View Full Cisco CCNP 300-435 Exam Dumps and Practice Test Dumps

 

Question 261.

Which Cisco API manages software images across network devices?

1. SWIM
2. PnP
3. Assurance
4. Discovery

Correct Answer: 1

Explanation:

Cisco DNA Center’s Software Image Management (SWIM) capabilities support centralized management of software images across network devices. Automation workflows can use SWIM-related APIs to inspect available images, define desired versions, and manage image deployment according to supported platform capabilities. This helps organizations standardize software versions and reduce manual upgrade activities. PnP focuses on device onboarding, Assurance provides visibility and analytics, and Discovery identifies network information. SWIM is therefore particularly relevant when automation needs to manage lifecycle activities involving device software images.

Question 262.

Which YANG statement defines a reusable schema fragment?

1. augment
2. grouping
3. notification
4. deviation

Correct Answer: 2

Explanation:

The YANG grouping statement defines a reusable collection of schema nodes. Another part of a YANG model can incorporate that structure using the uses statement. This promotes consistency and reduces duplication when similar configuration structures are required in multiple locations. augment extends an existing schema tree, notification defines event information, and deviation describes implementation-specific deviations from a model. Understanding grouping and uses is useful when automation developers examine YANG models and need to determine how reusable structures are represented.

Question 263.

Which gNMI operation retrieves configuration and operational values?

1. Set
2. Subscribe
3. Get
4. Capabilities

Correct Answer: 3

Explanation:

The gNMI Get operation retrieves data from a target according to specified paths and data types. Automation applications can use it to obtain configuration, state, or other supported information from devices implementing gNMI. Set is used to modify supported data, while Subscribe establishes telemetry subscriptions for receiving updates. Capabilities provides information about supported models and capabilities. Choosing Get or Subscribe depends on whether the application needs a direct retrieval or an ongoing stream of changing operational information.

Question 264.

Which Ansible mechanism stores output from a task?

1. become
2. register
3. notify
4. tags

Correct Answer: 2

Explanation:

The Ansible register keyword stores the result of a task in a variable. Automation workflows can then inspect that variable to make decisions, process returned information, or conditionally execute subsequent tasks. Registered data can contain fields such as command output, return codes, and change status, depending on the module used. become controls privilege escalation, notify triggers handlers when changes occur, and tags help selectively execute tasks. Registering results is particularly useful when playbook logic depends on information produced during earlier operations.

Question 265.

Which REST API property makes repeated identical requests predictable?

1. Idempotency
2. Serialization
3. Authentication
4. Compression

Correct Answer: 1

Explanation:

Idempotency describes an operation whose repeated execution produces the same intended state or effect after the first successful application. This concept is valuable in network automation because requests can sometimes be retried after timeouts or temporary communication failures. An idempotent workflow reduces the risk that retrying an operation creates unintended additional changes. Serialization determines how data is represented, authentication verifies access, and compression reduces transfer size. Automation developers should still examine the specific API documentation because individual endpoints may have different semantics.

Question 266.

Which HTTP status indicates that a resource was successfully created?

1. 202
2. 200
3. 201
4. 206

Correct Answer: 3

Explanation:

HTTP status 201 Created indicates that a request successfully resulted in creation of a new resource. REST APIs may return this status after an automation application creates an object such as a policy, user, network resource, or configuration entity. A response may also provide information about the newly created resource. Status 200 represents general successful processing, 202 indicates that processing has been accepted but may not yet be complete, and 206 represents partial content. Correct status interpretation helps automation workflows distinguish creation from other successful operations.

Question 267.

Which Cisco API provides network health and assurance information?

1. SWIM
2. Assurance API
3. PnP API
4. Template API

Correct Answer: 2

Explanation:

Cisco DNA Center’s Assurance capabilities provide information about network health, device status, client experience, and other operational insights. Automation applications can use supported Assurance APIs to retrieve information that helps correlate network conditions with automated workflows. SWIM focuses on software image management, PnP supports device onboarding, and template APIs are associated with configuration deployment. Assurance data can therefore support event-driven or monitoring-oriented automation where decisions depend on the observed state of the network rather than only its configured state.

