Automation and Programmability

200 questions

Question 181Question

Match each network management operational mechanism under an automated network model to its primary operational impact.

Click a left item, then click its matching right item

Items

Declarative State Model
Streaming Telemetry
Centralized API Orchestration
Automated Compliance Auditing

Matches

Show answer & explanation

Answer

Declarative State Model matches with reconciling device configurations to eliminate drift; Streaming Telemetry matches with pushing real-time performance metrics to replace polling overhead; Centralized API Orchestration matches with executing standardized change templates across multiple nodes; Automated Compliance Auditing matches with detecting unauthorized out-of-band changes.
Each automated network management mechanism aligns directly with its primary operational benefit: Declarative models remove state drift, streaming telemetry delivers real-time push visibility, API orchestration enables scaled consistent changes, and compliance auditing flags unauthorized manual changes.

Step-by-Step Solution

1
Analyze Declarative State Model
Declarative models specify 'what' the end state should be rather than 'how' to perform step-by-step commands. This enables automated reconciliation against a single source of truth, removing configuration drift.
Matching core intent of declarative automation.
2
Analyze Streaming Telemetry
Streaming telemetry uses subscription-based push mechanisms (e.g., gRPC, NETCONF/RESTCONF push) to stream structured data continuously, avoiding SNMP pull polling overhead.
Differentiating push telemetry from legacy poll-based SNMP monitoring.
3
Analyze Centralized API Orchestration
Centralized API orchestration interacts with network devices or network controllers via northbound/southbound REST/NETCONF APIs to push rapid, consistent infrastructure changes.
Understanding API-driven scale vs per-device CLI administration.
4
Analyze Automated Compliance Auditing
Automated compliance tools regularly evaluate active configurations against defined baseline rules, highlighting unauthorized ad-hoc changes.
Identifying governance and risk reduction benefits of automation.

Key Concept

Operational Benefits of Network Automation Mechanisms
Estimated Time:1m 30s
Question 182Question

In Cisco Software-Defined Access (SD-Access) architectures, clear functional boundary separation exists between the underlay, overlay, control plane, and data plane components. Match each SDN fabric component or protocol on the left with its correct primary architectural role or operational mechanism on the right.

Click a left item, then click its matching right item

Items

Locator/ID Separation Protocol (LISP)
Virtual Extensible LAN (VXLAN)
Underlay Routing Infrastructure
Fabric Edge Node

Matches

Show answer & explanation

Answer

Locator/ID Separation Protocol (LISP) matches with tracking EID-to-RLOC mappings in the overlay control plane. Virtual Extensible LAN (VXLAN) matches with encapsulating original Layer 2 frames in UDP headers for data plane transport. Underlay Routing Infrastructure matches with establishing physical topology connectivity and IP reachability using an IGP. Fabric Edge Node matches with authenticating endpoints and updating the control plane mapping database.
Each component is mapped accurately according to Cisco SD-Access fabric architecture definitions: LISP manages EID-to-RLOC control plane resolution; VXLAN handles data plane encapsulation; the underlay IGP ensures physical node reachability; and the Fabric Edge Node authenticates end hosts and connects them to the fabric.

Step-by-Step Solution

1
Identify the primary function of Locator/ID Separation Protocol (LISP) within SDN fabric architecture.
LISP separates an endpoint's identity (EID) from its network location (RLOC) and operates as the control plane to map host locations.
Control plane operations track where endpoints reside without broadcasting MAC addresses throughout the physical core.
2
Determine the role of Virtual Extensible LAN (VXLAN).
VXLAN encapsulates Layer 2 ethernet frames inside UDP packets (destination port 4789) for overlay data plane transport.
VXLAN provides virtualized Layer 2 and Layer 3 overlay transport across an IP underlay without requiring Layer 2 stretching in the physical infrastructure.
3
Analyze the responsibility of the Underlay Routing Infrastructure.
The underlay provides hop-by-hop physical IP transport using IGP protocols like IS-IS or OSPF.
Overlay tunnel endpoints (VTEPs / RLOCs) rely strictly on underlay IP reachability to exchange encapsulated traffic.
4
Evaluate the operational scope of the Fabric Edge Node.
The Fabric Edge Node connects end devices, handles client onboarding/security, and registers host EIDs with the LISP Control Plane Node.
Edge nodes function as the entry point into the SD-Access fabric for user traffic and telemetry.

