{"id":22791,"date":"2026-09-26T07:59:03","date_gmt":"2026-09-26T07:59:03","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=22791"},"modified":"2026-09-26T07:59:03","modified_gmt":"2026-09-26T07:59:03","slug":"cisco-ccnp-300-435-practice-test-questions-and-exam-dumps-part18-q341-q360","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-300-435-practice-test-questions-and-exam-dumps-part18-q341-q360\/","title":{"rendered":"Cisco CCNP 300-435 Practice Test Questions and Exam Dumps Part18 Q341-Q360"},"content":{"rendered":"<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/300-435-exam-dumps\"><b>Cisco CCNP 300-435 Exam Dumps<\/b><\/a><b> and Practice Test Dumps<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 341<\/b><\/h3>\n<p><b>Which Cisco platform provides APIs for campus network automation?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cisco DNA Center<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cisco ISE<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cisco SecureX<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cisco Prime<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cisco DNA Center provides centralized management and automation capabilities for enterprise campus networks. Its APIs allow applications and automation scripts to retrieve network information, provision devices, manage policies, and integrate with external systems. This enables engineers to automate repetitive operational tasks instead of manually configuring individual devices. Cisco ISE focuses primarily on identity and access control, while SecureX provides security orchestration and integration capabilities. Cisco Prime Infrastructure is an older management platform. DNA Center is therefore particularly relevant when developing automation workflows for Cisco enterprise campus infrastructure.<\/span><\/p>\n<h3><b>Question 342<\/b><\/h3>\n<p><b>Which protocol retrieves structured configuration from a NETCONF datastore?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">POST<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">get-config<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">PATCH<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DELETE<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The NETCONF get-config operation retrieves configuration information from a specified datastore. A client can use it to obtain configuration from locations such as the running, startup, or candidate datastore, depending on device capabilities. This operation is useful in automation workflows that need to inspect existing configuration before making changes. The get operation can retrieve both configuration and operational state, while HTTP methods such as POST, PATCH, and DELETE belong to REST-style interfaces. Understanding NETCONF operations helps automation developers work with structured configuration rather than parsing unstructured CLI output.<\/span><\/p>\n<h3><b>Question 343<\/b><\/h3>\n<p><b>Which Python library is commonly used for REST API communication?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Paramiko<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Netmiko<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Requests<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">NAPALM<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Requests is a widely used Python library for making HTTP requests and interacting with REST APIs. Network automation scripts can use it to send GET, POST, PUT, PATCH, and DELETE requests to management platforms and network devices that expose web-based APIs. Netmiko and Paramiko are commonly associated with SSH-based communication, while NAPALM provides a higher-level abstraction for network device automation. Requests is particularly useful when an automation workflow needs direct control over HTTP headers, authentication, request bodies, and response handling.<\/span><\/p>\n<h3><b>Question 344<\/b><\/h3>\n<p><b>Which mechanism stores reusable Ansible automation components?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Inventory<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Role<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Variable<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Handler<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Ansible roles provide a structured mechanism for organizing reusable automation content. A role can contain tasks, variables, templates, handlers, files, and metadata that collectively implement a particular automation function. Roles make large playbook projects easier to maintain because related components can be grouped into reusable units. Inventory defines target hosts, variables provide configurable values, and handlers execute tasks after receiving notifications. In network automation, roles can be created for common activities such as interface configuration, routing deployment, security configuration, or device preparation.<\/span><\/p>\n<h3><b>Question 345<\/b><\/h3>\n<p><b>Which HTTP status code indicates a successful request?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">404<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">500<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">201<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">200<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">HTTP status code 200 indicates that a request was successfully processed. It is commonly returned by REST APIs when a GET request successfully retrieves a resource or when another operation completes successfully without requiring a more specific success code. Status code 201 indicates that a resource was successfully created, 404 indicates that a requested resource was not found, and 500 represents an internal server error. Automation applications should inspect response status codes to determine whether an API operation succeeded before proceeding with subsequent tasks.<\/span><\/p>\n<h3><b>Question 346<\/b><\/h3>\n<p><b>Which Cisco technology uses YANG models for programmable device management?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">NETCONF<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Telnet<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">TFTP<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CDP<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">NETCONF can use YANG models to represent structured configuration and operational data on network devices. YANG defines the organization, data types, relationships, and constraints of the information that NETCONF manages. This model-driven approach allows automation systems to interact with predictable data structures instead of parsing CLI output. Telnet provides terminal access, TFTP handles file transfers, and CDP discovers directly connected Cisco devices. NETCONF combined with YANG is therefore an important foundation for programmable and model-driven network management.<\/span><\/p>\n<h3><b>Question 347<\/b><\/h3>\n<p><b>Which Ansible feature executes a task only when notified?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Inventory<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Handler<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Role<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fact<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Ansible handlers are tasks that execute when they receive a notification from another task. They are commonly used when a configuration change requires a follow-up operation, such as restarting a service after modifying its configuration. Handlers help prevent unnecessary repeated actions because they normally run only when triggered by a change. Inventory identifies managed hosts, roles organize reusable automation content, and facts provide information collected about managed systems. In network automation, handlers can be useful for controlled operations that should occur only after a relevant configuration modification.