{"id":18169,"date":"2026-09-22T05:51:09","date_gmt":"2026-09-22T05:51:09","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18169"},"modified":"2026-09-22T05:51:09","modified_gmt":"2026-09-22T05:51:09","slug":"cisco-ccnp-automation-350-901-practice-test-questions-and-exam-dumps-part4-q61-80","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-automation-350-901-practice-test-questions-and-exam-dumps-part4-q61-80\/","title":{"rendered":"Cisco CCNP Automation 350-901 Practice Test Questions and Exam Dumps Part4 Q61-80"},"content":{"rendered":"<p><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/350-901-exam-dumps\"><b>Cisco CCNP Automation 350-901 Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/p>\n<p><b><br \/>\n<\/b><b>Q61. A Python automation script receives a JSON response containing hundreds of network devices. The engineer needs to select only devices whose role is <\/b><b>edge-router<\/b><b>. Which approach is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Convert the JSON into an image<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Restart the API server<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Ignore the device role field<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Parse the JSON and filter the returned objects based on the <\/span><span style=\"font-weight: 400;\">role<\/span><span style=\"font-weight: 400;\"> attribute<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Parse the JSON and filter the returned objects based on the <\/b><b>role<\/b><b> attribute<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> REST APIs commonly return structured JSON containing arrays and nested objects. A Python automation application should deserialize the response and inspect the relevant fields programmatically. Filtering by the <\/span><span style=\"font-weight: 400;\">role<\/span><span style=\"font-weight: 400;\"> attribute allows the workflow to select only the intended devices before performing additional operations. Ignoring structured fields can cause automation to target unintended systems. Restarting the API server is unrelated to data selection, and converting JSON into an image would destroy its machine-readable structure. Reliable automation depends on correctly parsing and validating structured API responses before making network changes.<\/span><\/p>\n<p><b>Q62. An Ansible inventory contains routers grouped under <\/b><b>branch_routers<\/b><b>. The administrator wants one play to run only against that group. Which playbook field identifies the target group?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">vars<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">hosts<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">tasks<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b> <span style=\"font-weight: 400;\">handlers<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. <\/b><b>hosts<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> The <\/span><span style=\"font-weight: 400;\">hosts<\/span><span style=\"font-weight: 400;\"> field in an Ansible play defines which inventory hosts or groups the play targets. Setting <\/span><span style=\"font-weight: 400;\">hosts: branch_routers<\/span><span style=\"font-weight: 400;\"> directs the play to execute against members of that inventory group. The <\/span><span style=\"font-weight: 400;\">tasks<\/span><span style=\"font-weight: 400;\"> section describes the actions to perform, <\/span><span style=\"font-weight: 400;\">vars<\/span><span style=\"font-weight: 400;\"> defines variables, and <\/span><span style=\"font-weight: 400;\">handlers<\/span><span style=\"font-weight: 400;\"> contains event-driven tasks commonly triggered by <\/span><span style=\"font-weight: 400;\">notify<\/span><span style=\"font-weight: 400;\">. Accurate host targeting is essential in network automation because a valid configuration applied to the wrong device group can cause widespread disruption. Ansible is explicitly included in Cisco&#8217;s current AUTOCOR network automation domain.<\/span><\/p>\n<p><b>Q63. A Terraform resource has already been created in production outside Terraform. The automation team wants Terraform to begin managing that existing resource without creating a duplicate. Which operation is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">terraform destroy<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">terraform fmt<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Import the existing resource into Terraform state<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Delete the production resource first<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Import the existing resource into Terraform state<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Terraform import associates an existing real-world resource with a Terraform resource address so that Terraform can begin tracking it in state. The configuration should also describe the resource appropriately so future plans reflect the intended desired state. Destroying the existing resource is unnecessary and potentially disruptive. <\/span><span style=\"font-weight: 400;\">terraform fmt<\/span><span style=\"font-weight: 400;\"> only reformats configuration files. Importing is particularly useful during infrastructure-as-code adoption when resources already exist but must gradually move under Terraform management. State should be protected and reviewed carefully after import because future Terraform actions depend on accurate resource mappings.<\/span><\/p>\n<p><b>Q64. A RESTCONF client needs to retrieve the running configuration of an interface without changing it. Which HTTP method should it use?