Key Concept

Software-Defined Architecture Roles: Overlay, Underlay, Control Plane (LISP), and Data Plane (VXLAN)
Question 183Question

An enterprise network engineering team is evaluating architectural shifts during a migration from traditional per-device managed networking to a software-defined, controller-based model. Match each architectural component or interface on the left with its corresponding operational role on the right.

Click a left item, then click its matching right item

Items

Traditional Distributed Control Plane
Controller-Based Centralized Control Plane
Southbound Interface (SBI)
Northbound Interface (NBI)

Matches

Show answer & explanation

Answer

Traditional Distributed Control Plane matches with local protocol processing on individual nodes; Controller-Based Centralized Control Plane matches with off-node global topology calculation and state pushing; Southbound Interface (SBI) matches with controller-to-device communication using NETCONF/RESTCONF/OpenFlow; Northbound Interface (NBI) matches with RESTful APIs exposed to management applications and scripts.
In traditional networking, each network device operates its own distributed control plane locally to compute paths and populate its forwarding tables. In SDN controller-based architectures, control plane intelligence is decoupled from network hardware and centralized within an SDN controller. The controller relies on Southbound Interfaces (SBIs) using protocols such as NETCONF, RESTCONF, or OpenFlow to manage data plane devices, and presents Northbound Interfaces (NBIs) using RESTful APIs to higher-level management applications and scripts.

Step-by-Step Solution

1
Analyze control plane distribution in traditional versus controller-based models.
Identify that traditional networks run control plane calculations independently per device, whereas SDN controllers centralize the control plane intelligence off-node.
Traditional devices build local RIBs using distributed routing protocols, while SDN controllers maintain global topology visibility.
2
Distinguish between Northbound and Southbound directional interfaces relative to the SDN controller.
Confirm that Southbound interfaces communicate down to network elements, whereas Northbound interfaces communicate up to orchestrators and management applications.
Southbound protocols (NETCONF, RESTCONF, OpenFlow) handle device-level provisioning; Northbound REST APIs allow software programs to dictate network behavior.
3
Map each component ID to its exact functional description.
Pair traditional control plane to local autonomous table building, centralized control plane to global off-node calculation, SBI to NETCONF/RESTCONF device control, and NBI to RESTful application APIs.
Ensures accurate architectural alignment with Cisco SDN framework principles.

Key Concept

Architectural plane separation, centralized control plane dynamics, and Southbound versus Northbound interface roles in Software-Defined Networking.
Question 184Question

Match each HTTP request method and header combination used in Cisco REST-based API operations (such as RESTCONF and Cisco DNA Center) to its correct operational behavior and CRUD/idempotency characteristic.

Click a left item, then click its matching right item

Items

HTTP POST with Content-Type: application/yang-data+json to a data root container
HTTP PUT with a complete resource payload targeting an existing interface URI
HTTP PATCH containing specific updated fields targeting an existing device configuration URI
HTTP GET with Accept: application/yang-data+xml targeting an operational state endpoint
HTTP DELETE targeting an established RESTCONF configuration path

Matches

Show answer & explanation

Answer

Each HTTP verb and header pair matches directly to its operational CRUD semantics: POST creates child resources, PUT replaces whole resources idempotently, PATCH modifies targeted fields, GET retrieves state data matching the Accept header, and DELETE removes resources idempotently.
Each HTTP verb cleanly maps to a fundamental CRUD operation with defined idempotency and header role rules: POST (Create, non-idempotent), PUT (Replace, idempotent), PATCH (Partial Modify), GET (Read, safe/idempotent with Accept header controlling response format), and DELETE (Delete, idempotent).

Step-by-Step Solution

1
Analyze HTTP POST semantics and Content-Type header
POST creates new resources under a parent URI and is non-idempotent. Content-Type indicates payload format sent by the client.
Creating a new child resource is the core definition of RESTful POST operations.
2
Differentiate between PUT and PATCH operations
PUT completely replaces the resource at the URI (idempotent), whereas PATCH updates only specified fields (partial modification).
Understanding full replacement vs partial delta update is critical for REST API configuration management.
3
Evaluate GET request and Accept header mechanics
GET retrieves data without modifying state (safe/idempotent). The Accept header dictates the payload format returned by the server.
Accept header controls response media type formatting (XML in this scenario).
4
Verify DELETE operational semantics
DELETE removes the specified resource path and returns success status code 204 No Content upon removal.
DELETE corresponds strictly to the Delete operation of CRUD.

