{"id":18181,"date":"2026-09-22T05:57:51","date_gmt":"2026-09-22T05:57:51","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18181"},"modified":"2026-09-22T05:57:51","modified_gmt":"2026-09-22T05:57:51","slug":"cisco-ccnp-automation-350-901-practice-test-questions-and-exam-dumps-part10-q181-200","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-automation-350-901-practice-test-questions-and-exam-dumps-part10-q181-200\/","title":{"rendered":"Cisco CCNP Automation 350-901 Practice Test Questions and Exam Dumps Part10 Q181-200"},"content":{"rendered":"<p><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/350-901-exam-dumps\"><b>Cisco CCNP Automation 350-901 Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/p>\n<p><b><br \/>\n<\/b><b>Q181. An Ansible playbook contains several related configuration tasks that should trigger recovery actions if one of them fails. Which Ansible structure is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">vars_files<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">serial<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">register<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> A <\/span><span style=\"font-weight: 400;\">block<\/span><span style=\"font-weight: 400;\"> with a <\/span><span style=\"font-weight: 400;\">rescue<\/span><span style=\"font-weight: 400;\"> section<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. A <\/b><b>block<\/b><b> with a <\/b><b>rescue<\/b><b> section<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Ansible blocks allow several tasks to be grouped together and can include <\/span><span style=\"font-weight: 400;\">rescue<\/span><span style=\"font-weight: 400;\"> tasks that execute when a task in the main block fails. This is useful for network automation workflows that need defined recovery actions, such as restoring a previous configuration, gathering troubleshooting information, or notifying operators. An optional <\/span><span style=\"font-weight: 400;\">always<\/span><span style=\"font-weight: 400;\"> section can run regardless of success or failure. <\/span><span style=\"font-weight: 400;\">register<\/span><span style=\"font-weight: 400;\"> captures task results, <\/span><span style=\"font-weight: 400;\">serial<\/span><span style=\"font-weight: 400;\"> controls how many hosts are processed at once, and <\/span><span style=\"font-weight: 400;\">vars_files<\/span><span style=\"font-weight: 400;\"> imports variables. Structured failure handling makes large-scale network changes more predictable and reduces the impact of partial automation failures.<\/span><\/p>\n<p><b>Q182. A Terraform configuration needs to create exactly five similar lab resources whose identities are naturally represented by numeric indexes. Which meta-argument is appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">count<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">depends_on<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">lifecycle<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b> <span style=\"font-weight: 400;\">backend<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. <\/b><b>count<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Terraform&#8217;s <\/span><span style=\"font-weight: 400;\">count<\/span><span style=\"font-weight: 400;\"> meta-argument creates multiple instances of a resource based on an integer value. With <\/span><span style=\"font-weight: 400;\">count = 5<\/span><span style=\"font-weight: 400;\">, Terraform produces five instances that can be referenced using numeric indexes such as <\/span><span style=\"font-weight: 400;\">resource.example[0]<\/span><span style=\"font-weight: 400;\">. This works well when resources are essentially interchangeable and numeric indexing is acceptable. <\/span><span style=\"font-weight: 400;\">for_each<\/span><span style=\"font-weight: 400;\"> may be preferable when instances have meaningful stable keys. <\/span><span style=\"font-weight: 400;\">depends_on<\/span><span style=\"font-weight: 400;\"> controls dependencies, <\/span><span style=\"font-weight: 400;\">lifecycle<\/span><span style=\"font-weight: 400;\"> modifies resource lifecycle behavior, and a backend defines state storage. Selecting between <\/span><span style=\"font-weight: 400;\">count<\/span><span style=\"font-weight: 400;\"> and <\/span><span style=\"font-weight: 400;\">for_each<\/span><span style=\"font-weight: 400;\"> carefully can make Infrastructure as Code easier to maintain as the environment changes.<\/span><\/p>\n<p><b>Q183. A RESTCONF client sends JSON-formatted YANG data when modifying device configuration. Which HTTP header is especially important for identifying the format of the request body?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">User-Agent<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">Location<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">Content-Type<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b> <span style=\"font-weight: 400;\">Server<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. <\/b><b>Content-Type<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> The <\/span><span style=\"font-weight: 400;\">Content-Type<\/span><span style=\"font-weight: 400;\"> header identifies the media type of the request body so the RESTCONF server knows how to interpret the supplied data. When sending YANG-modeled JSON, the client should use the media type required by RESTCONF and the target implementation. The <\/span><span style=\"font-weight: 400;\">Accept<\/span><span style=\"font-weight: 400;\"> header can separately indicate which response representation the client wants to receive. <\/span><span style=\"font-weight: 400;\">User-Agent<\/span><span style=\"font-weight: 400;\"> identifies the client software, while <\/span><span style=\"font-weight: 400;\">Location<\/span><span style=\"font-weight: 400;\"> and <\/span><span style=\"font-weight: 400;\">Server<\/span><span style=\"font-weight: 400;\"> are used for different HTTP purposes. Correct headers are important because a structurally valid payload can still be rejected if its media type is missing or inappropriate.