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> GET<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> DELETE<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> PATCH<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> POST<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. GET<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> HTTP GET retrieves the representation of a RESTCONF resource without modifying it. For example, an automation client can query interface configuration or operational data defined by a YANG model. PATCH and PUT are typically associated with configuration modifications, DELETE removes resources, and POST can invoke creation or operations depending on the API. Read-only GET requests are useful during prevalidation and troubleshooting because they allow automation to inspect current network state before determining whether a change is necessary. Cisco&#8217;s AUTOCOR blueprint explicitly includes constructing RESTCONF automation solutions from YANG models.<\/span><\/p>\n<p><b>Q65. A network automation team wants to decide whether to build a custom Python application or use an Infrastructure as Code framework. Which factor should have the greatest influence?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> The developer&#8217;s favorite programming language<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> The color of the network devices<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Technical and business requirements of the automation use case<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> The number of monitors in the operations center<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Technical and business requirements of the automation use case<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Automation architecture should be selected according to requirements rather than personal tool preference. Infrastructure as Code can be ideal for declarative state management and repeatable provisioning, while a custom application can provide more flexibility for complex logic, integrations, or user interfaces. Low-code\/no-code platforms may be appropriate for simpler operational workflows. Factors such as scalability, maintainability, skills, governance, workflow complexity, APIs, and lifecycle requirements should all influence the decision. Cisco explicitly tests selecting an automation approach based on technical and business requirements in the AUTOCOR Network Automation domain.<\/span><\/p>\n<p><b>Q66. A GitLab CI job fails because the Python version in the runner is older than the version required by the automation code. What is the best resolution?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Update the runner or job environment to a compatible Python version<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Ignore the failed job and deploy anyway<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Delete the automation tests<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Remove the Python version requirement from documentation only<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Update the runner or job environment to a compatible Python version<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> CI\/CD environments must provide versions of runtimes, libraries, and tools that are compatible with the automation being executed. If the pipeline runner uses an incompatible Python version, the correct fix is to align the execution environment with the application&#8217;s documented requirements or update the code appropriately. Ignoring failed jobs or removing tests defeats the purpose of CI validation. Reproducible build environments are important because automation should behave consistently across developer systems and pipeline runners. Cisco&#8217;s AUTOCOR blueprint explicitly includes diagnosing GitLab pipeline failures caused by incompatible component versions.<\/span><\/p>\n<p><b>Q67. A network engineer is resolving a Git merge conflict. What indicates that a file still contains unresolved conflict sections?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Conflict markers such as <\/span><span style=\"font-weight: 400;\">&lt;&lt;&lt;&lt;&lt;&lt;&lt;<\/span><span style=\"font-weight: 400;\">, <\/span><span style=\"font-weight: 400;\">=======<\/span><span style=\"font-weight: 400;\">, and <\/span><span style=\"font-weight: 400;\">&gt;&gt;&gt;&gt;&gt;&gt;&gt;<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> The file has a <\/span><span style=\"font-weight: 400;\">.yaml<\/span><span style=\"font-weight: 400;\"> extension<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> The repository contains a README file<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> The branch has a remote tracking reference<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Conflict markers such as <\/b><b>&lt;&lt;&lt;&lt;&lt;&lt;&lt;<\/b><b>, <\/b><b>=======<\/b><b>, and <\/b><b>&gt;&gt;&gt;&gt;&gt;&gt;&gt;<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Git inserts conflict markers into files when it cannot automatically merge overlapping changes. The sections between <\/span><span style=\"font-weight: 400;\">&lt;&lt;&lt;&lt;&lt;&lt;&lt;<\/span><span style=\"font-weight: 400;\">, <\/span><span style=\"font-weight: 400;\">=======<\/span><span style=\"font-weight: 400;\">, and <\/span><span style=\"font-weight: 400;\">&gt;&gt;&gt;&gt;&gt;&gt;&gt;<\/span><span style=\"font-weight: 400;\"> show competing versions from the branches involved. The engineer must review the intended content, edit the file to the correct final state, remove the markers, stage the resolved file, and complete the merge. The file extension and presence of other repository files do not determine whether a conflict exists. Automation repositories should also run syntax and functional validation after conflicts are resolved because a textually resolved merge can still produce invalid infrastructure configuration.<\/span><\/p>\n<p><b>Q68. Why is post-validation important after an automated ACL deployment?