Automation and Programmability

200 soru

Soru 181Soru

Match each network management operational mechanism under an automated network model to its primary operational impact.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Declarative State Model
Streaming Telemetry
Centralized API Orchestration
Automated Compliance Auditing

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Declarative State Model matches with reconciling device configurations to eliminate drift; Streaming Telemetry matches with pushing real-time performance metrics to replace polling overhead; Centralized API Orchestration matches with executing standardized change templates across multiple nodes; Automated Compliance Auditing matches with detecting unauthorized out-of-band changes.
Each automated network management mechanism aligns directly with its primary operational benefit: Declarative models remove state drift, streaming telemetry delivers real-time push visibility, API orchestration enables scaled consistent changes, and compliance auditing flags unauthorized manual changes.

Adım Adım Çözüm

1
Analyze Declarative State Model
Declarative models specify 'what' the end state should be rather than 'how' to perform step-by-step commands. This enables automated reconciliation against a single source of truth, removing configuration drift.
Matching core intent of declarative automation.
2
Analyze Streaming Telemetry
Streaming telemetry uses subscription-based push mechanisms (e.g., gRPC, NETCONF/RESTCONF push) to stream structured data continuously, avoiding SNMP pull polling overhead.
Differentiating push telemetry from legacy poll-based SNMP monitoring.
3
Analyze Centralized API Orchestration
Centralized API orchestration interacts with network devices or network controllers via northbound/southbound REST/NETCONF APIs to push rapid, consistent infrastructure changes.
Understanding API-driven scale vs per-device CLI administration.
4
Analyze Automated Compliance Auditing
Automated compliance tools regularly evaluate active configurations against defined baseline rules, highlighting unauthorized ad-hoc changes.
Identifying governance and risk reduction benefits of automation.

Anahtar Kavram

Operational Benefits of Network Automation Mechanisms
Tahmini Süre:1m 30s
Soru 182Soru

In Cisco Software-Defined Access (SD-Access) architectures, clear functional boundary separation exists between the underlay, overlay, control plane, and data plane components. Match each SDN fabric component or protocol on the left with its correct primary architectural role or operational mechanism on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Locator/ID Separation Protocol (LISP)
Virtual Extensible LAN (VXLAN)
Underlay Routing Infrastructure
Fabric Edge Node

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Locator/ID Separation Protocol (LISP) matches with tracking EID-to-RLOC mappings in the overlay control plane. Virtual Extensible LAN (VXLAN) matches with encapsulating original Layer 2 frames in UDP headers for data plane transport. Underlay Routing Infrastructure matches with establishing physical topology connectivity and IP reachability using an IGP. Fabric Edge Node matches with authenticating endpoints and updating the control plane mapping database.
Each component is mapped accurately according to Cisco SD-Access fabric architecture definitions: LISP manages EID-to-RLOC control plane resolution; VXLAN handles data plane encapsulation; the underlay IGP ensures physical node reachability; and the Fabric Edge Node authenticates end hosts and connects them to the fabric.

Adım Adım Çözüm

1
Identify the primary function of Locator/ID Separation Protocol (LISP) within SDN fabric architecture.
LISP separates an endpoint's identity (EID) from its network location (RLOC) and operates as the control plane to map host locations.
Control plane operations track where endpoints reside without broadcasting MAC addresses throughout the physical core.
2
Determine the role of Virtual Extensible LAN (VXLAN).
VXLAN encapsulates Layer 2 ethernet frames inside UDP packets (destination port 4789) for overlay data plane transport.
VXLAN provides virtualized Layer 2 and Layer 3 overlay transport across an IP underlay without requiring Layer 2 stretching in the physical infrastructure.
3
Analyze the responsibility of the Underlay Routing Infrastructure.
The underlay provides hop-by-hop physical IP transport using IGP protocols like IS-IS or OSPF.
Overlay tunnel endpoints (VTEPs / RLOCs) rely strictly on underlay IP reachability to exchange encapsulated traffic.
4
Evaluate the operational scope of the Fabric Edge Node.
The Fabric Edge Node connects end devices, handles client onboarding/security, and registers host EIDs with the LISP Control Plane Node.
Edge nodes function as the entry point into the SD-Access fabric for user traffic and telemetry.

