{"id":18191,"date":"2026-09-22T05:59:15","date_gmt":"2026-09-22T05:59:15","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=18191"},"modified":"2026-09-22T05:59:15","modified_gmt":"2026-09-22T05:59:15","slug":"cisco-ccnp-automation-350-901-practice-test-questions-and-exam-dumps-part15-q281-300","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-automation-350-901-practice-test-questions-and-exam-dumps-part15-q281-300\/","title":{"rendered":"Cisco CCNP Automation 350-901 Practice Test Questions and Exam Dumps Part15 Q281-300"},"content":{"rendered":"<p><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/350-901-exam-dumps\"><b>Cisco CCNP Automation 350-901 Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/p>\n<p><b><br \/>\n<\/b><b>Q281. An Ansible playbook must configure routers in batches of five so that a configuration error cannot affect all 50 routers simultaneously. Which play-level keyword should be used?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">run_once<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">delegate_to<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">register<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b> <span style=\"font-weight: 400;\">serial<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. <\/b><b>serial<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> The Ansible <\/span><span style=\"font-weight: 400;\">serial<\/span><span style=\"font-weight: 400;\"> keyword controls how many hosts from a play are processed at the same time. Setting <\/span><span style=\"font-weight: 400;\">serial: 5<\/span><span style=\"font-weight: 400;\"> causes Ansible to complete the relevant portion of the play for a batch of five devices before moving to the next batch. This reduces the blast radius of an automation failure and allows validation or failure-handling logic to stop later batches if necessary. <\/span><span style=\"font-weight: 400;\">run_once<\/span><span style=\"font-weight: 400;\"> executes a task only once, <\/span><span style=\"font-weight: 400;\">delegate_to<\/span><span style=\"font-weight: 400;\"> changes where a task executes, and <\/span><span style=\"font-weight: 400;\">register<\/span><span style=\"font-weight: 400;\"> stores task results. Batch deployment is useful when rolling out potentially disruptive network changes across large inventories.<\/span><\/p>\n<p><b>Q282. A Terraform team needs to ensure that all engineers and CI runners use provider versions compatible with the tested automation code. Which configuration is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Define provider version constraints in the Terraform configuration and retain the dependency lock file<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Always download the newest provider regardless of compatibility<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Delete the provider lock file before every pipeline<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Allow each engineer to choose unrelated provider versions manually<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Define provider version constraints in the Terraform configuration and retain the dependency lock file<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Terraform provider version constraints define which versions are acceptable for the configuration, while the dependency lock file records the selected provider versions and checksums. Together, these features improve reproducibility across engineers and CI\/CD environments. Automatically using the newest provider can introduce breaking behavior without testing. Removing the lock file unnecessarily can allow version selection to change between runs. Teams should update providers deliberately, review release notes, test the resulting execution plan, and commit appropriate lock-file changes through normal version-control processes. Reproducible dependencies are essential for reliable Infrastructure as Code workflows.<\/span><\/p>\n<p><b>Q283. A RESTCONF automation client receives HTTP 412 Precondition Failed after sending an <\/b><b>If-Match<\/b><b> header with an earlier ETag. What is the most likely cause?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> The API does not support HTTPS<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> The user supplied an invalid Git branch<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> The resource changed after the client originally retrieved it<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> The controller is necessarily rate limiting the client<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. The resource changed after the client originally retrieved it<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> An <\/span><span style=\"font-weight: 400;\">If-Match<\/span><span style=\"font-weight: 400;\"> request can be used for optimistic concurrency control. The client retrieves a resource and stores its ETag, then sends that ETag when attempting an update. If another process modifies the resource first, the server&#8217;s current ETag no longer matches the client&#8217;s value and the conditional update can be rejected with HTTP 412. The client should retrieve the current resource, reevaluate its intended change, and avoid blindly overwriting the newer configuration. This approach helps prevent automation jobs from accidentally replacing updates made by another administrator or workflow.<\/span><\/p>\n<p><b>Q284. A Python script needs to execute cleanup code whether a network API operation succeeds or raises an exception. Which language construct best fits this requirement?