Key Concept

Mapping HTTP Verbs to CRUD Operations, Idempotency Characteristics, and Header Controls in REST APIs
Question 185Question

A global logistics company operates hundreds of edge routers configured individually via SSH CLI scripts. Due to subtle differences introduced during manual troubleshooting over time, routine network changes frequently lead to unexpected outages. Which primary operational shift occurs when this network adopts an automated, intent-based management system to handle configuration updates?

Show answer & explanation

Answer: Device state is continuously validated and aligned against a centralized target intent, eliminating inconsistencies caused by manual ad-hoc changes.

Answer

Device state is continuously validated and aligned against a centralized target intent, eliminating inconsistencies caused by manual ad-hoc changes.
Transitioning from manual CLI administration to automated, controller-led management establishes a single source of truth. The management system continuously validates active device configurations against defined business intent, eliminating configuration drift and operational errors caused by ad-hoc CLI changes.

Step-by-Step Solution

1
Analyze the operational problem presented in the scenario.
Manual CLI scripting leads to device-to-device configuration drift and unexpected outages due to unverified local changes.
Individual CLI administration lacks central state tracking and continuous compliance verification.
2
Evaluate the impact of automated, intent-based network management systems.
Automated management systems define a centralized single source of truth and continuously audit physical device states against this intended configuration.
Centralized intent-driven systems enforce standardization, reduce human error, and remediate unauthorized configuration drift.
3
Identify the option that reflects this operational advantage.
Continuous validation of device state against a centralized intent target.
This directly resolves the issue of variations and outages caused by manual CLI adjustments.

Key Concept

Impact of Automation on Network Management Consistency and Configuration Drift
Question 186Question

A network engineering team is evaluating configuration management mechanisms (Ansible, Puppet, and Chef) for automated network device provisioning, compliance auditing, and state enforcement across an enterprise infrastructure. Which of the following statements correctly describe the underlying architectural capabilities, transport protocols, or configuration artifacts of these tools? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Ansible utilizes an agentless architecture that primarily relies on SSH or NETCONF to push configuration playbooks formatted in YAML directly to managed network devices.; Chef typically employs an agent-based, pull architecture where target nodes run a client agent to periodically request and apply configuration state defined in Recipes and Cookbooks from a central server over HTTPS.

Answer

Ansible utilizes an agentless push architecture using SSH/NETCONF and YAML playbooks, while Chef relies on an agent-based pull architecture where target nodes pull configuration recipes and cookbooks from a central server over HTTPS.
The statement describing Ansible correctly highlights its agentless nature, push-based workflow via SSH/NETCONF, and use of YAML playbooks. The statement describing Chef correctly identifies its agent-based pull model, where client software queries a central server over HTTPS to fetch Ruby-based recipes and cookbooks.

Step-by-Step Solution

1
Analyze Ansible architecture and operational traits.
Ansible is agentless, push-based, uses SSH/NETCONF for network transport, and relies on YAML playbooks.
Network devices generally cannot host full agent software easily, making Ansible's agentless SSH push model highly popular for network automation.
2
Analyze Chef architecture and operational traits.
Chef uses an agent-based (Chef Client), pull-based architecture over HTTPS (TCP 443) using Ruby DSL configuration files (Recipes organized in Cookbooks).
The client agent running on target nodes periodically polls the Chef server to ensure local system state matches the declared policy.
3
Evaluate Puppet traits against incorrect options.
Puppet is primarily agent-based (Pull model, Puppet Manifests, TCP 8140 HTTPS), contrasting with Ansible's agentless model.
Confusing Puppet as an agentless push mechanism or Ansible as requiring a client daemon on switches represents a fundamental misidentification of configuration management architectures.

