View Full Cisco CCNP 300-435 Exam Dumps and Practice Test Dumps

 

Question 341

Which Cisco platform provides APIs for campus network automation?

1. Cisco DNA Center
2. Cisco ISE
3. Cisco SecureX
4. Cisco Prime

Correct Answer: 1

Explanation:

Cisco DNA Center provides centralized management and automation capabilities for enterprise campus networks. Its APIs allow applications and automation scripts to retrieve network information, provision devices, manage policies, and integrate with external systems. This enables engineers to automate repetitive operational tasks instead of manually configuring individual devices. Cisco ISE focuses primarily on identity and access control, while SecureX provides security orchestration and integration capabilities. Cisco Prime Infrastructure is an older management platform. DNA Center is therefore particularly relevant when developing automation workflows for Cisco enterprise campus infrastructure.

Question 342

Which protocol retrieves structured configuration from a NETCONF datastore?

1. POST
2. get-config
3. PATCH
4. DELETE

Correct Answer: 2

Explanation:

The NETCONF get-config operation retrieves configuration information from a specified datastore. A client can use it to obtain configuration from locations such as the running, startup, or candidate datastore, depending on device capabilities. This operation is useful in automation workflows that need to inspect existing configuration before making changes. The get operation can retrieve both configuration and operational state, while HTTP methods such as POST, PATCH, and DELETE belong to REST-style interfaces. Understanding NETCONF operations helps automation developers work with structured configuration rather than parsing unstructured CLI output.

Question 343

Which Python library is commonly used for REST API communication?

1. Paramiko
2. Netmiko
3. Requests
4. NAPALM

Correct Answer: 3

Explanation:

Requests is a widely used Python library for making HTTP requests and interacting with REST APIs. Network automation scripts can use it to send GET, POST, PUT, PATCH, and DELETE requests to management platforms and network devices that expose web-based APIs. Netmiko and Paramiko are commonly associated with SSH-based communication, while NAPALM provides a higher-level abstraction for network device automation. Requests is particularly useful when an automation workflow needs direct control over HTTP headers, authentication, request bodies, and response handling.

Question 344

Which mechanism stores reusable Ansible automation components?

1. Inventory
2. Role
3. Variable
4. Handler

Correct Answer: 2

Explanation:

Ansible roles provide a structured mechanism for organizing reusable automation content. A role can contain tasks, variables, templates, handlers, files, and metadata that collectively implement a particular automation function. Roles make large playbook projects easier to maintain because related components can be grouped into reusable units. Inventory defines target hosts, variables provide configurable values, and handlers execute tasks after receiving notifications. In network automation, roles can be created for common activities such as interface configuration, routing deployment, security configuration, or device preparation.

Question 345

Which HTTP status code indicates a successful request?

1. 404
2. 500
3. 201
4. 200

Correct Answer: 4

Explanation:

HTTP status code 200 indicates that a request was successfully processed. It is commonly returned by REST APIs when a GET request successfully retrieves a resource or when another operation completes successfully without requiring a more specific success code. Status code 201 indicates that a resource was successfully created, 404 indicates that a requested resource was not found, and 500 represents an internal server error. Automation applications should inspect response status codes to determine whether an API operation succeeded before proceeding with subsequent tasks.

Question 346

Which Cisco technology uses YANG models for programmable device management?

1. NETCONF
2. Telnet
3. TFTP
4. CDP

Correct Answer: 1

Explanation:

NETCONF can use YANG models to represent structured configuration and operational data on network devices. YANG defines the organization, data types, relationships, and constraints of the information that NETCONF manages. This model-driven approach allows automation systems to interact with predictable data structures instead of parsing CLI output. Telnet provides terminal access, TFTP handles file transfers, and CDP discovers directly connected Cisco devices. NETCONF combined with YANG is therefore an important foundation for programmable and model-driven network management.

Question 347

Which Ansible feature executes a task only when notified?

1. Inventory
2. Handler
3. Role
4. Fact

Correct Answer: 2

Explanation:

Ansible handlers are tasks that execute when they receive a notification from another task. They are commonly used when a configuration change requires a follow-up operation, such as restarting a service after modifying its configuration. Handlers help prevent unnecessary repeated actions because they normally run only when triggered by a change. Inventory identifies managed hosts, roles organize reusable automation content, and facts provide information collected about managed systems. In network automation, handlers can be useful for controlled operations that should occur only after a relevant configuration modification.

