Automation and Programmability

200 questions

Question 161Question

An enterprise network team is transitioning from legacy per-device CLI administration to an automated network management model. Which TWO statements describe key operational impacts of implementing network automation? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Configuration drift is significantly reduced across network devices through centralized template enforcement.; Configuration changes can be deployed simultaneously across multiple devices using programmatic APIs.

Answer

Network automation reduces configuration drift through centralized template enforcement and enables simultaneous configuration changes across multiple devices via programmatic APIs.
Transitioning to automated network management provides operational efficiency by replacing manual CLI commands with centralized template-based provisioning (minimizing configuration drift) and allowing scalable, concurrent updates across network infrastructure via APIs.

Step-by-Step Solution

1
Analyze operational benefits of template enforcement.
Centralized automation platforms push standardized configurations, preventing localized manual changes that cause configuration drift.
Automation enforces a single source of truth for device configurations.
2
Evaluate scalability of change management via APIs.
API calls execute commands concurrently across many devices instead of requiring sequential hop-by-hop SSH CLI connections.
Programmatic execution significantly reduces human effort and deployment duration.

Key Concept

Impact of Automation on Network Management
Question 162Question

When contrasting traditional networking with a controller-based software-defined architecture, how is control plane intelligence managed across traditional network devices?

Show answer & explanation

Answer: Each network device processes routing logic and maintains its control plane independently.

Answer

In traditional networking, control plane intelligence is distributed, meaning each individual network device independently calculates routing decisions and maintains its local forwarding information.
In traditional networking architectures, the control plane logic is distributed. Each router and switch independently runs routing protocols, builds routing tables (RIB), and computes forwarding decisions locally without relying on a centralized software controller.

Step-by-Step Solution

1
Analyze control plane distribution in traditional networks
In traditional network environments, there is no centralized controller. Every network node (router or switch) runs its own control plane protocols (such as OSPF, EIGRP, or BGP) locally.
Control plane protocol processing is fully decentralized across individual devices.
2
Compare with controller-based network architectures
Controller-based networks decouple the control plane from individual network elements and centralize it onto a software-defined network (SDN) controller.
Centralized controllers replace the need for distributed control plane calculations on each individual node.

Key Concept

Distributed Control Plane in Traditional Networking vs. Centralized Control Plane in SDN
Question 163Question

Match each network operational model feature to its corresponding architectural characteristic when comparing traditional networks with controller-based networking environments.

Click a left item, then click its matching right item

Items

Distributed Control Plane
Centralized Control Plane
Manual Hop-by-Hop Management
Intent-Based Orchestration

Matches

Show answer & explanation

Answer

Distributed Control Plane pairs with localized independent routing decisions; Centralized Control Plane pairs with a software controller maintaining an end-to-end network view; Manual Hop-by-Hop Management pairs with configuring devices individually via CLI; Intent-Based Orchestration pairs with defining high-level policies translated automatically across the fabric.
Distributed control planes refer to traditional networks where every node builds its own routing table. Centralized control planes belong to SDN/controller-based models where a central controller manages routing logic. Manual hop-by-hop management describes per-device CLI configuration sessions, whereas intent-based orchestration represents centralized policy translation across the network fabric.

Step-by-Step Solution

1
Analyze control plane placement in traditional vs. software-defined models.
Distributed control planes correspond to independent per-device protocol execution, whereas centralized control planes rely on a single controller for network-wide intelligence.
Control plane separation is the foundational distinction between traditional and controller-based architectures.
2
Analyze management paradigms and configuration methods.
Manual hop-by-hop configuration corresponds to CLI management per device, while intent-based orchestration maps to centralized GUI/API policy translation across the network.
Software-defined networking eliminates direct per-box CLI tasks in favor of automated, controller-driven policy deployment.

Key Concept

Contrasting Traditional Network Architecture with Controller-Based Software-Defined Networking
Question 164Question

An enterprise is transitioning from a traditional distributed network architecture to a controller-based software-defined networking (SDN) model. Which two statements describe key operational characteristics of a controller-based networking approach? (Select two.)