Key Concept

Capabilities and Architectural Differences of Configuration Management Tools (Ansible, Puppet, Chef)
Estimated Time:2m 0s
Question 187Question

A network engineer is reviewing REST-based API design principles and operational behaviors for network infrastructure automation. Which two statements accurately describe the characteristics of HTTP verbs and CRUD operations when interacting with REST APIs? (Choose two.)

Select all that apply

Show answer & explanation

Answer: HTTP PUT requests are idempotent and replace the entire targeted resource payload at a specified URI.; HTTP GET requests are considered safe and idempotent, meaning they retrieve resource data without modifying server state.

Answer

The correct statements are that HTTP PUT requests are idempotent and replace the entire targeted resource payload at a specified URI, and HTTP GET requests are considered safe and idempotent, retrieving resource data without modifying server state.
In RESTful architecture, HTTP GET maps to the Read operation and is both safe (causes no side effects) and idempotent. HTTP PUT maps to Update/Replace and is idempotent because replacing a resource with identical data multiple times yields the same resource state.

Step-by-Step Solution

1
Analyze the CRUD mapping and idempotency traits for HTTP PUT.
HTTP PUT maps to Update/Replace. It is idempotent because sending the exact same payload repeatedly results in the same final state on the server.
Understanding idempotency is key to selecting proper HTTP verbs for network automation workflows.
2
Analyze the characteristics of HTTP GET.
HTTP GET performs a Read operation. It is nullipotent/safe (does not mutate server state) and idempotent.
GET requests are strictly used to retrieve data from REST API endpoints.
3
Evaluate the incorrect choices regarding PATCH and POST.
HTTP PATCH provides partial updates (not Create), while HTTP POST maps to Create (not Read) and carries a request body.
Disambiguating HTTP verbs prevents misconfiguration in network automation scripts.

Key Concept

Characteristics and CRUD Mappings of REST HTTP Verbs (GET, POST, PUT, PATCH, DELETE)
Estimated Time:2m 0s
Question 188Question

Match each network operation or architectural mechanism to its corresponding structural component in traditional vs. controller-based networking.

Click a left item, then click its matching right item

Items

Autonomous path computation executed locally on individual routing nodes using distributed routing protocols
RESTful API abstractions that enable network applications and orchestrators to communicate policy intent to a centralized platform
Centralized software engine maintaining a global network topology view and dictating forwarding logic across the fabric
Data-model driven communication protocols (such as NETCONF, RESTCONF, or OpenFlow) used to program physical switch tables

Matches

Show answer & explanation

Answer

Autonomous local path computation maps to the Traditional Network Control Plane. RESTful APIs for applications map to the Controller-Based Northbound Interface (NBI). The central software engine maintaining global topology maps to the Controller-Based Centralized Control Plane. Protocols like NETCONF/RESTCONF programming hardware map to the Controller-Based Southbound Interface (SBI).
Autonomous local path computation corresponds to the traditional distributed control plane. RESTful application interaction corresponds to the Northbound Interface. The central topology engine corresponds to the controller's centralized control plane. Protocol mechanisms like NETCONF/RESTCONF/OpenFlow correspond to the Southbound Interface.

Step-by-Step Solution

1
Analyze control plane distribution differences
Identify that local autonomous path computation is characteristic of distributed traditional control planes, whereas a central software engine represents controller-based control planes.
Traditional networks rely on distributed node intelligence, while SDN architecture centralizes control logic.
2
Evaluate API directional roles in controller architecture
Distinguish between application-to-controller communication (Northbound) and controller-to-device communication (Southbound).
Northbound APIs interface with business applications; Southbound APIs interface with physical/virtual forwarding infrastructure.
3
Correlate protocols to their respective interfaces and planes
Confirm that NETCONF, RESTCONF, and OpenFlow function as Southbound protocols programming the data plane.
SBIs are responsible for translating controller decisions into hardware forwarding table entries.

Key Concept

Decoupling and centralization of control planes and API classification (NBI vs SBI) in controller-based networking
Question 189Question

During a network topology change in an enterprise environment, a network team evaluates how routing updates are processed. In a traditional distributed network, each router independently recalculates its routing table using its local control plane. Which statement correctly describes how control plane processing is handled in a controller-based network during the same topology change?

Show answer & explanation

Answer: The centralized controller calculates the updated topology paths and uses Southbound protocols to update the forwarding tables on the network devices.