Question 268.

Which Python module commonly creates asynchronous event loops?

1. asyncio
2. pathlib
3. hashlib
4. decimal

Correct Answer: 1

Explanation:

Python’s asyncio module provides infrastructure for asynchronous programming, including event loops, coroutines, and asynchronous tasks. It can be useful for automation applications that need to coordinate many I/O-bound operations without waiting synchronously for each operation to finish. For example, an application might asynchronously manage multiple API interactions where supported libraries permit asynchronous execution. pathlib handles filesystem paths, hashlib provides hashing functions, and decimal supports decimal arithmetic. Asynchronous designs can improve efficiency when workflows contain many independent waiting operations.

Question 269.

Which NETCONF operation checks whether configuration is valid?

1. lock
2. commit
3. validate
4. discard-changes

Correct Answer: 3

Explanation:

The NETCONF validate operation checks configuration data against the device’s supported validation rules before it is committed. When available, this can help automation workflows detect configuration problems earlier in the deployment process. lock protects a datastore from conflicting modifications, commit makes staged changes active where supported, and discard-changes removes uncommitted modifications. Validation is especially useful when automation constructs configurations dynamically and needs an additional safeguard before applying them to production devices.

Question 270.

Which HTTP header commonly carries a bearer access token?

1. Accept
2. Authorization
3. Location
4. Referer

Correct Answer: 2

Explanation:

The HTTP Authorization header commonly carries credentials used to authenticate an API request. In OAuth-based API access, a bearer token is typically presented using this header. Automation clients should construct authentication headers according to the API’s documented requirements and protect tokens from appearing in source code, logs, or error messages. Accept describes response formats the client can handle, Location can identify a resource location, and Referer provides request-origin information in applicable HTTP contexts. Secure credential handling remains essential even when transport encryption is enabled.

Question 271.

Which Cisco tool provides reusable network state parsers?

1. Genie
2. Vagrant
3. Terraform
4. Jenkins

Correct Answer: 1

Explanation:

Cisco Genie provides reusable network automation components, including parsers that convert supported command output into structured data. It works closely with pyATS and can simplify device interaction, state learning, and testing workflows. Structured information allows automation scripts to perform comparisons and validations without relying on manually written text-processing logic for every command. Vagrant manages development environments, Terraform focuses on infrastructure provisioning, and Jenkins is a CI/CD automation server. Genie is therefore particularly relevant to Python-based Cisco network testing and automation workflows.

Question 272.

Which webhook security method verifies message authenticity?

1. Signature validation
2. DNS resolution
3. Payload compression
4. Response caching

Correct Answer: 1

Explanation:

Webhook signature validation allows a receiving application to verify that an incoming event was generated by a trusted sender and was not altered during transit. Many webhook systems provide a signature derived from a shared secret and request content. The receiver independently calculates or verifies the signature before processing the event. DNS resolution determines addresses, compression reduces payload size, and caching stores reusable responses. Signature verification is an important control when automation systems trigger network actions from externally delivered webhook events.

Question 273.

Which API response field commonly indicates remaining rate-limit capacity?

1. Retry-After
2. X-RateLimit-Remaining
3. Content-Length
4. ETag

Correct Answer: 2

Explanation:

X-RateLimit-Remaining is a commonly used response header indicating how many requests remain within a defined rate-limit window. The exact header name and semantics depend on the API provider, so automation code should follow the service documentation. Retry-After can indicate how long a client should wait before retrying, while Content-Length describes response-body size and ETag identifies a particular representation version. Monitoring rate-limit information helps automation workflows regulate request volume before service limits are exceeded.

Question 274.

Which Ansible option runs a task on a different host?