Select all that apply

Show answer & explanation

Answer: Control plane intelligence is centralized on a software controller rather than executing independently on each individual device.; Network policies and configurations are programmatically deployed across the fabric via centralized management interfaces and APIs.

Answer

Control plane intelligence is centralized on a software controller rather than executing independently on each individual device, and network policies and configurations are programmatically deployed across the fabric via centralized management interfaces and APIs.
Controller-based networking centralizes control plane intelligence into a software controller rather than running isolated control plane protocols on every individual network node. Additionally, network provisioning is executed programmatically through centralized management platforms and APIs rather than individual CLI connections.

Step-by-Step Solution

1
Examine control plane placement in controller-based networking.
Identify that SDN decouples and centralizes control plane decisions onto a software controller.
Unlike traditional networks where every node runs its own control plane, SDN centralizes intelligence.
2
Evaluate policy deployment methods in controller-based architectures.
Recognize that configuration and management are handled programmatically through central APIs.
Centralized controllers eliminate device-by-device manual CLI provisioning by utilizing programmatic API integration.

Key Concept

Decoupling and centralization of the control plane and centralized API orchestration in controller-based networking versus distributed traditional networks.
Question 165Question

Match each operational feature or interface component to its correct classification when comparing traditional network architectures with controller-based software-defined networks (SDN).

Click a left item, then click its matching right item

Items

Routing protocols run locally on each device to compute paths independently
RESTful APIs used by management applications to communicate policy intent to the network controller
Protocols such as NETCONF or OpenFlow used by the controller to program network device forwarding tables
Manual node-by-node configuration applied directly via SSH or console command-line interface

Matches

Show answer & explanation

Answer

Independent protocol path computation matches Traditional Network Distributed Control Plane; RESTful APIs for application-to-controller policy intent match Controller-Based Northbound Interface (NBI); NETCONF/OpenFlow for controller-to-device programming matches Controller-Based Southbound Interface (SBI); Node-by-node CLI configuration matches Traditional Network Decentralized Management Plane.
In traditional networking, control plane processing and management operations are decentralized across every network node. Conversely, controller-based SDN centralizes the control plane into a single logical controller, using Northbound APIs (REST) to expose network services to applications and Southbound APIs (NETCONF, RESTCONF, OpenFlow) to program policy onto hardware devices.

Step-by-Step Solution

1
Analyze how control plane decisions are processed in traditional networks.
Identify that traditional networks distribute control plane processing across every individual device.
Each switch and router maintains its own control plane intelligence and routing protocols.
2
Identify the API direction connecting applications to the central controller.
Recognize that interfaces facing upward toward applications are Northbound Interfaces (NBIs).
Northbound APIs allow software applications to programmatically convey network requirements to the SDN controller.
3
Identify the API direction connecting the central controller to forwarding hardware.
Recognize that interfaces facing downward toward network nodes are Southbound Interfaces (SBIs).
Southbound protocols like NETCONF, RESTCONF, and OpenFlow carry instructions from the controller to network switches and routers.
4
Evaluate traditional device management practices.
Identify manual box-by-box CLI access as a characteristic of traditional management planes.
Unlike controller-driven centralized policy pushing, traditional management relies on individual device CLI interaction.

Key Concept

Architectural plane separation and interface distinction between traditional and controller-based networks
Estimated Time:1m 0s
Question 166Question

An engineer is deploying a software-defined fabric architecture across an enterprise network. Which two operational functions are handled exclusively by the overlay network rather than the underlying physical network? (Choose two.)

Select all that apply

Show answer & explanation

Answer: Encapsulating virtual tenant traffic inside VXLAN packets at the fabric edge; Maintaining the mapping database that resolves Endpoint Identifiers (EIDs) to Routing Locators (RLOCs)

Answer

Encapsulating virtual tenant traffic inside VXLAN packets at the fabric edge and maintaining the mapping database that resolves Endpoint Identifiers (EIDs) to Routing Locators (RLOCs) are the two functions operating exclusively within the overlay network.
In software-defined network fabrics, the overlay network is responsible for creating virtual networks on top of physical infrastructure. Encapsulating traffic using VXLAN at fabric edge nodes forms the overlay data plane, while maintaining the LISP mapping database (EID to RLOC) forms the overlay control plane.