Answer

The centralized controller calculates the updated topology paths and uses Southbound protocols to update the forwarding tables on the network devices.
In controller-based networking, control plane intelligence is centralized. When a topology event occurs, the controller processes the change globally, calculates updated paths, and programs the new forwarding entries directly into device data planes using Southbound protocols.

Step-by-Step Solution

1
Analyze the control plane architecture in traditional versus controller-based networks.
Traditional networks rely on a distributed control plane where each node independently computes routing paths. Controller-based networks centralize control plane intelligence onto an SDN controller.
Identifying the control plane location is the fundamental step in contrasting SDN with traditional networking.
2
Determine how updated forwarding decisions reach the physical devices in an SDN environment.
The SDN controller computes the global path changes and uses Southbound APIs (e.g., OpenFlow, NETCONF, RESTCONF) to program the data plane of managed devices.
Southbound APIs serve as the interface between the centralized controller and the underlying network hardware.

Key Concept

Centralized Control Plane and Southbound API Operations in Controller-Based Networking
Question 190Question

Which network configuration management tool uses a pull-based client architecture where managed devices pull configuration definitions organized into Ruby-based recipes and cookbooks from a master server?

Show answer & explanation

Answer: Chef

Answer

Chef is the configuration management tool that uses a pull-based client architecture with configuration code written in Ruby-based recipes and cookbooks.
Chef is an agent-based configuration management system that operates primarily on a pull model (HTTPS/TCP 443). Configurations in Chef are authored using a Ruby-based domain-specific language (DSL) and organized into units called 'recipes', which are grouped inside 'cookbooks'.

Step-by-Step Solution

1
Identify the file structure and language described in the question.
The scenario specifies Ruby-based definitions organized into 'recipes' and 'cookbooks'.
Chef is uniquely identified by its terminology of recipes and cookbooks written in Ruby DSL.
2
Identify the operational architecture.
The tool uses a pull-based agent model where client nodes contact the central server.
Both Chef and Puppet primarily use agent-based pull models, but Chef specifically utilizes Ruby-based recipes.

Key Concept

Chef Configuration Management Architecture and Terminology
Estimated Time:45s
Question 191Question

A network administrator retrieves interface state data from a Cisco IOS XE device using a RESTCONF GET request. Match each JSON key from the returned payload to its correct JSON data structure or data type based on standard JSON syntax rules.

{
"ietf-interfaces:interface": {
"name": "GigabitEthernet0/0/1",
"enabled": true,
"speed": 1000,
"ietf-ip:ipv4": {
"address": [
{
"ip": "10.0.12.1",
"netmask": "255.255.255.0"
}
]
}
}
}

Which JSON data type or structure corresponds to each specified key?

Click a left item, then click its matching right item

Items

"enabled"
"speed"
"address"
"ietf-ip:ipv4"

Matches

Show answer & explanation

Answer

"enabled" matches Boolean value; "speed" matches Number value; "address" matches Array / List; "ietf-ip:ipv4" matches Object / Dictionary.
Each key in a JSON payload corresponds to a specific primitive data type or data structure: key "enabled" value `true` is a Boolean, key "speed" value `1000` is a Number, key "address" value `[...]` is an Array, and key "ietf-ip:ipv4" value `{...}` is a nested Object.

Step-by-Step Solution

1
Locate key "enabled" in the JSON structure
The value associated with "enabled" is `true`, which is unquoted and represents a Boolean value.
In JSON, unquoted `true` or `false` represents a boolean primitive.
2
Locate key "speed" in the JSON structure
The value associated with "speed" is `1000`, an unquoted sequence of digits representing a Number.
Numbers in JSON are written directly without double quotes.
3
Locate key "address" in the JSON structure
The value associated with "address" begins with `[` and ends with `]`, identifying an Array.
Square brackets `[]` delimit ordered collections/arrays in JSON syntax.
4
Locate key "ietf-ip:ipv4" in the JSON structure
The value associated with "ietf-ip:ipv4" begins with `{` and ends with `}`, identifying an Object.
Curly braces `{}` delimit key-value object dictionaries in JSON syntax.