1. delegate_to
2. remote_user
3. connection
4. collections

Correct Answer: 1

Explanation:

The Ansible delegate_to keyword causes a task to execute on a host other than the host currently being processed. This is useful when an automation workflow needs a centralized system to perform an operation related to another managed device. For example, a task might interact with an API service or perform a control-plane action from a designated automation host. remote_user identifies the remote account, connection selects the connection mechanism, and collections organize reusable Ansible content.

Question 275.

Which data structure stores unique unordered Python values?

1. Tuple
2. Set
3. List
4. String

Correct Answer: 2

Explanation:

A Python set stores unique elements and is designed for membership testing and set operations. Because duplicate values are eliminated, sets are useful when an automation workflow needs to determine unique devices, interfaces, identifiers, or other values. Sets are not intended to preserve a meaningful positional order like lists or tuples. A tuple provides an ordered immutable sequence, a list provides an ordered mutable sequence, and a string represents textual data. Selecting a set can simplify deduplication operations in network automation scripts.

Question 276.

Which API technique prevents stale updates from overwriting newer data?

1. Optimistic concurrency
2. Data compression
3. Load balancing
4. DNS delegation

Correct Answer: 1

Explanation:

Optimistic concurrency techniques help prevent an automation client from unintentionally overwriting changes made by another process after the client retrieved an earlier version. APIs may implement this using version identifiers, entity tags, or conditional requests. The client checks whether the resource has changed before applying its update. Data compression reduces payload size, load balancing distributes traffic, and DNS delegation manages domain authority. Concurrency controls are important in controller environments where multiple automation jobs or administrators may modify the same resources.

Question 277.

Which Cisco ISE interface supports programmatic administration?

1. ISE ERS API
2. ISE console cable
3. ISE syslog stream
4. ISE SPAN session

Correct Answer: 1

Explanation:

The Cisco ISE External RESTful Services, commonly called the ERS API, provides programmatic access to supported Identity Services Engine administrative resources. Automation can use the API to manage supported objects and integrate ISE operations with broader network workflows. A console cable provides local device access, syslog streams transport event messages, and SPAN sessions replicate traffic for monitoring or analysis. API-based integration is useful when identity and access management tasks need to become part of repeatable automation pipelines.

Question 278.

Which testing method compares intended and observed network state?

1. State validation
2. Syntax highlighting
3. Source branching
4. File compression

Correct Answer: 1

Explanation:

State validation compares an expected or intended condition with the actual state observed from a network device or controller. Automation can use this technique after a configuration deployment to verify that the desired outcome was achieved. Examples include checking interface status, routing information, VLAN membership, or specific configuration attributes. Syntax highlighting assists code readability, source branching manages development versions, and file compression reduces storage or transfer size. State validation is therefore a practical method for verifying the results of automated network changes.

Question 279.

Which API design uses a cursor to retrieve subsequent results?

1. Cursor pagination
2. Static routing
3. Token hashing
4. Session multiplexing

Correct Answer: 1

Explanation:

Cursor pagination uses a cursor supplied by an API to identify the position from which subsequent results should be retrieved. This approach can be more reliable than simple page numbers when datasets change while an application is processing them. An automation client typically reads the response, identifies the next cursor when available, and requests the following segment until no continuation value remains. Static routing controls packet forwarding, token hashing concerns credential or data processing, and session multiplexing relates to communication channels rather than dataset navigation.

Question 280.

Which automation architecture reacts immediately to incoming events?

1. Event-driven automation
2. Batch processing
3. Manual provisioning
4. Static scheduling

Correct Answer: 1

Explanation:

Event-driven automation responds to events as they occur rather than waiting for a fixed schedule or manually initiated process. Network events can originate from monitoring systems, webhooks, message brokers, controllers, or other infrastructure components. A workflow can inspect an event and trigger an appropriate automated action, such as collecting additional information or initiating a remediation process. Batch processing handles grouped workloads, manual provisioning requires human initiation, and static scheduling runs at predefined times. Event-driven designs are useful when rapid automated responses are required.