Anahtar Kavram

Software-Defined Architecture Roles: Overlay, Underlay, Control Plane (LISP), and Data Plane (VXLAN)
Soru 183Soru

An enterprise network engineering team is evaluating architectural shifts during a migration from traditional per-device managed networking to a software-defined, controller-based model. Match each architectural component or interface on the left with its corresponding operational role on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Traditional Distributed Control Plane
Controller-Based Centralized Control Plane
Southbound Interface (SBI)
Northbound Interface (NBI)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Traditional Distributed Control Plane matches with local protocol processing on individual nodes; Controller-Based Centralized Control Plane matches with off-node global topology calculation and state pushing; Southbound Interface (SBI) matches with controller-to-device communication using NETCONF/RESTCONF/OpenFlow; Northbound Interface (NBI) matches with RESTful APIs exposed to management applications and scripts.
In traditional networking, each network device operates its own distributed control plane locally to compute paths and populate its forwarding tables. In SDN controller-based architectures, control plane intelligence is decoupled from network hardware and centralized within an SDN controller. The controller relies on Southbound Interfaces (SBIs) using protocols such as NETCONF, RESTCONF, or OpenFlow to manage data plane devices, and presents Northbound Interfaces (NBIs) using RESTful APIs to higher-level management applications and scripts.

Adım Adım Çözüm

1
Analyze control plane distribution in traditional versus controller-based models.
Identify that traditional networks run control plane calculations independently per device, whereas SDN controllers centralize the control plane intelligence off-node.
Traditional devices build local RIBs using distributed routing protocols, while SDN controllers maintain global topology visibility.
2
Distinguish between Northbound and Southbound directional interfaces relative to the SDN controller.
Confirm that Southbound interfaces communicate down to network elements, whereas Northbound interfaces communicate up to orchestrators and management applications.
Southbound protocols (NETCONF, RESTCONF, OpenFlow) handle device-level provisioning; Northbound REST APIs allow software programs to dictate network behavior.
3
Map each component ID to its exact functional description.
Pair traditional control plane to local autonomous table building, centralized control plane to global off-node calculation, SBI to NETCONF/RESTCONF device control, and NBI to RESTful application APIs.
Ensures accurate architectural alignment with Cisco SDN framework principles.

Anahtar Kavram

Architectural plane separation, centralized control plane dynamics, and Southbound versus Northbound interface roles in Software-Defined Networking.
Soru 184Soru

Match each HTTP request method and header combination used in Cisco REST-based API operations (such as RESTCONF and Cisco DNA Center) to its correct operational behavior and CRUD/idempotency characteristic.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

HTTP POST with Content-Type: application/yang-data+json to a data root container
HTTP PUT with a complete resource payload targeting an existing interface URI
HTTP PATCH containing specific updated fields targeting an existing device configuration URI
HTTP GET with Accept: application/yang-data+xml targeting an operational state endpoint
HTTP DELETE targeting an established RESTCONF configuration path

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Each HTTP verb and header pair matches directly to its operational CRUD semantics: POST creates child resources, PUT replaces whole resources idempotently, PATCH modifies targeted fields, GET retrieves state data matching the Accept header, and DELETE removes resources idempotently.
Each HTTP verb cleanly maps to a fundamental CRUD operation with defined idempotency and header role rules: POST (Create, non-idempotent), PUT (Replace, idempotent), PATCH (Partial Modify), GET (Read, safe/idempotent with Accept header controlling response format), and DELETE (Delete, idempotent).

Adım Adım Çözüm

1
Analyze HTTP POST semantics and Content-Type header
POST creates new resources under a parent URI and is non-idempotent. Content-Type indicates payload format sent by the client.
Creating a new child resource is the core definition of RESTful POST operations.
2
Differentiate between PUT and PATCH operations
PUT completely replaces the resource at the URI (idempotent), whereas PATCH updates only specified fields (partial modification).
Understanding full replacement vs partial delta update is critical for REST API configuration management.
3
Evaluate GET request and Accept header mechanics
GET retrieves data without modifying state (safe/idempotent). The Accept header dictates the payload format returned by the server.
Accept header controls response media type formatting (XML in this scenario).
4
Verify DELETE operational semantics
DELETE removes the specified resource path and returns success status code 204 No Content upon removal.
DELETE corresponds strictly to the Delete operation of CRUD.

Anahtar Kavram

Mapping HTTP Verbs to CRUD Operations, Idempotency Characteristics, and Header Controls in REST APIs
Soru 185Soru

A global logistics company operates hundreds of edge routers configured individually via SSH CLI scripts. Due to subtle differences introduced during manual troubleshooting over time, routine network changes frequently lead to unexpected outages. Which primary operational shift occurs when this network adopts an automated, intent-based management system to handle configuration updates?

Cevabı ve açıklamayı göster

Cevap: Device state is continuously validated and aligned against a centralized target intent, eliminating inconsistencies caused by manual ad-hoc changes.

Cevap

Device state is continuously validated and aligned against a centralized target intent, eliminating inconsistencies caused by manual ad-hoc changes.
Transitioning from manual CLI administration to automated, controller-led management establishes a single source of truth. The management system continuously validates active device configurations against defined business intent, eliminating configuration drift and operational errors caused by ad-hoc CLI changes.

