the appropriate mechanism for assigning host- or group-specific values.

Question 225

Which Cisco technology provides a REST API for programmatic management of Meraki cloud-managed networks?

1. Meraki Dashboard API
2. NETCONF only
3. Telnet API
4. Console API

Correct Answer: 1

Explanation

The Meraki Dashboard API provides programmatic access to supported Meraki network management functions. Automation applications can use the API to retrieve organization, network, device, monitoring, and configuration information, as well as perform supported management operations. This allows developers to integrate Meraki management with Python scripts, applications, and automation workflows. NETCONF is a different network management protocol and is not the defining API for Meraki Dashboard management. Telnet and console connections are not REST API mechanisms. Therefore, the Meraki Dashboard API is the correct answer.

Question 226

Which Cisco ACI component acts as the centralized policy and management controller?

1. APIC
2. ASDM
3. WLC
4. IOS CLI

Correct Answer: 1

Explanation

The Application Policy Infrastructure Controller, or APIC, is the centralized management and policy controller for Cisco ACI. APIC provides a programmable interface through which administrators and automation systems can manage ACI policies and infrastructure. It communicates with the ACI fabric and provides centralized policy management rather than functioning simply as a traditional network device. ASDM is associated with Cisco security appliance management, WLC is a wireless LAN controller, and IOS CLI is a command-line interface rather than an ACI controller. Therefore, APIC is the correct answer.

Question 227

Which Cisco SD-WAN component provides centralized management and orchestration capabilities for the SD-WAN environment?

1. vManage
2. vEdge CLI only
3. Console server
4. TFTP

Correct Answer: 1

Explanation

Cisco SD-WAN vManage provides centralized management capabilities for Cisco SD-WAN environments. It can be used to monitor devices, manage configurations and policies, and interact with the SD-WAN infrastructure through supported interfaces and APIs. Centralized management makes it possible to automate operations across multiple WAN devices rather than configuring each device independently. A console server provides out-of-band access, TFTP is primarily a file-transfer protocol, and a device CLI does not provide the same centralized management role. Therefore, vManage is the correct answer.

Question 228

Which Cisco technology is designed to provide network configuration and service orchestration using models and a centralized automation approach?

1. Cisco NSO
2. Cisco CDP
3. Cisco LLDP
4. Cisco STP

Correct Answer: 1

Explanation

Cisco Network Services Orchestrator, or NSO, is designed for network service orchestration and automation. It can use models to represent services and configurations and can coordinate changes across multiple network devices. This approach is useful in environments where services span different device types or vendors and where consistent, repeatable provisioning is required. CDP and LLDP are discovery protocols, while STP is used to prevent Layer 2 loops. Therefore, Cisco NSO is the technology associated with model-driven network service orchestration.

Question 229

Which protocol is commonly used by Cisco devices to send unsolicited event notifications to a network management system?

1. SNMP GET
2. SNMP TRAP
3. DNS
4. DHCP

Correct Answer: 2

Explanation

An SNMP TRAP is an unsolicited notification sent by an SNMP agent to a management system when a defined event occurs. For example, a device may generate a notification when a monitored condition changes. This differs from an SNMP GET, where the management system actively requests information from the device. DNS provides name-resolution services, while DHCP provides dynamic network configuration. SNMP traps are useful in event-driven monitoring because the management system does not need to continuously poll every device to learn about certain events. Therefore, SNMP TRAP is correct.

Question 230

Which SNMP operation allows a management system to retrieve the value of a specific managed object?

1. SET
2. TRAP
3. GET
4. INFORM only

Correct Answer: 3

Explanation

The SNMP GET operation allows a network management system to request the value of a specified managed object from an SNMP agent. For example, a monitoring system can use SNMP GET to retrieve interface counters, device information, or other supported MIB objects. SNMP SET is used to request changes to writable objects, while TRAP is an unsolicited notification generated by an agent. INFORM can also communicate notifications with acknowledgment behavior, but it is not the basic operation described here. Therefore, GET is the correct SNMP operation.

Question 231

Which protocol is designed specifically for transferring files securely over an SSH connection?

1. SFTP
2. TFTP
3. HTTP
4. SMTP

Correct Answer: 1

Explanation

SFTP, or SSH File Transfer Protocol, provides file-transfer capabilities over an SSH connection. Because it operates through SSH, communication and authentication benefit from SSH’s security mechanisms. It is commonly used when automation applications need to securely transfer configuration files, scripts, or other files to and from managed systems. TFTP is a simpler file-transfer protocol without the same security properties, HTTP is primarily used for web communication, and SMTP is used for email transport. Therefore, SFTP is the correct protocol for secure file transfer over SSH.

Question 232

Which protocol is commonly used to securely copy a file between systems using SSH?

1. SCP
2. ARP
3. NTP
4. ICMP

Correct Answer: 1

Explanation

SCP, or Secure Copy Protocol, is commonly used to securely copy files between systems through SSH. It provides encrypted transfer and can be useful in automation workflows for moving configuration files, scripts, software images, or other supported files. ARP is used for address resolution on local networks, NTP synchronizes time, and ICMP supports network diagnostic and control functions. Although SFTP is another secure file-transfer option, SCP specifically describes secure copying through SSH. Therefore, SCP is the correct answer.