Step-by-Step Solution

1
Identify the primary role of the overlay network.
The overlay network provides virtualized layer 2 and layer 3 connectivity on top of the underlay using encapsulation and mapping protocols.
Overlay architectures decouple endpoint identity and virtual topology from the physical network infrastructure.
2
Evaluate data plane mechanisms.
VXLAN encapsulates original tenant frames with outer headers at Virtual Tunnel Endpoints (VTEPs).
This packet encapsulation allows virtual networks to span across physical IP boundaries.
3
Evaluate control plane mechanisms.
LISP maintains mapping tables between EIDs (endpoint addresses) and RLOCs (underlay IP addresses).
LISP serves as the control plane for locating endpoints within the fabric overlay.

Key Concept

Overlay vs. Underlay Roles in Software-Defined Networking
Question 167Question

In a software-defined fabric architecture, which protocol operates specifically at the overlay layer to encapsulate end-host Ethernet frames inside IP/UDP packets across the physical transport infrastructure?

Show answer & explanation

Answer: VXLAN

Answer

VXLAN is the correct protocol operating at the overlay layer for encapsulation.
VXLAN (Virtual Extensible LAN) is the data plane encapsulation technology used in SDN overlays (such as Cisco SD-Access and VXLAN EVPN) to encapsulate original Layer 2 frames within IP/UDP headers to transport traffic over the physical underlay infrastructure.

Step-by-Step Solution

1
Identify the primary role of the overlay layer in software-defined network architectures.
The overlay layer creates virtual tunnels (tunnels end-user frames across the physical network) using data plane encapsulation.
Overlay networks decouple logical tenant services from physical topology.
2
Match the protocols to their architectural layers (Underlay vs. Overlay vs. Management).
VXLAN provides MAC-in-UDP encapsulation for overlay transport, whereas IS-IS provides underlay IP routing, SNMP manages devices, and LACP bundles physical ports.
VXLAN is designed specifically to encapsulate Layer 2/3 user payloads inside standard UDP packets.

Key Concept

Overlay Data Plane Encapsulation with VXLAN
Question 168Question

Match each Software-Defined Networking (SDN) architectural component or layer on the left with its primary function on the right.

Click a left item, then click its matching right item

Items

Underlay Network
Overlay Network
Fabric Control Plane
Network Fabric

Matches

Show answer & explanation

Answer

Underlay Network matches with providing physical Layer 3 IP reachability; Overlay Network matches with creating virtual logical tunnels to encapsulate host traffic; Fabric Control Plane matches with tracking location mappings between EIDs and RLOCs; Network Fabric matches with integrating underlay, overlay, and control plane protocols into a unified network system.
Each architectural layer serves a specific distinct function: the underlay delivers physical Layer 3 IP reachability, the overlay handles logical encapsulation tunnels (such as VXLAN), the fabric control plane manages host location mapping (EID to RLOC via LISP), and the fabric refers to the integrated end-to-end software-defined solution.

Step-by-Step Solution

1
Identify the role of physical IP infrastructure in software-defined architectures.
The underlay network provides basic Layer 3 unicast routing and physical IP reachability across all fabric nodes.
Overlay encapsulation protocols rely on underlying IP reachability between tunnel endpoints.
2
Determine the encapsulation and virtualization layer.
The overlay network uses tunneling protocols such as VXLAN to create logical topologies over the physical underlay.
Overlays abstract tenant network services from the underlying physical cabling and routing topology.
3
Associate control plane functions with endpoint location tracking.
The control plane protocol (e.g., LISP) maps Endpoint Identifiers (EIDs) to Routing Locators (RLOCs).
Decoupling endpoint identity from physical location enables mobility and simplified policy enforcement within the fabric.
4
Define the overarching fabric structure.
The network fabric is the combined system encompassing underlay, overlay, and control plane elements.
Together, these elements form the unified software-defined architectural ecosystem.