Key Concept

JSON syntax data types (Strings, Numbers, Booleans, Objects, and Arrays)
Question 192Question

A Python network automation script stores the following JSON response from a Cisco Catalyst Center API in a dictionary variable named `data`:

{
"response": [
{
"siteId": "USA-NY-OFFICE",
"devices": [
{
"hostname": "Core-Rtr-01",
"managementIp": "192.168.1.1",
"upTimeSeconds": 86400,
"isReachabilityHealthy": true,
"modules": [
{"slot": 0, "status": "OK", "serialNumber": "FOC12345678"},
{"slot": 1, "status": "FAIL", "serialNumber": "FOC87654321"}
]
},
{
"hostname": "Dist-Sw-01",
"managementIp": "192.168.1.2",
"upTimeSeconds": 43200,
"isReachabilityHealthy": false,
"modules": [
{"slot": 0, "status": "OK", "serialNumber": "FOC11223344"}
]
}
]
}
]
}

Which Python expression correctly retrieves the serial number of the failed module on `Core-Rtr-01`, and what is the data type of the returned value?

Show answer & explanation

Answer: data["response"][0]["devices"][0]["modules"][1]["serialNumber"] returning a string

Answer

The expression `data["response"][0]["devices"][0]["modules"][1]["serialNumber"]` correctly retrieves the string value `"FOC87654321"`.
The key `"response"` maps to a list whose first element is at index `0`. Within that dictionary, `"devices"` contains a list where `Core-Rtr-01` is at index `0`. Inside that object, `"modules"` is a list containing the failed module as its second element (index `1`). Accessing `"serialNumber"` extracts `"FOC87654321"`, which is enclosed in double quotes and parsed as a string.

Step-by-Step Solution

1
Examine the top-level structure of the JSON payload.
The top-level structure is a dictionary where key `"response"` maps to a JSON array `[...]`. The array contains a single dictionary at index `0`.
Accessing elements inside the top-level array requires `data["response"][0]`.
2
Locate the target device within the `"devices"` array.
The `"devices"` key maps to a list. `Core-Rtr-01` is the first element, situated at index `0`.
Python list indices start at `0` (`["devices"][0]`).
3
Locate the failed module within the `"modules"` list.
The `"modules"` array for `Core-Rtr-01` contains two dictionary items. Slot 0 is at index `0` and slot 1 (status `"FAIL"`) is at index `1`.
The second element in a zero-indexed list is index `1` (`["modules"][1]`).
4
Extract the key and determine the Python data type.
Accessing key `"serialNumber"` yields `"FOC87654321"`. Surrounding double quotes signify a string data type (`str`).
Quoted literal values in JSON map directly to string types in Python.

Key Concept

Interpreting nested JSON arrays versus objects and mapping JSON values to Python data types.
Question 193Question

A network engineer needs to update the description field of an existing interface resource on a router using a RESTful API. The requirement specifies that only the description attribute should be modified, while leaving all other existing configuration parameters for that interface unchanged on the server. Which HTTP verb and payload strategy should be selected to perform this operation?

Show answer & explanation

Answer: HTTP PATCH with a payload containing only the updated description attribute

Answer

Use HTTP PATCH with a payload containing only the modified description attribute.
HTTP PATCH is specifically designed for partial modifications to an existing resource. When an API receives an HTTP PATCH request, it applies changes only to the keys included in the request body, leaving all unmentioned resource attributes intact.

Step-by-Step Solution

1
Identify the CRUD operation required for modifying an existing resource.
The operation requires an Update action on specific fields of an existing resource.
The requirement asks to update an existing configuration rather than creating a new resource or reading existing data.
2
Distinguish between complete replacement (PUT) and partial modification (PATCH).
HTTP PATCH is designed for partial updates, whereas HTTP PUT performs full resource replacement.
Sending a partial payload with HTTP PUT will overwrite omitted attributes with null or default values. HTTP PATCH modifies only the specified attributes.

Key Concept

HTTP Verbs and Resource Mutation (PATCH vs. PUT)
Question 194Question

A network operations team needs to automate configuration management across a network of Cisco IOS XE routers. Organization policy strictly forbids installing specialized agent software or extra daemons on network devices. Furthermore, the automation workflow requires a push model where playbooks written in YAML are executed from a central machine over standard SSH. Which configuration management tool meets all of these operational requirements?