<\/span><\/p>\n<h3><b>Question 348<\/b><\/h3>\n<p><b>Which protocol enables secure remote CLI access for automation scripts?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SNMP<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SMTP<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SSH<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">NTP<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">SSH provides encrypted remote access to network device command-line interfaces and is widely used by automation tools. Python libraries such as Netmiko and Paramiko can establish SSH sessions and execute commands programmatically. SSH protects authentication and session data through encryption, making it preferable to insecure remote terminal protocols. SNMP is primarily used for network monitoring and management data, SMTP handles email transport, and NTP synchronizes clocks. Secure CLI access remains important when automating devices that do not expose the required operations through APIs or model-driven protocols.<\/span><\/p>\n<h3><b>Question 349<\/b><\/h3>\n<p><b>Which Git capability allows isolated development of automation changes?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Branches<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Tags<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Archives<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hooks<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Git branches allow developers to work on changes independently from the primary development line. In network automation projects, engineers can create a branch to develop a new playbook, modify a Python script, or test a configuration workflow without immediately changing the production version. After testing and review, the changes can be merged into the appropriate branch. Tags identify specific repository versions, archives package repository content, and hooks automate actions triggered by Git events. Branching therefore supports controlled development and collaborative automation workflows.<\/span><\/p>\n<h3><b>Question 350<\/b><\/h3>\n<p><b>Which API style commonly uses resources identified by URLs?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SOAP<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">REST<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">NETCONF<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">gRPC<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">REST APIs commonly represent resources using URLs and use HTTP methods to interact with those resources. For example, an automation application may use GET to retrieve a resource, POST to create an object, or DELETE to remove one. REST&#8217;s resource-oriented design makes it widely applicable to network management platforms and automation systems. NETCONF instead uses structured RPC operations, while gRPC uses service and method definitions over HTTP\/2. SOAP uses XML-based web service messaging. Understanding REST concepts is important for engineers working with controller APIs and network management platforms.<\/span><\/p>\n<h3><b>Question 351<\/b><\/h3>\n<p><b>What does a NETCONF candidate datastore provide?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Temporary configuration workspace<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Packet capture storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS cache<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Interface statistics<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The NETCONF candidate datastore provides a workspace where configuration changes can be prepared before being committed to the running configuration. This allows automation systems to make multiple changes, validate them, and then apply them as a controlled operation when the device supports the candidate capability. The separation between preparation and activation can reduce the risk of immediately applying incomplete configuration changes. Packet captures, DNS information, and interface statistics are unrelated to the candidate datastore. Engineers should verify datastore capabilities because not every device supports the same NETCONF datastore features.<\/span><\/p>\n<h3><b>Question 352<\/b><\/h3>\n<p><b>Which tool provides centralized source-code version control?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Grafana<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Git<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Wireshark<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prometheus<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Git is a distributed version-control system used to track changes in source code and automation artifacts. Network automation teams can store Python scripts, Ansible playbooks, templates, documentation, and configuration definitions in Git repositories. The system provides commit history, branching, merging, and comparison capabilities that help teams collaborate safely. Grafana is primarily a visualization platform, Prometheus collects and stores metrics, and Wireshark analyzes network packets. Using Git also provides an audit trail for automation changes, which can support review, troubleshooting, and controlled deployment processes.<\/span><\/p>\n<h3><b>Question 353<\/b><\/h3>\n<p><b>Which telemetry feature establishes a persistent data subscription?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">NETCONF lock<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">REST DELETE<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">gNMI Subscribe<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SCP transfer<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The gNMI Subscribe operation establishes telemetry subscriptions that allow a client to receive updates from selected data paths. This enables streaming telemetry systems to continuously deliver operational information rather than requiring the monitoring application to repeatedly poll the device. Subscription modes can determine how and when updates are delivered. NETCONF locks control configuration access, REST DELETE removes resources, and SCP transfers files. gNMI subscriptions are therefore useful for collecting interface statistics, system information, routing data, and other operational metrics in modern network monitoring architectures.<\/span><\/p>\n<h3><b>Question 354<\/b><\/h3>\n<p><b>Which automation principle avoids unnecessary repeated changes?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Idempotency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fragmentation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Encapsulation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Aggregation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Idempotency means that applying the same automation operation repeatedly should leave the system in the same intended state rather than continually producing additional changes. This is valuable for network configuration because automation jobs may be rerun after failures or as part of periodic compliance checks. An idempotent workflow can recognize when a device already matches the desired configuration and avoid unnecessary modifications. This improves predictability and reduces operational risk. Fragmentation, encapsulation, and aggregation are networking concepts but do not describe the repeated-execution behavior required for reliable configuration automation.