Adım Adım Çözüm

1
Analyze the operational problem presented in the scenario.
Manual CLI scripting leads to device-to-device configuration drift and unexpected outages due to unverified local changes.
Individual CLI administration lacks central state tracking and continuous compliance verification.
2
Evaluate the impact of automated, intent-based network management systems.
Automated management systems define a centralized single source of truth and continuously audit physical device states against this intended configuration.
Centralized intent-driven systems enforce standardization, reduce human error, and remediate unauthorized configuration drift.
3
Identify the option that reflects this operational advantage.
Continuous validation of device state against a centralized intent target.
This directly resolves the issue of variations and outages caused by manual CLI adjustments.

Anahtar Kavram

Impact of Automation on Network Management Consistency and Configuration Drift
Soru 186Soru

A network engineering team is evaluating configuration management mechanisms (Ansible, Puppet, and Chef) for automated network device provisioning, compliance auditing, and state enforcement across an enterprise infrastructure. Which of the following statements correctly describe the underlying architectural capabilities, transport protocols, or configuration artifacts of these tools? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Ansible utilizes an agentless architecture that primarily relies on SSH or NETCONF to push configuration playbooks formatted in YAML directly to managed network devices.; Chef typically employs an agent-based, pull architecture where target nodes run a client agent to periodically request and apply configuration state defined in Recipes and Cookbooks from a central server over HTTPS.

Cevap

Ansible utilizes an agentless push architecture using SSH/NETCONF and YAML playbooks, while Chef relies on an agent-based pull architecture where target nodes pull configuration recipes and cookbooks from a central server over HTTPS.
The statement describing Ansible correctly highlights its agentless nature, push-based workflow via SSH/NETCONF, and use of YAML playbooks. The statement describing Chef correctly identifies its agent-based pull model, where client software queries a central server over HTTPS to fetch Ruby-based recipes and cookbooks.

Adım Adım Çözüm

1
Analyze Ansible architecture and operational traits.
Ansible is agentless, push-based, uses SSH/NETCONF for network transport, and relies on YAML playbooks.
Network devices generally cannot host full agent software easily, making Ansible's agentless SSH push model highly popular for network automation.
2
Analyze Chef architecture and operational traits.
Chef uses an agent-based (Chef Client), pull-based architecture over HTTPS (TCP 443) using Ruby DSL configuration files (Recipes organized in Cookbooks).
The client agent running on target nodes periodically polls the Chef server to ensure local system state matches the declared policy.
3
Evaluate Puppet traits against incorrect options.
Puppet is primarily agent-based (Pull model, Puppet Manifests, TCP 8140 HTTPS), contrasting with Ansible's agentless model.
Confusing Puppet as an agentless push mechanism or Ansible as requiring a client daemon on switches represents a fundamental misidentification of configuration management architectures.

Anahtar Kavram

Capabilities and Architectural Differences of Configuration Management Tools (Ansible, Puppet, Chef)
Tahmini Süre:2m 0s
Soru 187Soru

A network engineer is reviewing REST-based API design principles and operational behaviors for network infrastructure automation. Which two statements accurately describe the characteristics of HTTP verbs and CRUD operations when interacting with REST APIs? (Choose two.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: HTTP PUT requests are idempotent and replace the entire targeted resource payload at a specified URI.; HTTP GET requests are considered safe and idempotent, meaning they retrieve resource data without modifying server state.

Cevap

The correct statements are that HTTP PUT requests are idempotent and replace the entire targeted resource payload at a specified URI, and HTTP GET requests are considered safe and idempotent, retrieving resource data without modifying server state.
In RESTful architecture, HTTP GET maps to the Read operation and is both safe (causes no side effects) and idempotent. HTTP PUT maps to Update/Replace and is idempotent because replacing a resource with identical data multiple times yields the same resource state.

Adım Adım Çözüm

1
Analyze the CRUD mapping and idempotency traits for HTTP PUT.
HTTP PUT maps to Update/Replace. It is idempotent because sending the exact same payload repeatedly results in the same final state on the server.
Understanding idempotency is key to selecting proper HTTP verbs for network automation workflows.
2
Analyze the characteristics of HTTP GET.
HTTP GET performs a Read operation. It is nullipotent/safe (does not mutate server state) and idempotent.
GET requests are strictly used to retrieve data from REST API endpoints.
3
Evaluate the incorrect choices regarding PATCH and POST.
HTTP PATCH provides partial updates (not Create), while HTTP POST maps to Create (not Read) and carries a request body.
Disambiguating HTTP verbs prevents misconfiguration in network automation scripts.