<\/span><\/p>\n<p><b>Q184. A network API accepts a long-running software-image operation and immediately returns HTTP 202 Accepted with a status URL. What should the automation client do next?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Assume the operation completed successfully<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Monitor the returned status resource until the asynchronous operation reaches a final state<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Resubmit the operation continuously<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Treat HTTP 202 as an authentication failure<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Monitor the returned status resource until the asynchronous operation reaches a final state<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> HTTP 202 indicates that the server accepted the request for processing but has not necessarily completed it. APIs that perform long-running operations commonly provide a task, job, or status URL that the client can query until the operation succeeds or fails. Robust automation should implement appropriate polling intervals, timeouts, error handling, and maximum waiting periods. Treating acceptance as completion can cause later automation steps to run prematurely. Repeatedly resubmitting the same operation may create duplicates. Understanding asynchronous API workflows is important when network controllers perform tasks that cannot complete within a single request-response exchange.<\/span><\/p>\n<p><b>Q185. A Python automation program needs to apply the same logging wrapper to several functions without duplicating the logging code inside each function. Which Python feature is well suited to this requirement?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Decorator<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Floating-point conversion<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> List slicing only<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Binary encoding<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Decorator<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> A Python decorator can wrap a function with reusable behavior without duplicating that behavior throughout the application&#8217;s business logic. A logging decorator could record function entry, execution time, sanitized arguments, errors, or completion status for multiple automation functions. This can improve consistency and maintainability when cross-cutting functionality must be applied broadly. Decorators should still be designed carefully so they do not hide exceptions or expose sensitive information. They are particularly useful in mature automation applications where logging, retry logic, metrics, authorization checks, or validation need to be implemented consistently around many functions.<\/span><\/p>\n<p><b>Q186. An engineer has uncommitted Git changes but must temporarily switch branches to investigate another issue. The changes should not be committed yet. Which Git command is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">git revert<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">git reset &#8211;hard<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">git init<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b> <span style=\"font-weight: 400;\">git stash<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. <\/b><b>git stash<\/b><\/p>\n<p><b>Explanation:<\/b> <span style=\"font-weight: 400;\">git stash<\/span><span style=\"font-weight: 400;\"> temporarily saves working-tree changes so the engineer can obtain a clean working directory and switch to another task or branch. The saved changes can later be restored using commands such as <\/span><span style=\"font-weight: 400;\">git stash apply<\/span><span style=\"font-weight: 400;\"> or <\/span><span style=\"font-weight: 400;\">git stash pop<\/span><span style=\"font-weight: 400;\">. This is useful for short-lived context switching when the current work is not ready for a formal commit. <\/span><span style=\"font-weight: 400;\">git reset &#8211;hard<\/span><span style=\"font-weight: 400;\"> could destroy local work, <\/span><span style=\"font-weight: 400;\">git revert<\/span><span style=\"font-weight: 400;\"> reverses an existing commit, and <\/span><span style=\"font-weight: 400;\">git init<\/span><span style=\"font-weight: 400;\"> creates a repository. Engineers should still use commits for durable history rather than relying on stashes as long-term storage.<\/span><\/p>\n<p><b>Q187. A GitLab CI pipeline downloads the same Python dependencies during every job and pipeline run. Which mechanism can improve performance by reusing dependency data when appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Git conflict markers<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Production Terraform state<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> CI cache<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> A CML topology snapshot only<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. CI cache<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> CI caching can preserve reusable dependency data between jobs or pipeline executions, reducing repeated downloads and improving pipeline speed. Package-manager directories are common cache candidates. A cache differs from an artifact: artifacts usually represent job outputs that later stages need, while caches are primarily intended to accelerate repeated work. Cache keys should be designed so incompatible dependency versions do not incorrectly share data. Network automation pipelines still need reproducible dependency definitions rather than relying solely on cached files. Proper caching can shorten feedback cycles without weakening build, validation, deployment, or post-validation requirements.<\/span><\/p>\n<p><b>Q188. A production network automation deployment should not proceed until an authorized engineer approves the validated change. Which CI\/CD control best implements this requirement?