<\/span><\/p>\n<h3><b>Question 355<\/b><\/h3>\n<p><b>Which Cisco interface exposes programmable SD-WAN management functions?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">vManage API<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Console port<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">AUX interface<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CDP neighbor table<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Cisco vManage API provides programmatic access to many SD-WAN management functions. Automation applications can use API operations to retrieve information, configure devices, manage policies, and integrate SD-WAN management with external systems. This is more scalable than manually performing every task through the graphical interface. The console and AUX interfaces provide device access mechanisms, while the CDP neighbor table provides topology-related information. When building centralized SD-WAN automation, the vManage API is therefore a key programmable interface for interacting with the management platform.<\/span><\/p>\n<h3><b>Question 356<\/b><\/h3>\n<p><b>Which REST method commonly creates a new resource?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">GET<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">POST<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DELETE<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">HEAD<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">POST is commonly used by REST APIs to create a new resource or submit data for processing. For example, an automation application might send a POST request to create a new object, initiate an operation, or submit configuration information, depending on the API design. GET generally retrieves information, DELETE removes a resource, and HEAD retrieves response headers without the normal response body. Exact behavior depends on the API documentation, so automation developers should always verify the supported operations. Correct method selection helps prevent unintended API behavior during automated deployments.<\/span><\/p>\n<h3><b>Question 357<\/b><\/h3>\n<p><b>Which format is frequently used for API payloads in modern automation?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">JSON<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BMP<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">WAV<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">TIFF<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">JSON is widely used to represent structured data in modern REST APIs and automation systems. Its lightweight syntax makes it convenient for representing objects, arrays, attributes, and values in API requests and responses. Network controllers and management platforms frequently use JSON for exchanging configuration and operational information. BMP, WAV, and TIFF are media or image-related formats and are not commonly used for network automation API payloads. Engineers working with REST APIs should understand JSON syntax because malformed objects, incorrect field names, or improper data types can cause API requests to fail.<\/span><\/p>\n<h3><b>Question 358<\/b><\/h3>\n<p><b>Which Ansible construct stores values that can change between deployments?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Modules<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Variables<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Handlers<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Inventory groups<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Ansible variables store values that can differ between hosts, environments, or deployments. They can represent information such as interface names, IP addresses, VLAN identifiers, credentials references, or platform-specific settings. Using variables allows a single automation workflow to operate across different devices without hardcoding every value. Modules perform individual operations, handlers respond to notifications, and inventory groups organize hosts. Proper variable management improves playbook reusability and maintainability. It also allows engineers to separate automation logic from environment-specific data, making large network automation projects easier to manage.<\/span><\/p>\n<h3><b>Question 359<\/b><\/h3>\n<p><b>Which security practice protects automation credentials from plain-text exposure?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hardcoded passwords<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Shared spreadsheets<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secret management<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Public repositories<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Secret management protects sensitive automation credentials by storing them in controlled mechanisms rather than embedding passwords or tokens directly in scripts and repositories. Tools and platforms can provide encrypted storage, controlled access, credential rotation, and auditing capabilities. Hardcoded passwords, shared spreadsheets, and public repositories increase the risk of credential exposure. Secure automation should also apply appropriate permissions and avoid unnecessarily displaying secrets in logs. Protecting credentials is particularly important because automation accounts may have privileges across many network devices, meaning a compromised credential could potentially affect a large portion of the infrastructure.<\/span><\/p>\n<h3><b>Question 360<\/b><\/h3>\n<p><b>Which workflow validates automation changes before production deployment?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CI pipeline<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Console session<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Packet capture<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS lookup<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A CI pipeline can automatically validate automation changes before they are promoted to production. Depending on the implementation, the pipeline may perform syntax checking, linting, unit testing, schema validation, security analysis, and other quality controls. These automated checks help identify problems early and create a repeatable validation process. A console session provides direct device access, packet captures analyze traffic, and DNS lookups resolve names. CI therefore plays an important role in modern network automation by providing automated quality gates between development and deployment.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Cisco CCNP 300-435 Exam Dumps and Practice Test Dumps &nbsp; Question 341 Which Cisco platform provides APIs for campus network automation? Cisco DNA Center Cisco ISE Cisco SecureX Cisco Prime Correct Answer: 1 Explanation: Cisco DNA Center provides centralized management and automation capabilities for enterprise campus networks. Its APIs allow applications and automation [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/22791"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=22791"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/22791\/revisions"}],"predecessor-version":[{"id":22792,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/22791\/revisions\/22792"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=22791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=22791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=22791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}