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">elif<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">finally<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">yield<\/span><span style=\"font-weight: 400;\"> only<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b> <span style=\"font-weight: 400;\">lambda<\/span><span style=\"font-weight: 400;\"> only<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. <\/b><b>finally<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> A <\/span><span style=\"font-weight: 400;\">finally<\/span><span style=\"font-weight: 400;\"> block executes after the associated <\/span><span style=\"font-weight: 400;\">try<\/span><span style=\"font-weight: 400;\"> statement whether the protected operation succeeds or raises an exception. It is therefore appropriate for cleanup actions such as closing connections, releasing locks, deleting temporary files, or resetting transient state. Exception-specific handling can be placed in <\/span><span style=\"font-weight: 400;\">except<\/span><span style=\"font-weight: 400;\"> blocks, while <\/span><span style=\"font-weight: 400;\">finally<\/span><span style=\"font-weight: 400;\"> handles tasks that must occur regardless of the result. Reliable cleanup is important in network automation because a failed operation should not leave stale locks, open sessions, or temporary resources that interfere with future workflows. Context managers can provide similar cleanup behavior for resources designed to support them.<\/span><\/p>\n<p><b>Q285. An automation service obtains a short-lived access token from an API and also receives a refresh token. What is the primary purpose of the refresh token?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Obtain a new access token without requiring the complete user authorization flow again<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Permanently disable token expiration<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Replace TLS encryption<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Grant unlimited administrator privileges automatically<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Obtain a new access token without requiring the complete user authorization flow again<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Refresh tokens allow an authorized client to request new access tokens after the current access token expires without forcing the user through the entire authorization process each time. They are generally longer-lived and should therefore receive stronger protection than ordinary short-lived access tokens. The client must follow the authorization server&#8217;s documented refresh workflow and handle revocation or expiration correctly. Refresh tokens do not remove the need for TLS, and they do not automatically grant broader privileges than the approved authorization. Secure persistent authentication requires careful management of token scope, lifetime, storage, and rotation.<\/span><\/p>\n<p><b>Q286. A Git repository contains a generated directory called <\/b><b>build\/<\/b><b> that should never be committed. Which Git mechanism should the project use?<\/b><\/p>\n<ol>\n<li><b><\/b> <span style=\"font-weight: 400;\">git revert<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b> <span style=\"font-weight: 400;\">git bisect<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b> <span style=\"font-weight: 400;\">git cherry-pick<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Add the directory pattern to <\/span><span style=\"font-weight: 400;\">.gitignore<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Add the directory pattern to <\/b><b>.gitignore<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> A <\/span><span style=\"font-weight: 400;\">.gitignore<\/span><span style=\"font-weight: 400;\"> file defines patterns for files and directories that Git should normally leave untracked. Generated build output, temporary files, local virtual environments, and editor-specific files are common candidates. Ignoring generated content helps keep the repository focused on source files and reduces unnecessary merge conflicts. If a file is already tracked, adding it to <\/span><span style=\"font-weight: 400;\">.gitignore<\/span><span style=\"font-weight: 400;\"> alone does not automatically remove it from version control; the team must update the index appropriately. <\/span><span style=\"font-weight: 400;\">git revert<\/span><span style=\"font-weight: 400;\">, <\/span><span style=\"font-weight: 400;\">bisect<\/span><span style=\"font-weight: 400;\">, and <\/span><span style=\"font-weight: 400;\">cherry-pick<\/span><span style=\"font-weight: 400;\"> perform history-related operations and do not define persistent ignore rules.<\/span><\/p>\n<p><b>Q287. A GitLab pipeline should run a lightweight syntax test first and avoid consuming expensive CML resources when that test fails. What pipeline design best supports this?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Launch CML before every other pipeline job<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Place syntax validation in an earlier required stage before the CML test stage<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Ignore syntax-test failures<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Run all jobs manually and independently<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Place syntax validation in an earlier required stage before the CML test stage<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> CI\/CD pipelines should generally perform fast, inexpensive checks before resource-intensive integration tests. A syntax or linting stage can reject clearly invalid automation before the pipeline launches a CML topology and consumes compute resources. If the early stage fails, later required stages do not proceed. This improves feedback speed and conserves shared infrastructure. The pipeline can then progress through increasingly realistic validation, such as unit tests, CML simulation, deployment, and post-validation. Thoughtful stage ordering helps network automation teams detect simple problems early while reserving expensive test environments for changes that pass foundational checks.<\/span><\/p>\n<p><b>Q288. A CI pipeline needs the same CML test topology to behave consistently across repeated runs. Which practice is most important?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Modify the topology manually before every run<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Preserve whatever state the previous test left behind<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Create the topology and baseline state from version-controlled definitions<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Disable cleanup and initialization<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Create the topology and baseline state from version-controlled definitions<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Repeatable tests depend on a known initial state. If the CML topology, node definitions, links, and baseline configurations are version-controlled and recreated predictably, identical automation can be tested under comparable conditions. Reusing a lab containing unknown changes introduces state drift and makes failures harder to reproduce. A mature pipeline should create or reset the environment, run tests, preserve required results, and clean up afterward. CML helps create realistic automation test environments, but the value of simulation depends heavily on controlling the lab&#8217;s initial conditions and software assumptions.