Question 348

Which protocol enables secure remote CLI access for automation scripts?

1. SNMP
2. SMTP
3. SSH
4. NTP

Correct Answer: 3

Explanation:

SSH provides encrypted remote access to network device command-line interfaces and is widely used by automation tools. Python libraries such as Netmiko and Paramiko can establish SSH sessions and execute commands programmatically. SSH protects authentication and session data through encryption, making it preferable to insecure remote terminal protocols. SNMP is primarily used for network monitoring and management data, SMTP handles email transport, and NTP synchronizes clocks. Secure CLI access remains important when automating devices that do not expose the required operations through APIs or model-driven protocols.

Question 349

Which Git capability allows isolated development of automation changes?

1. Branches
2. Tags
3. Archives
4. Hooks

Correct Answer: 1

Explanation:

Git branches allow developers to work on changes independently from the primary development line. In network automation projects, engineers can create a branch to develop a new playbook, modify a Python script, or test a configuration workflow without immediately changing the production version. After testing and review, the changes can be merged into the appropriate branch. Tags identify specific repository versions, archives package repository content, and hooks automate actions triggered by Git events. Branching therefore supports controlled development and collaborative automation workflows.

Question 350

Which API style commonly uses resources identified by URLs?

1. SOAP
2. REST
3. NETCONF
4. gRPC

Correct Answer: 2

Explanation:

REST APIs commonly represent resources using URLs and use HTTP methods to interact with those resources. For example, an automation application may use GET to retrieve a resource, POST to create an object, or DELETE to remove one. REST’s resource-oriented design makes it widely applicable to network management platforms and automation systems. NETCONF instead uses structured RPC operations, while gRPC uses service and method definitions over HTTP/2. SOAP uses XML-based web service messaging. Understanding REST concepts is important for engineers working with controller APIs and network management platforms.

Question 351

What does a NETCONF candidate datastore provide?

1. Temporary configuration workspace
2. Packet capture storage
3. DNS cache
4. Interface statistics

Correct Answer: 1

Explanation:

The NETCONF candidate datastore provides a workspace where configuration changes can be prepared before being committed to the running configuration. This allows automation systems to make multiple changes, validate them, and then apply them as a controlled operation when the device supports the candidate capability. The separation between preparation and activation can reduce the risk of immediately applying incomplete configuration changes. Packet captures, DNS information, and interface statistics are unrelated to the candidate datastore. Engineers should verify datastore capabilities because not every device supports the same NETCONF datastore features.

Question 352

Which tool provides centralized source-code version control?

1. Grafana
2. Git
3. Wireshark
4. Prometheus

Correct Answer: 2

Explanation:

Git is a distributed version-control system used to track changes in source code and automation artifacts. Network automation teams can store Python scripts, Ansible playbooks, templates, documentation, and configuration definitions in Git repositories. The system provides commit history, branching, merging, and comparison capabilities that help teams collaborate safely. Grafana is primarily a visualization platform, Prometheus collects and stores metrics, and Wireshark analyzes network packets. Using Git also provides an audit trail for automation changes, which can support review, troubleshooting, and controlled deployment processes.

Question 353

Which telemetry feature establishes a persistent data subscription?

1. NETCONF lock
2. REST DELETE
3. gNMI Subscribe
4. SCP transfer

Correct Answer: 3

Explanation:

The gNMI Subscribe operation establishes telemetry subscriptions that allow a client to receive updates from selected data paths. This enables streaming telemetry systems to continuously deliver operational information rather than requiring the monitoring application to repeatedly poll the device. Subscription modes can determine how and when updates are delivered. NETCONF locks control configuration access, REST DELETE removes resources, and SCP transfers files. gNMI subscriptions are therefore useful for collecting interface statistics, system information, routing data, and other operational metrics in modern network monitoring architectures.

Question 354

Which automation principle avoids unnecessary repeated changes?