Show answer & explanation

Answer: Ansible, which utilizes an agentless architecture to push configurations defined in YAML over standard SSH.

Answer

Ansible, which utilizes an agentless architecture to push configurations defined in YAML over standard SSH.
Ansible is an agentless configuration management tool that uses SSH (or NETCONF) for network device communication, follows a push model from a central control node, and uses YAML data structure for Playbooks. This satisfies all specified security and operational constraints.

Step-by-Step Solution

1
Identify the agent requirements from the scenario.
The scenario forbids installing third-party agent software on target network devices, requiring an agentless framework.
Ansible communicates directly via native transport protocols (like SSH) without requiring an agent process on the managed node, whereas Puppet and Chef traditionally rely on agent daemons.
2
Identify the operational execution model (push vs pull).
The scenario requires a push model executed centrally.
Ansible operates via a push model where the control node initiates configuration deployment to target devices, whereas Puppet and Chef usually pull configurations periodically from a master/server.
3
Identify the file format and transport protocol requirements.
The requirement mandates YAML playbooks transmitted over SSH.
Ansible uses YAML for Playbooks and SSH as its primary network management transport.

Key Concept

Ansible Agentless Push Architecture and Attributes
Question 195Question

An enterprise organization implements a Software-Defined Networking (SDN) architecture that decouples control plane operations to a centralized controller while maintaining distributed data plane operations on edge switches. If the Southbound API connection between an edge switch and the centralized controller fails unexpectedly, how does the switch handle existing, established data traffic?

Show answer & explanation

Answer: The switch continues forwarding established traffic streams locally using its pre-populated hardware forwarding tables.

Answer

The switch continues forwarding established traffic streams locally using its pre-populated hardware forwarding tables.
In controller-based architectures with decoupled planes, the control plane programs the local data plane hardware (ASICs/TCAM) via Southbound APIs. Once forwarding tables (FIB) are established, the data plane handles packet forwarding autonomously at wire speed. Consequently, a loss of connection to the centralized controller prevents new control updates but allows existing, established data streams to continue forwarding locally without interruption.

Step-by-Step Solution

1
Analyze the functional responsibilities of the control plane versus the data plane in SDN architectures.
The control plane makes policy decisions and builds routing/forwarding structures (RIB), whereas the data plane performs high-speed packet switching based on programmed forwarding tables (FIB/TCAM).
Decoupling control and data planes isolates packet-level forwarding from control traffic processing.
2
Evaluate the state of the data plane when the Southbound connection to the centralized control plane is interrupted.
The local ASIC/TCAM forwarding tables on the network switch retain previously programmed instructions.
Data plane hardware does not need active controller communication for every packet lookup; it forwards transit packets autonomously based on installed FIB entries.

Key Concept

Decoupled Control and Data Plane Resilience
Question 196Question

A network operations team switches from per-device manual command-line configuration to centralized template-based automation. Which primary operational advantage does this shift deliver?

Show answer & explanation

Answer: It reduces configuration drift by enforcing consistent and repeatable changes across all managed devices.

Answer

It reduces configuration drift by enforcing consistent and repeatable changes across all managed devices.
Transitioning from manual CLI configurations to centralized template-based automation allows engineers to define standardized configuration states once and deploy them uniformly. This eliminates human error and minimizes configuration drift across the network footprint.

Step-by-Step Solution

1
Analyze the operational impact of moving from manual CLI configurations to centralized template-based automation.
Manual CLI changes often lead to inconsistent settings across devices over time.
Human errors during individual device access introduce configuration drift.
2
Identify the primary core operational benefit provided by centralized templates.
Centralized templates guarantee that defined configurations are pushed identically across target nodes.
Standardizing change execution ensures compliance and reduces configuration drift.

Key Concept

Impact of Network Automation on Operational Consistency and Configuration Drift
Question 197Question

A network administrator is evaluating the core architectural differences between traditional networking and controller-based software-defined networking (SDN). In a controller-based architecture, how is the control plane managed compared to a traditional network?

Show answer & explanation

Answer: Control plane intelligence is centralized on a software controller that dynamically programs forwarding logic onto network devices.