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> It replaces the need for version control<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> It verifies that the network state and behavior match the intended result after deployment<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> It prevents Git commits from being created<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> It removes the need for prevalidation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. It verifies that the network state and behavior match the intended result after deployment<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Automation can complete successfully from a tooling perspective while still producing an incorrect operational outcome. Post-validation checks the actual network after deployment to verify expected ACL entries, reachability, routing, service access, or other requirements. Tools such as pyATS can automate these checks and compare observed state with expected results. Prevalidation and post-validation serve complementary purposes: prevalidation checks readiness before a change, while post-validation confirms success afterward. Cisco&#8217;s current AUTOCOR blueprint explicitly includes post-validation and pyATS-based change validation as core automation skills.<\/span><\/p>\n<p><b>Q69. A team wants a repeatable virtual topology containing IOS XE routers that can be created for every CI pipeline run and destroyed afterward. Which Cisco technology best supports this use case?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Cisco Modeling Labs<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Webex Messaging<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Cisco ISE guest portal<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Syslog only<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Cisco Modeling Labs<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Cisco Modeling Labs provides virtualized Cisco network topologies that can serve as reproducible test environments or digital twins for automation. A pipeline can launch a test topology, apply automation, run validation, and tear down the lab afterward. This helps detect failures before production changes occur and allows developers to reproduce network conditions consistently. Cisco&#8217;s AUTOCOR course specifically includes launching CML test topologies with Python and integrating CML environments into CI pipelines. Webex and Syslog do not provide simulated routing and switching infrastructure.<\/span><\/p>\n<p><b>Q70. A model-driven telemetry subscription is configured to send interface counters every second from thousands of devices. Which architecture concern becomes especially important?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> The color of dashboard widgets<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Git merge strategy only<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Collector, transport, and storage scalability<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> DHCP lease duration<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Collector, transport, and storage scalability<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> High-frequency telemetry from thousands of devices can generate substantial data volume. The automation architecture must ensure collectors, message transports, processing systems, and storage backends can ingest and retain the data at the required rate. Retention policies and aggregation can also affect storage cost and query performance. Overly aggressive subscriptions can overwhelm collectors or network links without providing meaningful operational value. Cisco&#8217;s AUTOCOR Operations domain includes model-driven telemetry architecture with specific emphasis on data consumption and storage considerations.<\/span><\/p>\n<p><b>Q71. An automation application sends notifications to both a SIEM and a collaboration platform whenever a job fails. Which logging design principle does this demonstrate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Events can be routed to multiple destinations according to operational needs<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Automation should write only to local files<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Error events should never leave the application host<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Webhooks should replace all logging mechanisms<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Events can be routed to multiple destinations according to operational needs<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Modern automation systems often send telemetry to different destinations for different purposes. A SIEM can retain and correlate structured events for security and operations, while a webhook can notify collaboration or incident-management systems immediately. Local application logs may still be useful for debugging. The appropriate design can therefore include file logs, Syslog, webhooks, and centralized observability platforms simultaneously. Cisco&#8217;s AUTOCOR Operations domain expects candidates to understand logging strategies including files, Syslog, and webhooks.<\/span><\/p>\n<p><b>Q72. A pyATS test obtains interface state from a router and compares it with an expected result. What should the test do if a required uplink is administratively and operationally down?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Always mark the test successful<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Delete the interface configuration automatically without policy<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Hide the result from the pipeline<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Fail the validation according to the defined expected state<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Fail the validation according to the defined expected state<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Automated tests should evaluate observed network state against explicit expected conditions. If a required uplink must be operational but is down, the validation should fail and return actionable information to the pipeline. The pipeline can then stop further deployment, trigger rollback, or alert an engineer according to the workflow design. Automatically modifying configuration from a validation test can be unsafe unless remediation is intentionally designed. Cisco emphasizes pyATS-based validation in AUTOCOR because safe automation must verify actual network outcomes rather than merely check whether configuration commands completed.