<\/span><\/p>\n<p><b>Q289. A telemetry architecture needs network devices to establish their own streaming connections toward a collector configured on the management network. What general model does this describe?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Offline telemetry<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Static CLI polling<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Git-triggered collection<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Device-initiated or dial-out telemetry<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Device-initiated or dial-out telemetry<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> In a device-initiated, or dial-out, telemetry architecture, the network device is configured with the destination collector and establishes the telemetry connection toward it. This affects firewall rules, reachability requirements, authentication, certificate design, and failure handling. Another model allows collectors to initiate subscriptions toward devices. Neither approach is universally best; the architecture depends on platform capabilities and operational requirements. Telemetry design should also define sensor paths, subscription behavior, encoding, update frequency, collector redundancy, and storage. Understanding who initiates the connection is important when designing secure and scalable telemetry systems.<\/span><\/p>\n<p><b>Q290. A monitoring platform receives an extremely short CPU spike lasting two seconds. The telemetry stream samples CPU only once every five minutes. What is the primary concern?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Git cannot store the measurement<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> The sampling interval may miss short-lived events<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> YANG cannot represent CPU data<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> TLS prevents frequent sampling<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. The sampling interval may miss short-lived events<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Telemetry sampling frequency determines the time resolution of collected data. A five-minute interval may be sufficient for long-term capacity trends but can completely miss a transient two-second CPU spike. Increasing sampling frequency improves visibility into short-lived events but also increases device processing, bandwidth, collector workload, and storage consumption. Telemetry architecture must therefore balance resolution with scalability and operational value. In some cases, event-driven or on-change mechanisms can complement periodic sampling. Engineers should choose collection behavior according to the phenomena they need to observe rather than selecting one interval for every metric.<\/span><\/p>\n<p><b>Q291. An automation application must send an alert when a job fails, but failure of the notification system must not cause the original configuration transaction to be reported as successful. What should the application do?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Track the configuration result and notification result separately and report them accurately<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Treat notification success as proof the configuration succeeded<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Hide the configuration result if notification fails<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Retry the configuration automatically whenever the alert system is unavailable<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Track the configuration result and notification result separately and report them accurately<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Configuration execution and notification delivery are separate operations with different meanings. A failed notification does not change whether a router configuration succeeded, and a successful alert does not prove the network change worked. Automation should record each result independently and expose enough context for operators to understand both conditions. If notification is important, it can use bounded retries or an alternate channel without altering the factual deployment status. Separating side-effect failures from the core transaction makes automation state clearer and prevents operational dashboards from presenting misleading conclusions.<\/span><\/p>\n<p><b>Q292. A pyATS test compares interface counters before and after a load test. Which practice helps prevent legitimate counter increases from being reported as configuration failures?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Require all counters to remain exactly identical<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Remove counter collection entirely<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Define expected ranges or comparison logic appropriate to the metric<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Mark every changing value as failed<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Define expected ranges or comparison logic appropriate to the metric<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Not every operational metric should be tested using strict equality. Traffic counters are expected to increase during normal activity, so validation should reflect the meaning of the metric. A test might verify that error counters stay below a threshold, that packet counts increase, or that utilization remains within a permitted range. Well-designed automation distinguishes expected state changes from genuine failures. pyATS can provide structured values, but engineers must still define meaningful assertions. Tests that use inappropriate comparisons generate false failures and reduce confidence in the automated validation system.