Key Concept

Software-Defined Architecture Components: Underlay, Overlay, Control Plane, and Fabric
Estimated Time:45s
Question 169Question

An network administrator is analyzing an enterprise software-defined fabric deployment. Which two protocols operate within the overlay network to handle data plane frame encapsulation and control plane endpoint mapping? (Select two.)

Select all that apply

Show answer & explanation

Answer: VXLAN (Virtual Extensible LAN); LISP (Locator/ID Separation Protocol)

Answer

VXLAN and LISP operate within the overlay layer of a software-defined fabric. VXLAN provides data plane encapsulation (MAC-in-UDP), while LISP provides control plane address mapping (EID to RLOC).
VXLAN and LISP are overlay protocols. VXLAN performs data plane encapsulation by wrapping Layer 2 Ethernet frames inside Layer 3 UDP headers to cross the fabric. LISP operates as an overlay control plane protocol by maintaining a database mapping Endpoint Identifiers (EIDs) to Routing Locators (RLOCs).

Step-by-Step Solution

1
Distinguish between overlay protocol functions and underlay transport protocol functions.
The overlay requires encapsulation protocols for tunnel transport and tracking mechanisms for virtual endpoint locations.
Overlay networks run logically on top of the physical underlay infrastructure to abstract host locations.
2
Identify protocols specific to overlay encapsulation and control plane mapping.
VXLAN handles frame encapsulation and LISP handles endpoint identifier mapping. OSPF and IS-IS belong to the underlay layer, while STP is a traditional Layer 2 protocol.
Underlay protocols strictly provide IP connectivity for physical loopback addresses used by tunnel endpoints.

Key Concept

Overlay vs. Underlay Protocol Roles in Software-Defined Networking
Question 170Question

Network device architecture is divided into distinct functional planes to handle traffic and protocol processing efficiently. Which of the following functions is handled exclusively by the control plane?

Show answer & explanation

Answer: Exchanging routing protocol update messages to populate the routing information base

Answer

Exchanging routing protocol update messages to populate the routing information base is a control plane function.
The correct answer identifies routing protocol message exchange (such as OSPF, BGP, or EIGRP updates) and routing table building as a control plane responsibility. The control plane is responsible for network intelligence, topology discovery, and determining path selection.

Step-by-Step Solution

1
Identify the primary responsibility of the control plane
The control plane makes decisions about how traffic should be routed by running routing protocols and maintaining the Routing Information Base (RIB).
Control plane processes run on the main CPU to establish network intelligence and topology awareness.
2
Differentiate control plane duties from data plane and management plane duties
Packet forwarding, FIB lookups, and TTL decrements belong to the data plane, while SSH/CLI user access belongs to the management plane.
Separating plane duties ensures packet forwarding hardware can operate at line rate without waiting for routing calculation updates.

Key Concept

Control Plane vs Data Plane Responsibilities
Estimated Time:45s
Question 171Question

Match each network operation or traffic flow to its corresponding architectural plane.

Click a left item, then click its matching right item

Items

Exchanging OSPF Link-State Advertisements (LSAs) and computing the shortest path
Performing ingress packet header inspection and ASIC-based switching
Establishing an encrypted SSH session to configure device interfaces

Matches

Show answer & explanation

Answer

Exchanging OSPF LSAs matches the Control Plane; Performing ASIC-based switching matches the Data Plane; Establishing an encrypted SSH session matches the Management Plane.
Network operations are separated into functional planes based on their purpose: the Control Plane handles routing logic and network state signaling (e.g., OSPF); the Data Plane processes and forwards transit user data via hardware (e.g., ASIC packet switching); and the Management Plane handles direct administrative interactions (e.g., SSH).

