View Full Cisco CCNP 300-435 Exam Dumps and Practice Test Dumps

 

Question 301.

Which HTTP method normally replaces an entire resource?

1. GET
2. PUT
3. PATCH
4. OPTIONS

Correct Answer: 2

Explanation:

The HTTP PUT method is commonly used to create or replace the complete representation of a resource at a specified URI. In network automation, an API may use PUT when the client provides the full desired representation of an object. This differs from PATCH, which generally applies partial modifications. GET retrieves information, while OPTIONS describes communication capabilities supported by an endpoint. Automation developers should always consult the API documentation because individual services can define endpoint behavior differently. Understanding these distinctions helps scripts construct requests that match the controller’s expected semantics.

Question 302.

Which YANG statement extends an existing schema tree?

1. grouping
2. typedef
3. augment
4. leaf

Correct Answer: 3

Explanation:

The YANG augment statement allows a module to add schema nodes to an existing data tree. This mechanism is useful when a model needs to extend another model without directly modifying its original definition. For example, a vendor-specific module can augment an existing structure with additional supported information. A grouping creates reusable schema content, typedef defines reusable data types, and leaf represents an individual value. Understanding augment is important when navigating complex YANG models because additional nodes may come from separate modules.

Question 303.

Which gNMI RPC reports supported models and encodings?

1. Get
2. Set
3. Subscribe
4. Capabilities

Correct Answer: 4

Explanation:

The gNMI Capabilities RPC allows a client to discover information about what a target supports. Depending on implementation, this includes supported YANG models, model versions, and message encodings. Automation software can use this information before performing operations to determine whether the required model or encoding is available. Get retrieves data, Set modifies supported data, and Subscribe establishes streaming telemetry. Capability discovery is valuable in heterogeneous environments because automation can adapt to device features rather than assuming identical support across every target.

Question 304.

Which Ansible feature groups multiple tasks under shared logic?

1. loop
2. block
3. notify
4. register

Correct Answer: 2

Explanation:

Ansible block groups multiple tasks so they can share structures such as conditional logic, privilege settings, or error-handling behavior. This can make network automation playbooks easier to organize when several related operations should follow the same execution rules. A block can also be combined with rescue and always sections for handling failures and cleanup. Loops repeat tasks, notify triggers handlers, and register stores task results. Grouping related operations with blocks improves playbook structure and can simplify maintenance of complex automation workflows.

Question 305.

Which HTTP status indicates a conflicting resource operation?

1. 200
2. 202
3. 409
4. 304

Correct Answer: 3

Explanation:

HTTP 409 Conflict indicates that a request could not be completed because it conflicts with the current state of the target resource. In automation environments, this can occur when another operation has already modified an object, when a resource violates an existing relationship, or when the requested state conflicts with controller rules. Status 200 indicates successful processing, 202 indicates accepted asynchronous processing, and 304 indicates that a cached representation remains valid. Automation should inspect the response details and determine whether the conflict can safely be resolved or retried.

Question 306.

Which Python package manages project dependencies through environments?

1. requests
2. venv
3. pytest
4. yaml

Correct Answer: 2

Explanation:

Python’s venv module creates lightweight virtual environments that isolate project packages and dependencies from the system Python installation. Network automation projects can use virtual environments to maintain predictable versions of libraries used by scripts, testing tools, API clients, and device-connection packages. This reduces conflicts between projects that require different dependency versions. Requests handles HTTP communication, pytest supports testing, and YAML-related libraries process YAML data. Isolated environments are especially helpful when automation projects move through development, testing, and CI/CD pipelines.

Question 307.

Which Cisco technology provides programmable access to network events?

1. Webhooks
2. EtherChannel
3. CDP
4. HSRP

Correct Answer: 1

Explanation:

Cisco platforms that support webhooks can send event notifications to an external application when specified events occur. This allows automation systems to react to changes without continuously polling the platform for every possible event. A receiving application can inspect the event payload and initiate an appropriate workflow. EtherChannel combines links, CDP exchanges device-discovery information, and HSRP provides gateway redundancy. Webhooks are therefore particularly useful for event-driven integrations where automation should begin in response to a controller or service notification.