<\/span><\/p>\n<p><b>Q293. A network automation API runs in a container. The team wants the service to execute as a non-root user even if the container runtime allows root. What security principle does this implement?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Least privilege<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> High availability<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Event correlation<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Pagination<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Least privilege<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Running an application with only the permissions it requires follows the principle of least privilege. If the automation service is compromised, a non-root runtime identity can reduce the attacker&#8217;s ability to modify the container or interact with host resources. Container security should also consider filesystem permissions, capabilities, image provenance, secrets, networking, and runtime isolation. Root inside a container is not automatically equivalent to unrestricted host root access, but unnecessarily elevated permissions still increase risk. Secure automation design should minimize privileges at the application, container, API, and infrastructure layers.<\/span><\/p>\n<p><b>Q294. An internal automation service uses HTTPS, but a client must connect through the service&#8217;s IP address instead of its DNS name. The certificate contains only the DNS name in its SAN. What is likely to happen with normal certificate validation?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Validation always succeeds because the certificate is signed<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> The hostname or identity check fails because the IP is not an approved certificate identity<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> TLS automatically adds the IP to the certificate<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> The client receives the server private key<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. The hostname or identity check fails because the IP is not an approved certificate identity<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> TLS identity validation compares the address used by the client with identities listed in the certificate&#8217;s Subject Alternative Name extension. A certificate containing only a DNS name normally does not validate when the client connects using an unrelated IP address, even if the certificate chain itself is trusted. If clients legitimately connect using an IP address, that identity must be considered during certificate issuance where supported and appropriate. Disabling hostname verification is generally an unsafe workaround because it weakens protection against impersonation and man-in-the-middle attacks.<\/span><\/p>\n<p><b>Q295. A local LLM is too large to run efficiently on available hardware. The team wants to reduce memory requirements while retaining the same general model. Which technique should it evaluate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Quantization<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Increasing every parameter value<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Removing all network data validation<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Increasing the model size further<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1. Quantization<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Quantization represents model weights using lower numerical precision, which can substantially reduce memory consumption and sometimes improve inference speed. This can make a local LLM practical on less powerful hardware. The tradeoff is that aggressive quantization may reduce model quality, so the team should benchmark technical accuracy and latency on representative network automation tasks. Quantization does not make an AI system safer by itself and does not replace testing, authorization, retrieval controls, or tool validation. Local LLM deployment should balance model quality, hardware capacity, response time, and data-governance requirements.<\/span><\/p>\n<p><b>Q296. A retrieval-augmented network assistant should answer only from approved documentation and explicitly state when supporting information cannot be found. What prompt strategy best supports this behavior?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Tell the model to invent missing details confidently<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Instruct the model to ground answers in supplied evidence and acknowledge when evidence is insufficient<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Remove all retrieved context<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Increase randomness to maximize creativity<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Instruct the model to ground answers in supplied evidence and acknowledge when evidence is insufficient<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Clear system instructions can direct a retrieval-augmented assistant to use the supplied evidence, distinguish evidence from inference, and state when available documents do not support an answer. This helps reduce unsupported claims, although prompt instructions alone cannot guarantee correctness. The retrieval layer should also supply authoritative, current, and authorized documents, and the application can preserve citations or provenance for verification. Deterministic validation remains necessary for operational actions. For network troubleshooting, an explicit &#8220;insufficient evidence&#8221; result is safer than confidently inventing configuration details that are not present in approved sources.<\/span><\/p>\n<p><b>Q297. An MCP server exposes a tool that normally completes in two seconds but occasionally hangs because of an upstream controller failure. Which server behavior is most appropriate?