Step-by-Step Solution

1
Analyze OSPF neighbor interactions and path calculations.
Determined to be control traffic responsible for maintaining topology information.
Protocols that create and maintain routing tables operate within the Control Plane.
2
Analyze ASIC-based frame/packet switching.
Determined to be user payload handling performed directly in hardware forwarding tables.
Transit traffic forwarding decisions and encapsulation changes belong to the Data Plane.
3
Analyze device access via SSH.
Determined to be user-to-device management traffic.
Administrative access protocols used to control and configure network nodes belong to the Management Plane.

Key Concept

Functional Plane Separation (Control, Data, and Management Planes)
Question 172Question

An engineer is inspecting traffic processing on a core router during a network maintenance window. Which operation is handled directly within the data plane (forwarding plane) of the router?

Show answer & explanation

Answer: Decrementing the IP Time-to-Live (TTL) field and rewriting Layer 2 headers

Answer

Decrementing the IP Time-to-Live (TTL) field and rewriting Layer 2 headers
The data plane (forwarding plane) deals exclusively with forwarding user transit traffic across the network device. Operations performed on a per-packet basis—such as decrementing the IP TTL value, updating packet checksums, performing FIB lookups, and applying Layer 2 framing encapsulation—are executed directly in data plane hardware (ASICs).

Step-by-Step Solution

1
Identify the primary role of the data plane (forwarding plane).
The data plane is responsible for processing transit packets through fast-path hardware (ASICs and TCAM) using pre-populated forwarding tables.
Per-packet actions must take place at wire speed without involving the main system CPU.
2
Evaluate which listed operation occurs on every passing frame in hardware.
Modifying packet headers (such as decrementing the TTL), checking/recalculating IP checksums, looking up destination addresses in the Forwarding Information Base (FIB), and rewriting Layer 2 headers are core data plane tasks.
Routing protocol computations (RIB creation) and SSH management belong to the control plane and management plane respectively.

Key Concept

Data plane hardware forwarding operations vs. control plane routing intelligence
Estimated Time:45s
Question 173Question

A network administrator is writing an automation script to interact with a Cisco DNA Center REST API. The script needs to perform a full update of an existing network device configuration object by replacing its attributes on the server. Which HTTP verb should the script use?

Show answer & explanation

Answer: PUT

Answer

The HTTP PUT verb is used to perform a full update or replacement of an existing resource.
In REST-based APIs, the HTTP PUT method maps directly to the Update operation in the CRUD model when performing a complete replacement of an existing resource.

Step-by-Step Solution

1
Identify the target CRUD operation requested
The requirement specifies modifying/replacing an existing configuration object on the server.
Mapping the operational goal to CRUD determines the appropriate HTTP verb.
2
Map the Update operation to the corresponding HTTP verb
In RESTful architecture, HTTP PUT performs a full update/replacement of an existing resource.
PUT replaces the resource representation completely at the specified URI.

Key Concept

REST API HTTP Verbs and CRUD Mapping
Estimated Time:45s
Question 174Question

Match each network configuration management tool to its corresponding architectural characteristics and operational model.

Click a left item, then click its matching right item

Items

Ansible
Puppet
Chef

Matches

Show answer & explanation

Answer

Ansible corresponds to the agentless, push-based model using SSH/NETCONF and YAML playbooks. Puppet corresponds to the agent-based, pull-based model using Puppet DSL manifests over TCP port 8140. Chef corresponds to the agent-based, pull-based model using Ruby DSL recipes/cookbooks over TCP port 443.
Ansible is characterized by being agentless, push-based, using SSH/NETCONF, and using YAML playbooks. Puppet relies on agents, operates in a pull model over TCP port 8140, and uses Puppet DSL manifests. Chef relies on agents, operates in a pull model over TCP port 443 (HTTPS), and uses Ruby DSL recipes and cookbooks.

Step-by-Step Solution

1
Identify the operational architecture of Ansible.
Ansible is agentless, uses SSH or NETCONF to communicate with target network devices, operates via a push mechanism, and uses YAML formatted playbooks.
Ansible does not require software agent installation on managed devices.
2
Identify the operational architecture of Puppet.
Puppet relies on agents, operates via a pull mechanism using TCP port 8140, and uses Puppet DSL for manifests.
Puppet agents periodically check in with the Puppet master to pull desired configuration states.
3
Identify the operational architecture of Chef.
Chef relies on agents (Chef client), operates via a pull mechanism using HTTPS over TCP port 443, and uses Ruby DSL for cookbooks and recipes.
Chef client agents pull configuration policy directly from the Chef server over encrypted web traffic.