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Delete the validation results<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Configure a manual approval or protected deployment gate<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Allow every feature branch to deploy automatically<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Disable access controls on the runner<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Configure a manual approval or protected deployment gate<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> A manual or protected deployment gate inserts an explicit authorization step between automated validation and production execution. The pipeline can still build the automation, run tests, validate the network, and produce a deployment plan automatically, but production modification waits for an authorized approver. This is useful for high-impact network changes and regulated environments. The approval should complement rather than replace automated prevalidation and post-validation. Cisco&#8217;s current AUTOCOR blueprint emphasizes end-to-end CI\/CD network automation stages, making controlled promotion into production an important architectural consideration.<\/span><\/p>\n<p><b>Q189. A Python program must start a predefined Cisco Modeling Labs topology automatically as part of an integration-test workflow. Which approach is most suitable?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Use CML&#8217;s programmable API from the automation code<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Require an operator to click every node manually<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Replace CML with a text editor<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Send configuration through Syslog<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Use CML&#8217;s programmable API from the automation code<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Cisco Modeling Labs exposes programmable capabilities that allow automation to create, start, stop, inspect, and manage lab environments. A Python workflow can use these interfaces to prepare a repeatable test topology before applying candidate network automation. Tests can then run against the simulated infrastructure, and cleanup logic can remove the environment afterward. This approach fits CI\/CD much better than requiring manual interaction for every test execution. Cisco&#8217;s current AUTOCOR training specifically includes building Python scripts to launch CML test topologies and integrating those topologies into automated pipelines.<\/span><\/p>\n<p><b>Q190. A telemetry architecture requires the collector to initiate a connection toward each network device to establish subscriptions. Which general subscription model does this describe?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Device-initiated telemetry only<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Collector-initiated subscription<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Offline packet capture<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Git-triggered telemetry<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Collector-initiated subscription<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> In a collector-initiated telemetry design, the management or telemetry system establishes the session toward the network device and requests the desired telemetry subscriptions. This differs from designs where devices are preconfigured to initiate streaming sessions toward collectors. The exact terminology and protocol behavior depend on the telemetry implementation being used, but understanding who establishes the session affects firewall rules, authentication, scaling, and failure recovery. The architecture should also define sensor paths, update intervals, encoding, transport security, and data storage. Cisco&#8217;s AUTOCOR Operations domain includes model-driven telemetry architecture and its data-consumption considerations.<\/span><\/p>\n<p><b>Q191. A centralized Syslog server receives events from routers, automation servers, and security devices. Which Syslog concept identifies the subsystem or source category that generated a message?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Facility<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Git tag<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Terraform variable<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Docker volume<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Facility<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Syslog facilities provide a categorical indication of the subsystem or type of system that generated a message. They can be combined with severity levels to support filtering, routing, storage, and alerting policies on centralized Syslog systems. Severity represents the importance of the event, whereas facility helps classify its source category. In modern structured logging designs, additional application fields may provide even richer context. Cisco&#8217;s AUTOCOR Operations domain includes implementing logging strategies using files, Syslog, and webhooks, so understanding how centralized logging classifies and routes operational events is useful for automation troubleshooting.<\/span><\/p>\n<p><b>Q192. A pyATS automation test needs connection details for multiple devices, including hostnames, addresses, credentials references, and platform information. Where is this information commonly defined?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Only inside every individual test function<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> In a pyATS testbed definition, commonly represented in YAML<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> In a Docker image tag<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> In a Git merge message<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. In a pyATS testbed definition, commonly represented in YAML<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> A pyATS testbed file describes devices and how automation can connect to them. It can include logical names, platform information, connection protocols, addresses, topology relationships, and credential references. Keeping this information in a structured testbed definition separates environment details from test logic and makes test code more reusable across labs and production environments. Credentials should still be handled securely rather than exposed unnecessarily in plain text. Cisco&#8217;s AUTOCOR course includes configuration validation with pyATS and integration of pyATS testing into automation pipelines.