<\/span><\/p>\n<p><b>Q73. A Python script needs to handle API responses that might contain invalid JSON. Which approach is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Assume every response is always valid JSON<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Disable HTTP status checking<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Catch the parsing exception and handle the error explicitly<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Retry forever without inspecting the response<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Catch the parsing exception and handle the error explicitly<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Robust automation cannot assume every API response contains valid JSON. A proxy error, server failure, HTML error page, or malformed API response may cause JSON parsing to fail. The application should check the HTTP status, attempt to parse the expected content, catch relevant exceptions, and log or return a meaningful error. It can retry only when the condition is actually transient. Ignoring status codes or retrying indefinitely can conceal the underlying issue. Error handling is essential because automation failures must stop safely rather than continue with missing or corrupt data.<\/span><\/p>\n<p><b>Q74. A TLS-enabled automation service presents a certificate whose hostname does not match the URL used by the client. What should the client do by default?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Accept the certificate automatically<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Fail certificate validation rather than silently trusting the mismatch<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Disable encryption<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Replace HTTPS with Telnet<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Fail certificate validation rather than silently trusting the mismatch<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> TLS certificate validation includes checking whether the server identity in the certificate matches the hostname the client intended to reach. A mismatch can indicate a configuration problem or an attempted man-in-the-middle attack. Automation should generally fail securely rather than globally disable verification. Administrators should correct DNS, the service URL, or the certificate SAN entries and ensure the certificate chain is trusted. Cisco&#8217;s AUTOCOR Operations objectives include obtaining and deploying CA-signed TLS certificates, making correct certificate validation an important operational skill.<\/span><\/p>\n<p><b>Q75. An automation repository needs a secret for a CI job. Which GitLab mechanism is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Hard-code the secret in the playbook<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Store the password in the README<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Commit it in a <\/span><span style=\"font-weight: 400;\">.env<\/span><span style=\"font-weight: 400;\"> file<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Use a protected CI\/CD variable or integrated secret-management mechanism<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Use a protected CI\/CD variable or integrated secret-management mechanism<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> CI\/CD secrets should remain separate from version-controlled application and infrastructure files. Protected variables or external secret-management systems allow pipelines to receive required credentials at runtime while limiting who can view or use them. The values can also be rotated without rewriting repository history. Hard-coded credentials can remain recoverable from Git history even after being removed from the current file. Cisco&#8217;s AUTOCOR blueprint explicitly includes secure coding practices such as secret management, making proper pipeline credential handling an important automation design skill.<\/span><\/p>\n<p><b>Q76. An engineer asks a generative AI system to produce a Terraform configuration. Which prompt is likely to produce the most useful result?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> &#8220;Do automation.&#8221;<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> A prompt containing clear requirements, target platform, constraints, expected output format, and relevant context<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> A prompt with no description of the desired infrastructure<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> A prompt that deliberately omits platform and version information<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. A prompt containing clear requirements, target platform, constraints, expected output format, and relevant context<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Generative AI performs better when the prompt clearly defines the task, constraints, target environment, relevant data, and desired output format. For network automation, useful context can include platform type, software version, intended state, security requirements, and whether the output should be Python, Ansible, Terraform, or another format. Even well-constructed prompts do not guarantee correct code, so generated output must still be validated. Cisco&#8217;s AUTOCOR AI domain explicitly includes the use of generative AI for network automation development and the need to evaluate generated recommendations.<\/span><\/p>\n<p><b>Q77. A network engineer sends complete production configurations containing passwords to a public generative AI service. What is the primary concern?