Key Concept

Capabilities and Architecture of Configuration Management Tools (Ansible, Puppet, Chef)
Question 175Question

A network operations team is leveraging Cisco DNA Center Assurance to monitor the overall health and operational status of enterprise Cisco Catalyst switches. Which TWO statements accurately describe how Cisco DNA Center gathers telemetry and evaluates device health? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Cisco DNA Center collects telemetry data such as Syslog messages, SNMP traps, and NetFlow streams pushed directly from managed network devices.; Cisco DNA Center calculates dynamic health scores for devices by aggregating Key Performance Indicators (KPIs) across network, client, and application domains.

Answer

Cisco DNA Center gathers telemetry using streaming protocols, SNMP traps, Syslog, and NetFlow from managed devices, and evaluates overall health by computing dynamic health scores from aggregated Key Performance Indicators (KPIs).
Cisco DNA Center Assurance continuously monitors network performance by gathering telemetry data (Syslog, SNMP, NetFlow) from network devices and synthesizing this information into dynamic health scores using Key Performance Indicators (KPIs).

Step-by-Step Solution

1
Identify how Cisco DNA Center collects health and operational data from managed devices.
Cisco DNA Center uses agentless monitoring via streaming telemetry, SNMP, Syslog, and NetFlow.
Standard network management telemetry protocols allow centralized collection without local software agents on switch endpoints.
2
Determine how Cisco DNA Center Assurance quantifies device and network health.
Assurance computes dynamic health scores based on aggregated Key Performance Indicators (KPIs).
Health scores normalize complex metrics into actionable ratings for network, client, and application status.

Key Concept

Cisco DNA Center Assurance Telemetry and Health Score Assessment
Question 176Question

Network architects are evaluating packet encapsulation and routing mechanisms within a modern Cisco Software-Defined Access (SD-Access) fabric architecture. Which two statements correctly differentiate the operational capabilities and responsibilities of the underlay network versus the overlay network? (Select two.)

Select all that apply

Show answer & explanation

Answer: The underlay network provides underlying physical or logical IP connectivity between fabric nodes using standard routing protocols like OSPF, IS-IS, or BGP to reach Routing Locator (RLOC) addresses.; The overlay network uses VXLAN encapsulation to encapsulate Layer 2 frames and Layer 3 packets into UDP packets, decoupling virtual network topology from physical underlay IP addressing.

Answer

The correct statements are that the underlay network provides underlying IP connectivity between fabric nodes using standard routing protocols (like OSPF or IS-IS) to reach RLOC addresses, and the overlay network uses VXLAN encapsulation to transport Layer 2/3 traffic inside UDP packets to decouple the virtual network topology from physical underlay addressing.
In software-defined network architectures such as Cisco SD-Access, the underlay consists of physical interconnects and IP routing protocols (e.g., OSPF, IS-IS) that ensure end-to-end IP reachability between fabric nodes (Routing Locators or RLOCs). The overlay runs on top of the underlay and uses VXLAN to encapsulate Layer 2 and Layer 3 traffic into UDP packets, abstracting client endpoints (EIDs) from physical topology and allowing virtual network segmentation using VNIs.

Step-by-Step Solution

1
Analyze underlay responsibilities in SDN fabric architectures.
Identified that the underlay is the physical infrastructure running standard IP routing protocols (OSPF, IS-IS, BGP) to guarantee IP reachability between fabric devices (RLOCs).
The underlay serves purely as the transport network for outer IP packet headers.
2
Analyze overlay responsibilities in SDN fabric architectures.
Identified that the overlay uses tunnel encapsulation (VXLAN in SD-Access) to transport virtual network payloads over the underlay, providing network virtualization and mobility.
The overlay abstracts user networks (EIDs) from physical switch locations (RLOCs).
3
Evaluate intermediate underlay node behavior regarding packet inspection.
Confirmed that underlay devices inspect only outer IP headers, not inner VXLAN VNI headers or overlay payloads.
Underlay switches route based on outer destination RLOC IP addresses.