Question 308.

Which REST concept identifies a specific API resource?

1. Payload
2. Header
3. URI
4. Status code

Correct Answer: 3

Explanation:

A URI, or Uniform Resource Identifier, identifies a resource or endpoint within a RESTful service. Automation clients use URIs to address objects such as devices, interfaces, users, policies, or networks. The payload contains data transmitted with a request or response, headers carry metadata, and status codes communicate the outcome of an HTTP operation. Correctly constructing the URI is essential because API resources are typically organized through endpoint paths and identifiers. Query parameters may additionally refine requests when supported by the service.

Question 309.

Which Cisco platform automates identity policy integration?

1. Cisco ISE
2. Cisco UCS
3. Cisco FMC
4. Cisco WLC

Correct Answer: 4

Explanation:

Cisco Identity Services Engine (ISE) provides centralized identity and access-policy capabilities and exposes supported APIs for automation and integration. Automation workflows can interact with ISE to manage supported identity-related resources and connect access-control processes with broader network operations. UCS focuses on data-center computing infrastructure, FMC manages security policies for supported firewalls, and WLC provides wireless management. ISE automation is especially useful when identity information and access policies need to participate in repeatable, programmatic network-management workflows.

Question 310.

Which API technique reduces unnecessary repeated data retrieval?

1. Filtering
2. Broadcasting
3. Flooding
4. Mirroring

Correct Answer: 2

Explanation:

API filtering allows a client to request only records or attributes matching specific criteria. This can reduce response sizes, processing requirements, and unnecessary data transfer when a large resource collection is available. For example, an automation workflow may request only devices matching a particular status or platform rather than downloading the entire inventory. Broadcasting, flooding, and mirroring are networking concepts rather than general API data-selection techniques. Effective filtering can improve automation efficiency, particularly when controller databases contain thousands of managed resources.

Question 311.

Which NETCONF operation protects configuration from concurrent edits?

1. lock
2. validate
3. get
4. discard-changes

Correct Answer: 3

Explanation:

The NETCONF lock operation places a lock on a supported datastore so that conflicting configuration changes can be prevented while an automation process performs protected operations. This is useful when multiple clients or administrators may attempt modifications simultaneously. Validation checks configuration correctness, get retrieves data, and discard-changes removes uncommitted edits. Automation workflows using datastore locks should release them when the protected operation is complete. Proper locking helps maintain predictable configuration behavior and reduces the possibility of competing changes corrupting an intended workflow.

Question 312.

Which Python library is commonly used for YAML parsing?

1. NumPy
2. PyYAML
3. Paramiko
4. Requests

Correct Answer: 4

Explanation:

PyYAML is a Python library commonly used to parse and generate YAML data. YAML is frequently encountered in automation projects for configuration files, structured variables, and workflow definitions. PyYAML allows an application to convert YAML content into Python objects that can be processed programmatically. NumPy focuses on numerical computing, Paramiko provides SSH-related functionality, and Requests handles HTTP requests. When processing YAML from untrusted sources, developers should use safe loading mechanisms where appropriate to avoid executing unsafe object constructors.

Question 313.

Which Ansible setting controls parallel host execution?

1. forks
2. retries
3. timeout
4. tags

Correct Answer: 1

Explanation:

The Ansible forks setting controls how many hosts Ansible can process in parallel during execution. Increasing the value can improve performance when many independent devices need similar operations, although the appropriate level depends on controller capacity, network conditions, device resources, and API limitations. Retries control repeated attempts for certain operations, timeout values determine waiting behavior, and tags support selective task execution. Proper fork sizing is important in network automation because excessive concurrency can overload devices or management platforms even when the automation controller can handle more parallel work.

Question 314.

Which HTTP header specifies an acceptable response format?