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Sensitive data and intellectual-property exposure<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> OSPF will immediately stop working<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Git branches will be deleted<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> CML cannot launch topologies afterward<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Sensitive data and intellectual-property exposure<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Production configurations can contain secrets, internal addressing, architecture, access policies, hostnames, business-sensitive details, and intellectual property. Sending them to a public AI service can create retention, privacy, compliance, or ownership concerns depending on the provider and account type. Sensitive data should be minimized or redacted, and organizations should evaluate approved enterprise AI services and contractual protections. AI assistance can be valuable, but Cisco explicitly calls out data privacy and intellectual-property considerations as risks of AI-assisted network automation development.<\/span><\/p>\n<p><b>Q78. An MCP tool allows an AI agent to run <\/b><b>show<\/b><b> commands on routers. What is the safest permission model?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Give the tool full configuration mode access<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Grant only the read-only commands needed by the agent<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Use an unauthenticated administrator session<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Allow arbitrary shell commands<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Grant only the read-only commands needed by the agent<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> AI-integrated tools should follow least privilege. If the purpose of an MCP tool is to retrieve network state, the underlying identity should receive only the read permissions or commands necessary for that function. This prevents a prompt injection, hallucination, or coding defect from escalating into an unauthorized network change. The MCP layer should also validate parameters and log calls. Providing unrestricted configuration or shell access would unnecessarily expand the blast radius. Cisco includes MCP server construction with FastMCP as a required current AUTOCOR AI skill.<\/span><\/p>\n<p><b>Q79. A conversational AI agent proposes shutting an interface because it believes the interface is unused. The source of truth shows the interface serves a critical backup path. What should happen?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> The proposal should be rejected or escalated because it conflicts with authoritative network information<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> The AI should shut the interface immediately<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Delete the source of truth<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Disable validation to avoid disagreement<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. The proposal should be rejected or escalated because it conflicts with authoritative network information<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> AI recommendations should be advisory until verified against authoritative data and defined policy. If the source of truth identifies the interface as critical, the automation system should not allow the model&#8217;s unsupported assumption to override that information. The conflict should be rejected, investigated, or escalated to an operator. This illustrates why AI-based network agents need deterministic validation and authorization layers. Cisco&#8217;s current AUTOCOR objectives specifically include evaluating AI recommendation accuracy and constructing LLM-based conversational network automation agents.<\/span><\/p>\n<p><b>Q80. A team wants an AI network agent to answer natural-language questions such as &#8220;Which branch routers have interfaces down?&#8221; What architecture best supports this?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> An LLM with no network data access<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> A static text file manually updated once per year<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> An LLM connected through controlled tools or an MCP server to current network data<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Direct unauthenticated CLI access from the public Internet<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. An LLM connected through controlled tools or an MCP server to current network data<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> A language model can interpret natural-language intent, but it needs controlled access to current network information to answer operational questions reliably. An MCP server or other structured tool layer can retrieve approved interface or device data and present it to the model. The tool should enforce authentication, authorization, parameter validation, and logging. A model with no network data may hallucinate an answer, while stale static files cannot represent current state. Cisco&#8217;s AUTOCOR v2.0 AI domain specifically includes MCP servers and conversational agents that use LLMs for network automation.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Cisco CCNP Automation 350-901 Exam Dumps and Practice Test Dumps. Q61. A Python automation script receives a JSON response containing hundreds of network devices. The engineer needs to select only devices whose role is edge-router. Which approach is most appropriate? Convert the JSON into an image 2. Restart the API server 3. Ignore [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18169"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18169"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18169\/revisions"}],"predecessor-version":[{"id":18170,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18169\/revisions\/18170"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}