Key Concept

Underlay vs. Overlay architecture separation in SDN and Cisco SD-Access fabrics
Question 177Question

An enterprise network engineer is using Cisco DNA Center Software Image Management (SWIM) to upgrade the Cisco IOS XE operating system across a cluster of access switches. The engineer imports the required software image into the Cisco DNA Center repository, marks it as the Golden Image for the switch family, and schedules the deployment. Cisco DNA Center successfully transfers the image file to the local flash storage of all target switches during the maintenance window. However, after the task finishes, all switches continue to run their previous operating system version and Cisco DNA Center flags the switches as non-compliant.

Which phase of the SWIM workflow was omitted or failed to execute?

Show answer & explanation

Answer: The image Activation step was not performed, leaving the switch boot variables pointed to the legacy software image file.

Answer

The image Activation step was not performed, leaving the switch boot variables pointed to the legacy software image file.
The Cisco DNA Center SWIM workflow separates file transfer from system update. The Distribution phase transfers the software image file into the flash memory of the managed device. To complete the upgrade, the Activation phase must be executed. Activation alters the device boot options, performs pre-upgrade checks, reloads the switch into the new software image, and verifies post-upgrade health.

Step-by-Step Solution

1
Analyze the Cisco DNA Center SWIM lifecycle stages
Identify that SWIM consists of distinct stages: Import Image -> Mark as Golden -> Check Compliance -> Distribute Image -> Activate Image.
Understanding the separation between transferring files and applying images is essential for controller-based network management.
2
Evaluate the state of the switches in the scenario
The image was successfully copied to flash (Distribution completed), but the running software version did not change.
File transfer to flash memory does not automatically alter device boot environment variables or trigger a system reload.
3
Determine the missing required operation
Activation must be triggered in Cisco DNA Center to change boot statements, perform pre-checks, execute the reboot, and conduct post-activation verification.
Without Activation, the device reboots into (or remains running) the existing software version.

Key Concept

Cisco DNA Center Software Image Management (SWIM) Workflow
Question 178Question

An network engineer issues a REST API call to a Cisco DNA Center controller to retrieve information regarding managed network devices. The controller returns the following JSON response payload:

{
"response": [
{
"family": "Switches and Hubs",
"hostname": "Dist-Switch-01",
"managementIpAddress": "192.168.10.1",
"upTime": "12 days, 04:12:00",
"interfaceList": [
{
"portName": "GigabitEthernet1/0/1",
"vlan": 10,
"status": "up",
"speed": 1000
},
{
"portName": "GigabitEthernet1/0/2",
"vlan": 20,
"status": "down",
"speed": 1000
}
]
},
{
"family": "Routers",
"hostname": "Edge-Router-01",
"managementIpAddress": "10.1.1.1",
"upTime": "45 days, 11:05:22",
"interfaceList": [
{
"portName": "GigabitEthernet0/0/0",
"vlan": 1,
"status": "up",
"speed": 10000
}
]
}
],
"version": "1.0"
}

Assuming the variable `data` holds the parsed Python dictionary representation of this JSON payload, which Python expression correctly extracts the operating status (`"status"`) of the second interface on the distribution switch (`Dist-Switch-01`)?

Show answer & explanation

Answer: data["response"][0]["interfaceList"][1]["status"]

Answer

data["response"][0]["interfaceList"][1]["status"]
The top-level JSON structure is an object mapped to a Python dictionary containing the key 'response'. The value of 'response' is a list of device objects. The distribution switch ('Dist-Switch-01') is the first element in this list, which corresponds to index 0. Within this dictionary, 'interfaceList' holds a list of interface objects. The second interface ('GigabitEthernet1/0/2') is located at index 1 of this list. Accessing the key 'status' on this dictionary yields the desired value.