Answer

Control plane intelligence is centralized on a software controller that dynamically programs forwarding logic onto network devices.
In a controller-based network, control plane functions are decoupled from individual network hardware and centralized into a software-defined controller. The controller maintains a global view of the network topology and uses Southbound APIs (such as OpenFlow, NETCONF, or RESTCONF) to program the forwarding tables of data plane devices.

Step-by-Step Solution

1
Identify the plane separation characteristics of traditional vs. controller-based networks.
Traditional networks distribute both control and data planes across every node, whereas controller-based networks centralize control plane functions.
Centralizing the control plane allows software controllers (such as Cisco DNA Center) to maintain global network state and push configuration/forwarding rules via Southbound APIs.

Key Concept

Centralized Control Plane in SDN vs. Distributed Control Plane in Traditional Networking
Estimated Time:45s
Question 198Question

A junior network technician is reviewing device configuration procedures for a new campus deployment. Which key architectural difference characterizes a controller-based network when compared to a traditional network architecture?

Show answer & explanation

Answer: Control plane intelligence is centralized on a dedicated network controller rather than running independently on each node.

Answer

Control plane intelligence is centralized on a dedicated network controller rather than running independently on each node.
Controller-based networking separates the control plane from the data plane, moving control intelligence into a centralized controller that programmatically manages network devices.

Step-by-Step Solution

1
Identify how control plane functions operate in traditional networks.
In traditional networking, every router and switch runs its own control plane protocol stack independently (distributed control plane).
Traditional devices build routing and forwarding tables locally.
2
Compare traditional behavior with controller-based network architecture.
In controller-based networking (SDN), control plane functions are abstracted and centralized into a central software controller.
Centralization allows policy-based automated management, while physical devices handle data plane forwarding.

Key Concept

Centralized Control Plane vs Distributed Control Plane
Question 199Question

In a software-defined fabric deployment, an engineer is preparing the physical network switches prior to building virtual tunnels. Which essential service must the underlay network provide to enable overlay operational functionality?

Show answer & explanation

Answer: Reliable Layer 3 IP reachability between all physical fabric devices

Answer

Reliable Layer 3 IP reachability between all physical fabric devices
The physical underlay network acts as the foundational transport layer in software-defined architectures. Its mandatory function is to establish end-to-end Layer 3 IP reachability between physical fabric nodes (such as switches and VTEPs) using traditional routing protocols like OSPF, IS-IS, or BGP. Overlay tunnels rely entirely on this underlying IP reachability to transmit encapsulated packets.

Step-by-Step Solution

1
Identify the role of the physical underlay in software-defined network architectures.
The underlay consists of physical switches, routers, links, and Interior Gateway Protocols (such as OSPF or IS-IS).
The main purpose of the underlay is providing standard Layer 3 IP packet transport across physical devices.
2
Determine the dependency of the overlay on the underlay.
Overlay virtual tunnels (e.g., VXLAN tunnels between VTEPs) transport virtualized traffic over the physical network.
Overlay tunnels cannot be established or forward traffic unless the underlay provides IP reachability between the physical IP addresses of the tunnel endpoints.

Key Concept

Underlay Layer 3 IP Reachability Requirement
Question 200Question

In a Cisco Software-Defined Access (SD-Access) architecture, which function is strictly the responsibility of the physical underlay network?

Show answer & explanation

Answer: Providing underlying IP connectivity to ensure reachability between fabric nodes.

Answer

Providing underlying IP connectivity to ensure reachability between fabric nodes.
The underlay network provides basic, robust Layer 3 unicast IP reachability between all fabric nodes (such as fabric edge switches and control plane nodes) using traditional routing protocols.

Step-by-Step Solution

1
Identify the primary definition of the underlay in software-defined network architectures.
The underlay is the physical infrastructure (switches, routers, links) and IGP routing protocols.
The underlay exists to establish basic Layer 3 IP reachability across all physical network devices.
2
Differentiate underlay transport from overlay fabric services.
Encapsulation (VXLAN), control plane mapping (LISP), and policy enforcement (Cisco TrustSec/SGTs) operate in the overlay built on top of the underlay.
Keeping transport functions in the underlay decouples physical topology from virtual fabric services.

Key Concept

SDN Underlay vs. Overlay Functionality
Estimated Time:45s
PreviousPage 10 / 10
Automation and Programmability Practice Questions — Cisco CCNA — Page 10 | Examkin