1. Host
2. Accept
3. Cookie
4. Origin

Correct Answer: 2

Explanation:

The HTTP Accept header indicates the media types that a client is prepared to receive in the response. For example, an automation application may specify that it expects JSON from a REST endpoint. This differs from Content-Type, which describes the media type of the message body being sent or represented. Host identifies the target authority, Cookie carries applicable cookie data, and Origin identifies the origin of certain requests. Proper use of Accept can help API clients receive responses in formats they can process reliably.

Question 315.

Which Cisco API can automate device inventory retrieval?

1. Meraki Dashboard API
2. DNA Center API
3. ISE ERS API
4. Umbrella API

Correct Answer: 3

Explanation:

Cisco DNA Center APIs provide programmatic access to network-management information, including supported device inventory resources. Automation applications can query inventory to identify managed devices and obtain attributes needed for later workflows. Meraki Dashboard API manages Meraki cloud resources, ISE ERS API provides supported identity-management operations, and Umbrella APIs address cloud security services. Inventory retrieval is often an early stage in automation because the discovered device information can be used to select targets for provisioning, configuration, software management, or validation.

Question 316.

Which telemetry model sends updates at fixed intervals?

1. On-change
2. Event-only
3. Periodic
4. Triggered

Correct Answer: 4

Explanation:

Periodic telemetry sends measurements according to a defined interval. This approach is useful when an automation or monitoring application needs regular observations of metrics such as interface counters, resource utilization, or environmental values. Unlike on-change telemetry, periodic reporting can continue even when the value has not changed. Event-only and triggered approaches depend on specific conditions or events rather than a regular schedule. Choosing an appropriate sampling interval involves balancing visibility requirements against device processing, bandwidth consumption, and the volume of collected telemetry data.

Question 317.

Which Git object identifies a specific repository snapshot?

1. Commit
2. Branch
3. Remote
4. Stash

Correct Answer: 1

Explanation:

A Git commit records a specific state of tracked project content along with metadata such as its author and parent relationship. In network automation, commits provide a traceable history of changes to scripts, configuration templates, tests, and supporting files. A branch identifies a line of development, a remote represents another repository location, and a stash temporarily stores uncommitted changes. Commit history is particularly valuable when automation changes need to be reviewed, compared, audited, or reverted to an earlier known state.

Question 318.

Which API authentication approach uses short-lived access credentials?

1. Basic authentication
2. API key
3. OAuth access token
4. Static password

Correct Answer: 3

Explanation:

OAuth access tokens are commonly used as temporary credentials that authorize applications to access protected resources. Depending on the implementation, tokens can have limited lifetimes and restricted scopes, reducing the exposure associated with permanently embedded credentials. Basic authentication typically uses a username and password, API keys identify authorized clients according to the service’s design, and static passwords remain valid until changed or revoked. Automation systems should securely store tokens, avoid logging them, and follow the provider’s documented OAuth flow and expiration requirements.

Question 319.

Which Ansible feature handles failed tasks with alternative actions?

1. rescue
2. become
3. include_vars
4. delegate_to

Correct Answer: 4

Explanation:

Within an Ansible block structure, the rescue section can define tasks that execute when a task in the associated block fails. This provides a structured way to handle errors and perform recovery or diagnostic actions. For network automation, rescue tasks might collect additional information, restore a previous state, or record failure details. become controls privilege escalation, include_vars loads variables, and delegate_to changes the execution host. Combining block, rescue, and always sections can create more robust automation workflows.

Question 320.

Which deployment control requires successful validation before release?

1. Manual override
2. Approval gate
3. Random rollout
4. Unchecked promotion

Correct Answer: 2

Explanation:

An approval gate can require specified validation or authorization conditions to be satisfied before an automation change proceeds to a later deployment stage. In network CI/CD workflows, gates can be associated with automated tests, review requirements, security checks, or operational approvals. This creates a controlled transition between development and deployment environments. A manual override may bypass normal controls, random rollout lacks a defined validation requirement, and unchecked promotion provides no meaningful release safeguard. Gates help ensure that automation changes meet established release criteria before wider deployment.