Step-by-Step Solution

1
Identify the top-level structure and navigate to the 'response' array
The top-level JSON element is an object (dictionary). Accessing data["response"] returns a list containing two device dictionary objects.
Top-level JSON curly braces {} map to a Python dictionary where keys are string names.
2
Select the distribution switch object from the 'response' array using zero-based indexing
The distribution switch ('Dist-Switch-01') is the first item in the list, accessed via index 0: data["response"][0].
JSON square brackets [] map to Python lists, which use zero-based indexing (0 is the 1st item).
3
Navigate to the 'interfaceList' key within the distribution switch dictionary
Accessing data["response"][0]["interfaceList"] returns a list of interface dictionaries.
The key 'interfaceList' inside the device object points to an array of interface dictionaries.
4
Select the second interface and extract the 'status' key value
The second interface ('GigabitEthernet1/0/2') is at index 1 of the list, and its status is extracted via data["response"][0]["interfaceList"][1]["status"].
The second element in a zero-indexed array has an index of 1.

Key Concept

Interpreting JSON Encoded Data and Accessing Nested Data Structures
Estimated Time:1m 30s
Question 179Question

A network engineering team implements an automated, controller-led management model to enforce baseline configurations across 200 edge routers. Instead of manually pushing changes via device-by-device CLI scripts, the team defines target configurations in centralized declarative state files. Which operational benefit is primarily realized by adopting this automated approach?

Show answer & explanation

Answer: Device configurations are continuously aligned with a centralized intent model, reducing configuration drift and operational errors.

Answer

Device configurations are continuously aligned with a centralized intent model, reducing configuration drift and operational errors.
Automated network management leveraging declarative state models ensures that network devices match a predefined single source of truth. The controller or automation engine automatically reconciles discrepancies, which eliminates configuration drift, reduces manual intervention, and lowers the risk of human error during large-scale network changes.

Step-by-Step Solution

1
Analyze the operational shift from manual per-device CLI changes to centralized declarative automation.
Manual CLI changes are prone to syntax mistakes, human error, and subtle variations between devices known as configuration drift.
Declarative state files describe what the final network configuration should be rather than detailing the sequence of steps to execute.
2
Evaluate how controller-based declarative management maintains network integrity.
The central management platform checks current device state against the declared baseline state and automatically applies necessary changes to achieve compliance.
This guarantees consistent state enforcement and drastically minimizes configuration drift across enterprise devices.

Key Concept

Declarative Configuration Management and Drift Reduction
Estimated Time:1m 15s
Question 180Question

In Cisco DNA Center, Software Image Management (SWIM) simplifies the maintenance of device software binaries across enterprise networks. What is the primary purpose of designating a software image as a 'Golden Image' within SWIM?

Show answer & explanation

Answer: It defines the software version as the baseline standard for a specific device family, enabling Cisco DNA Center to identify non-compliant devices.

Answer

Designating a software image as a 'Golden Image' in Cisco DNA Center SWIM establishes that image as the approved baseline standard for a specific device model or role, allowing the controller to report compliance status.
Designating a software image as a 'Golden Image' within Cisco DNA Center Software Image Management (SWIM) establishes it as the standard, approved software version for a specified device family or role. Once tagged, Cisco DNA Center compares devices against this baseline to highlight software version drift and compliance status.

Step-by-Step Solution

1
Identify the primary function of Software Image Management (SWIM) in Cisco DNA Center.
SWIM manages software image repositories, checks device compliance, and handles image distribution and activation.
Understanding the core repository functionality helps distinguish image baselining from active deployment tasks.
2
Analyze the role of 'Golden Image' designation within the SWIM workflow.
A Golden Image is assigned to specific device families or roles as the network administrator's validated software standard.
Defining a baseline allows Cisco DNA Center to automatically compare running software versions against the Golden Image and flag non-compliant devices.

Key Concept

Cisco DNA Center Software Image Management (SWIM) Golden Image Baselines
Estimated Time:45s
PreviousPage 9 / 10Next