Question 233

Which protocol is commonly used to synchronize clocks across network devices?

1. SNMP
2. NTP
3. SCP
4. LDAP

Correct Answer: 2

Explanation

NTP, or Network Time Protocol, is used to synchronize clocks across networked systems. Accurate time is important in network automation and operations because logs, security events, monitoring data, and troubleshooting activities often depend on consistent timestamps. Automation systems can use synchronized time to correlate events from multiple devices more accurately. SNMP is primarily used for network management and monitoring, SCP provides secure file copying, and LDAP is commonly associated with directory services. Therefore, NTP is the correct protocol for network time synchronization.

Question 234

Which mechanism is commonly used to store API credentials outside the main automation source code?

1. Environment variables
2. Source-code comments
3. Public README files
4. Device banners

Correct Answer: 1

Explanation

Environment variables are commonly used to provide sensitive values such as API tokens, usernames, or passwords to an application without placing those values directly in source code. This helps reduce the risk of accidentally committing credentials to version-control systems. In production environments, dedicated secrets-management systems or CI/CD secret stores may provide stronger controls. Comments, README files, and device banners are not appropriate locations for sensitive credentials. Therefore, environment variables are a common mechanism for keeping credentials separate from the automation source code.

Question 235

Which security principle recommends that an automation account receive only the permissions necessary for its assigned task?

1. Least privilege
2. Maximum access
3. Shared administration
4. Anonymous authorization

Correct Answer: 1

Explanation

The principle of least privilege recommends giving users, applications, and automation accounts only the permissions required to perform their intended tasks. For example, an automation service that only needs to retrieve monitoring information should not necessarily receive unrestricted configuration privileges. Limiting permissions reduces the potential impact of compromised credentials, programming mistakes, or unintended operations. Maximum access and shared administration can increase exposure, while anonymous authorization does not provide appropriate access control. Therefore, least privilege is the correct security principle.

Question 236

Which approach helps ensure that an automation script can be executed repeatedly without creating unintended duplicate configuration?

1. Idempotent design
2. Random command execution
3. Manual intervention after every task
4. Disabling state checks

Correct Answer: 1

Explanation

Idempotent design allows an automation operation to be run multiple times while maintaining the intended final state without repeatedly introducing unnecessary changes. This is especially useful in configuration management because scripts may be rerun after failures, maintenance activities, or changes in the environment. An idempotent task checks the current state and applies changes only when needed. Random execution and disabling state checks can create unpredictable results, while requiring manual intervention reduces automation benefits. Therefore, idempotent design is the correct approach for repeatable automation.

Question 237

Which automation method relies on reading and manipulating text displayed by a command-line interface rather than using a structured API?

1. Screen scraping
2. REST
3. NETCONF
4. RESTCONF

Correct Answer: 1

Explanation

Screen scraping involves extracting information from text displayed by a command-line interface or other human-oriented output. Automation based on screen scraping can be fragile because CLI formatting may change between software versions, platforms, or commands. Structured interfaces such as REST APIs, NETCONF, and RESTCONF provide machine-readable data and are generally better suited for programmatic automation when available. Screen scraping can still be encountered in legacy environments where structured APIs are unavailable. Therefore, screen scraping is the method described.

Question 238

Which advantage does a structured API generally provide over parsing human-readable CLI output?

1. More predictable machine-readable data
2. Mandatory physical console access
3. Automatic replacement of network hardware
4. Elimination of authentication

Correct Answer: 1

Explanation

Structured APIs generally provide predictable machine-readable requests and responses, making them easier for software to process than human-oriented CLI output. A REST API may return JSON, while NETCONF commonly uses XML and YANG-based models. This structured information reduces the need for fragile text parsing and makes automation logic more maintainable. APIs still require appropriate authentication and do not eliminate the need for network hardware or physical access in every environment. Therefore, providing predictable machine-readable data is a major advantage of structured APIs.

Question 239

Which HTTP response code indicates that a requested resource could not be found?

1. 200
2. 201
3. 404
4. 500

Correct Answer: 3

Explanation

HTTP status code 404 means “Not Found” and commonly indicates that the requested resource could not be located by the server. In an automation workflow, a 404 response might occur because an API endpoint is incorrect, an object identifier does not exist, or the requested resource has been removed. Status 200 indicates successful processing, 201 commonly indicates successful resource creation, and 500 indicates an internal server error. Therefore, 404 is the correct response code when a requested resource cannot be found.

Question 240

Which HTTP status code commonly indicates that a request has been accepted for processing but the processing is not yet complete?

1. 202
2. 204
3. 400
4. 403

Correct Answer: 1

Explanation

HTTP status code 202, “Accepted,” indicates that the request has been accepted for processing, but the processing may not yet be complete. This pattern is useful for asynchronous API operations where an automation request starts a task that may take time to finish. The client may need to monitor task status through another endpoint or mechanism provided by the API. Status 204 indicates successful processing with no content, 400 indicates a bad request, and 403 indicates that the server refuses authorization. Therefore, 202 is the correct answer.