<\/span><\/p>\n<p><b>Q193. A TLS server sends its leaf certificate but omits the required intermediate CA certificate. Clients trust the root CA but still fail to validate the server. What should be corrected?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> The Git repository branch<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> The RESTCONF URI<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> The server&#8217;s certificate-chain presentation<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> The Docker network name<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. The server&#8217;s certificate-chain presentation<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> TLS clients must be able to build a valid trust chain from the server&#8217;s leaf certificate to a trusted root. If the leaf was issued by an intermediate CA, the server normally needs to provide the relevant intermediate certificate so the client can construct that chain. The root itself usually does not need to be sent because clients already maintain trusted root stores. An incomplete chain can therefore cause validation failures even when the leaf certificate itself is otherwise valid. AUTOCOR includes obtaining and deploying trusted CA-signed TLS certificates as an Operations skill.<\/span><\/p>\n<p><b>Q194. A Python automation service receives an IP address from user input. It should accept only valid IPv4 or IPv6 addresses before querying infrastructure. Which approach is strongest?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Trust any string containing a period<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Use a proper IP-address parsing and validation library<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Pass the raw input directly into shell commands<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Remove all input-length limits<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Use a proper IP-address parsing and validation library<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Structured values should be validated with parsers that understand their actual syntax rather than with weak string checks. Python&#8217;s standard library, for example, provides IP-address handling that can determine whether input is a valid IPv4 or IPv6 address. This reduces malformed input and helps downstream code operate on normalized values. If the address later influences commands or API calls, authorization and additional policy checks may also be needed. Cisco&#8217;s current AUTOCOR Operations objectives include secure coding practices such as input validation, authentication, secret management, and output sanitization.<\/span><\/p>\n<p><b>Q195. A local LLM used for network automation begins producing poorer results after the organization changes its prompting template. What is the best way to determine whether the new template caused a regression?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Ask one engineer whether the answers look better<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Replace the model immediately without testing<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Increase randomness as much as possible<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Run a repeatable benchmark of validated network tasks before and after the prompt change<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Run a repeatable benchmark of validated network tasks before and after the prompt change<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> AI automation should be evaluated using a repeatable set of representative tasks with known expected outcomes. Running the same benchmark before and after a prompt, model, retrieval, or tooling change provides evidence of whether quality improved or regressed. Metrics can include technical accuracy, unsafe recommendations, tool-selection correctness, latency, and consistency. Subjective impressions from a few examples can miss important failure modes. Cisco&#8217;s updated AUTOCOR content explicitly includes evaluating the accuracy of AI recommendations, so controlled evaluation is more appropriate than assuming a prompt change is beneficial.<\/span><\/p>\n<p><b>Q196. A network team runs an LLM locally with Ollama. What is one primary architectural benefit of this design compared with sending every prompt to a public external AI service?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> The model is guaranteed never to hallucinate<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Network data can remain within the organization&#8217;s controlled environment<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Authorization is no longer necessary<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Generated automation no longer requires testing<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Network data can remain within the organization&#8217;s controlled environment<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Running an approved model locally can give an organization greater control over where prompts, configurations, and retrieved network information are processed. This can help with privacy, intellectual-property, and data-governance requirements. Local execution does not make the model automatically correct or secure; organizations still need access controls, monitoring, validation, patching, tool restrictions, and safe handling of sensitive information. Cisco&#8217;s AUTOCOR course includes setting up a local LLM with Ollama and using Python with local models for network automation, reflecting the exam&#8217;s emphasis on practical AI integration.<\/span><\/p>\n<p><b>Q197. An MCP server provides static network design standards that an AI client may read as contextual information without executing an operation. Which MCP concept best fits this type of exposed information?