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Wait forever so the model never receives an error<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Allow unlimited parallel hanging requests<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Restart every router when the request stalls<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Enforce a bounded timeout and return a controlled tool error<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Enforce a bounded timeout and return a controlled tool error<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> MCP tools depend on external systems that can become slow or unavailable. The server should set explicit timeouts so one controller problem cannot block an AI workflow indefinitely or consume server resources permanently. The error returned to the agent should accurately state that current data could not be obtained rather than encouraging the model to fabricate a result. Depending on the operation, bounded retry with backoff may be appropriate. Timeouts, concurrency controls, input validation, authorization, and logging are important safeguards when probabilistic AI agents interact with deterministic network tools.<\/span><\/p>\n<p><b>Q298. An AI agent suggests a router change based on one telemetry source, but a second independent monitoring system reports contradictory state. What should the workflow do before changing production?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Reconcile the conflicting evidence or escalate for validation rather than assuming one source is correct<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Always trust the AI&#8217;s preferred source<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Ignore both monitoring systems<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Apply the change first and investigate afterward<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2. Reconcile the conflicting evidence or escalate for validation rather than assuming one source is correct<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Conflicting operational evidence creates uncertainty that should be resolved before an impactful change is executed. The workflow can query the network directly, evaluate source freshness and authority, run deterministic validation, or escalate the discrepancy to an operator. An AI model should not arbitrarily decide that one data source is correct merely because it appears first or is easier to interpret. Production automation should explicitly handle uncertainty because acting on incorrect telemetry can turn an observability problem into an outage. Evidence reconciliation is particularly important for AI-assisted diagnosis and remediation.<\/span><\/p>\n<p><b>Q299. An AI coding assistant generates a network automation dependency that refers to a package name nearly identical to a legitimate internal package. What risk should the development team consider?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> DHCP exhaustion<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Certificate expiration<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Software supply-chain or dependency-confusion risk<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Model-driven telemetry sampling<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4. Software supply-chain or dependency-confusion risk<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> AI-generated code can reference incorrect, nonexistent, or similarly named dependencies. If developers install an unverified package from a public repository, they can introduce malicious code into the automation environment. Teams should verify dependency names against authoritative project documentation, use approved repositories, pin or constrain versions appropriately, and scan dependencies before use. Internal package naming should also be designed to reduce dependency-confusion opportunities. Generative AI can accelerate development, but its suggested libraries must be treated as untrusted until they are verified through normal software supply-chain controls.<\/span><\/p>\n<p><b>Q300. A network AI agent automatically performs read-only diagnostics but creates a proposed change ticket whenever remediation would modify production. What operating model does this best represent?<\/b><\/p>\n<ol>\n<li><b><\/b><span style=\"font-weight: 400;\"> Complete autonomous control<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>2.<\/b><span style=\"font-weight: 400;\"> Anonymous network administration<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>3.<\/b><span style=\"font-weight: 400;\"> Tiered autonomy based on action impact<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>4.<\/b><span style=\"font-weight: 400;\"> Removal of human oversight for every action<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3. Tiered autonomy based on action impact<\/b><\/p>\n<p><b>Explanation:<\/b><span style=\"font-weight: 400;\"> Tiered autonomy gives an AI agent different levels of independence according to operational risk. Read-only diagnostics can often be performed automatically because they have limited direct impact, while configuration changes can require a proposal, ticket, approval, or separate deployment workflow. This architecture provides useful automation without granting the model unrestricted control over infrastructure. Deterministic authorization should enforce the distinction technically rather than depending only on prompt instructions. Logging, source-of-truth checks, prevalidation, rollback planning, and post-validation can provide additional safeguards when an approved change eventually reaches production.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Cisco CCNP Automation 350-901 Exam Dumps and Practice Test Dumps. Q281. An Ansible playbook must configure routers in batches of five so that a configuration error cannot affect all 50 routers simultaneously. Which play-level keyword should be used? run_once 2. delegate_to 3. register 4. serial Correct Answer: 4. serial Explanation: The Ansible serial [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18191"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=18191"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18191\/revisions"}],"predecessor-version":[{"id":18192,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/18191\/revisions\/18192"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=18191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=18191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=18191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}