1. Idempotency
2. Fragmentation
3. Encapsulation
4. Aggregation

Correct Answer: 1

Explanation:

Idempotency means that applying the same automation operation repeatedly should leave the system in the same intended state rather than continually producing additional changes. This is valuable for network configuration because automation jobs may be rerun after failures or as part of periodic compliance checks. An idempotent workflow can recognize when a device already matches the desired configuration and avoid unnecessary modifications. This improves predictability and reduces operational risk. Fragmentation, encapsulation, and aggregation are networking concepts but do not describe the repeated-execution behavior required for reliable configuration automation.

Question 355

Which Cisco interface exposes programmable SD-WAN management functions?

1. vManage API
2. Console port
3. AUX interface
4. CDP neighbor table

Correct Answer: 1

Explanation:

The Cisco vManage API provides programmatic access to many SD-WAN management functions. Automation applications can use API operations to retrieve information, configure devices, manage policies, and integrate SD-WAN management with external systems. This is more scalable than manually performing every task through the graphical interface. The console and AUX interfaces provide device access mechanisms, while the CDP neighbor table provides topology-related information. When building centralized SD-WAN automation, the vManage API is therefore a key programmable interface for interacting with the management platform.

Question 356

Which REST method commonly creates a new resource?

1. GET
2. POST
3. DELETE
4. HEAD

Correct Answer: 2

Explanation:

POST is commonly used by REST APIs to create a new resource or submit data for processing. For example, an automation application might send a POST request to create a new object, initiate an operation, or submit configuration information, depending on the API design. GET generally retrieves information, DELETE removes a resource, and HEAD retrieves response headers without the normal response body. Exact behavior depends on the API documentation, so automation developers should always verify the supported operations. Correct method selection helps prevent unintended API behavior during automated deployments.

Question 357

Which format is frequently used for API payloads in modern automation?

1. JSON
2. BMP
3. WAV
4. TIFF

Correct Answer: 1

Explanation:

JSON is widely used to represent structured data in modern REST APIs and automation systems. Its lightweight syntax makes it convenient for representing objects, arrays, attributes, and values in API requests and responses. Network controllers and management platforms frequently use JSON for exchanging configuration and operational information. BMP, WAV, and TIFF are media or image-related formats and are not commonly used for network automation API payloads. Engineers working with REST APIs should understand JSON syntax because malformed objects, incorrect field names, or improper data types can cause API requests to fail.

Question 358

Which Ansible construct stores values that can change between deployments?

1. Modules
2. Variables
3. Handlers
4. Inventory groups

Correct Answer: 2

Explanation:

Ansible variables store values that can differ between hosts, environments, or deployments. They can represent information such as interface names, IP addresses, VLAN identifiers, credentials references, or platform-specific settings. Using variables allows a single automation workflow to operate across different devices without hardcoding every value. Modules perform individual operations, handlers respond to notifications, and inventory groups organize hosts. Proper variable management improves playbook reusability and maintainability. It also allows engineers to separate automation logic from environment-specific data, making large network automation projects easier to manage.

Question 359

Which security practice protects automation credentials from plain-text exposure?

1. Hardcoded passwords
2. Shared spreadsheets
3. Secret management
4. Public repositories

Correct Answer: 3

Explanation:

Secret management protects sensitive automation credentials by storing them in controlled mechanisms rather than embedding passwords or tokens directly in scripts and repositories. Tools and platforms can provide encrypted storage, controlled access, credential rotation, and auditing capabilities. Hardcoded passwords, shared spreadsheets, and public repositories increase the risk of credential exposure. Secure automation should also apply appropriate permissions and avoid unnecessarily displaying secrets in logs. Protecting credentials is particularly important because automation accounts may have privileges across many network devices, meaning a compromised credential could potentially affect a large portion of the infrastructure.

Question 360

Which workflow validates automation changes before production deployment?

1. CI pipeline
2. Console session
3. Packet capture
4. DNS lookup

Correct Answer: 4

Explanation:

A CI pipeline can automatically validate automation changes before they are promoted to production. Depending on the implementation, the pipeline may perform syntax checking, linting, unit testing, schema validation, security analysis, and other quality controls. These automated checks help identify problems early and create a repeatable validation process. A console session provides direct device access, packet captures analyze traffic, and DNS lookups resolve names. CI therefore plays an important role in modern network automation by providing automated quality gates between development and deployment.