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Tool only<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Root shell<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Resource<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Terraform provider<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Resource<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> In MCP, resources can expose contextual information that a client can read, such as documentation, configuration references, inventories, or other data. Tools are more appropriate when the model needs to invoke an operation or function. Distinguishing between informational resources and callable tools helps make an MCP integration clearer and can reduce unnecessary operational capability. Access control remains important because read-only resources may still contain sensitive network information. Cisco&#8217;s current AUTOCOR exam specifically includes constructing FastMCP servers that provide network information to AI agents.<\/span><\/p>\n<p><b>Q198. An AI agent can generate a proposed network change, but an independent rules engine checks whether the change violates routing and security standards before allowing execution. What is the primary benefit of this design?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> It removes all need for logging<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> It allows deterministic policy enforcement outside the probabilistic model<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> It guarantees the LLM&#8217;s explanation is correct<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> It eliminates the need for authentication<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. It allows deterministic policy enforcement outside the probabilistic model<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Large language models are probabilistic and can generate incorrect or unsafe recommendations. A deterministic rules or policy layer can independently evaluate proposed changes against explicit requirements before any network action occurs. This means the security boundary does not depend entirely on the model following instructions correctly. Such controls can enforce prohibited commands, allowed configuration ranges, approval requirements, or source-of-truth constraints. The model can still help interpret intent and generate suggestions, but deterministic systems should govern high-impact actions. This separation is a strong architectural pattern for production AI-assisted network automation.<\/span><\/p>\n<p><b>Q199. An AI troubleshooting agent retrieves logs that contain malicious text instructing the agent to call a destructive tool. What should the architecture do with the retrieved log content?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Treat it as privileged system instructions<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Execute any embedded instructions automatically<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Give the log content administrator permissions<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Treat it as untrusted data and keep tool authorization independent of retrieved text<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Treat it as untrusted data and keep tool authorization independent of retrieved text<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> External and retrieved content can contain indirect prompt-injection instructions designed to manipulate an AI agent. Logs, tickets, documentation, webpages, and configuration comments should therefore be treated as data rather than trusted control instructions. Tool permissions should be enforced separately through identity and authorization mechanisms, ensuring malicious text cannot grant itself destructive capabilities. The system can also separate trusted prompts from retrieved context and limit tool access according to the agent&#8217;s intended role. This approach reduces the chance that untrusted operational data becomes a pathway to unauthorized infrastructure actions.<\/span><\/p>\n<p><b>Q200. A company wants an AI agent to remediate low-risk interface-description inconsistencies automatically but requires approval for routing changes. Which governance approach does this represent?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Risk-based levels of automation autonomy<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Complete elimination of human oversight<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Identical handling for every network operation<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Unrestricted AI administrator access<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Risk-based levels of automation autonomy<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Not every automation action has the same operational impact. Correcting a nonfunctional interface description may be low risk, while changing routing can disrupt major portions of the network. A mature AI automation design can therefore assign different autonomy levels based on action type, impact, confidence, policy, and reversibility. Low-risk tasks may run automatically after deterministic validation, while higher-risk changes require explicit human approval. All actions should still be authorized, logged, and validated afterward. Risk-based autonomy allows organizations to benefit from AI automation without granting the model unrestricted control over critical infrastructure.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Cisco CCNP Automation 350-901 Exam Dumps and Practice Test Dumps. Q181. An Ansible playbook contains several related configuration tasks that should trigger recovery actions if one of them fails. Which Ansible structure is most appropriate? vars_files 2. serial 3. register 4. A block with a rescue section Correct Answer: 4. A block with [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18181"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18181"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18181\/revisions"}],"predecessor-version":[{"id":18182,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18181\/revisions\/18182"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}