Anahtar Kavram

Characteristics and CRUD Mappings of REST HTTP Verbs (GET, POST, PUT, PATCH, DELETE)
Tahmini Süre:2m 0s
Soru 188Soru

Match each network operation or architectural mechanism to its corresponding structural component in traditional vs. controller-based networking.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Autonomous path computation executed locally on individual routing nodes using distributed routing protocols
RESTful API abstractions that enable network applications and orchestrators to communicate policy intent to a centralized platform
Centralized software engine maintaining a global network topology view and dictating forwarding logic across the fabric
Data-model driven communication protocols (such as NETCONF, RESTCONF, or OpenFlow) used to program physical switch tables

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Autonomous local path computation maps to the Traditional Network Control Plane. RESTful APIs for applications map to the Controller-Based Northbound Interface (NBI). The central software engine maintaining global topology maps to the Controller-Based Centralized Control Plane. Protocols like NETCONF/RESTCONF programming hardware map to the Controller-Based Southbound Interface (SBI).
Autonomous local path computation corresponds to the traditional distributed control plane. RESTful application interaction corresponds to the Northbound Interface. The central topology engine corresponds to the controller's centralized control plane. Protocol mechanisms like NETCONF/RESTCONF/OpenFlow correspond to the Southbound Interface.

Adım Adım Çözüm

1
Analyze control plane distribution differences
Identify that local autonomous path computation is characteristic of distributed traditional control planes, whereas a central software engine represents controller-based control planes.
Traditional networks rely on distributed node intelligence, while SDN architecture centralizes control logic.
2
Evaluate API directional roles in controller architecture
Distinguish between application-to-controller communication (Northbound) and controller-to-device communication (Southbound).
Northbound APIs interface with business applications; Southbound APIs interface with physical/virtual forwarding infrastructure.
3
Correlate protocols to their respective interfaces and planes
Confirm that NETCONF, RESTCONF, and OpenFlow function as Southbound protocols programming the data plane.
SBIs are responsible for translating controller decisions into hardware forwarding table entries.

Anahtar Kavram

Decoupling and centralization of control planes and API classification (NBI vs SBI) in controller-based networking
Soru 189Soru

During a network topology change in an enterprise environment, a network team evaluates how routing updates are processed. In a traditional distributed network, each router independently recalculates its routing table using its local control plane. Which statement correctly describes how control plane processing is handled in a controller-based network during the same topology change?

Cevabı ve açıklamayı göster

Cevap: The centralized controller calculates the updated topology paths and uses Southbound protocols to update the forwarding tables on the network devices.

Cevap

The centralized controller calculates the updated topology paths and uses Southbound protocols to update the forwarding tables on the network devices.
In controller-based networking, control plane intelligence is centralized. When a topology event occurs, the controller processes the change globally, calculates updated paths, and programs the new forwarding entries directly into device data planes using Southbound protocols.

Adım Adım Çözüm

1
Analyze the control plane architecture in traditional versus controller-based networks.
Traditional networks rely on a distributed control plane where each node independently computes routing paths. Controller-based networks centralize control plane intelligence onto an SDN controller.
Identifying the control plane location is the fundamental step in contrasting SDN with traditional networking.
2
Determine how updated forwarding decisions reach the physical devices in an SDN environment.
The SDN controller computes the global path changes and uses Southbound APIs (e.g., OpenFlow, NETCONF, RESTCONF) to program the data plane of managed devices.
Southbound APIs serve as the interface between the centralized controller and the underlying network hardware.

Anahtar Kavram

Centralized Control Plane and Southbound API Operations in Controller-Based Networking
Soru 190Soru

Which network configuration management tool uses a pull-based client architecture where managed devices pull configuration definitions organized into Ruby-based recipes and cookbooks from a master server?

Cevabı ve açıklamayı göster

Cevap: Chef

Cevap

Chef is the configuration management tool that uses a pull-based client architecture with configuration code written in Ruby-based recipes and cookbooks.
Chef is an agent-based configuration management system that operates primarily on a pull model (HTTPS/TCP 443). Configurations in Chef are authored using a Ruby-based domain-specific language (DSL) and organized into units called 'recipes', which are grouped inside 'cookbooks'.

Adım Adım Çözüm

1
Identify the file structure and language described in the question.
The scenario specifies Ruby-based definitions organized into 'recipes' and 'cookbooks'.
Chef is uniquely identified by its terminology of recipes and cookbooks written in Ruby DSL.
2
Identify the operational architecture.
The tool uses a pull-based agent model where client nodes contact the central server.
Both Chef and Puppet primarily use agent-based pull models, but Chef specifically utilizes Ruby-based recipes.

Anahtar Kavram

Chef Configuration Management Architecture and Terminology
Tahmini Süre:45s
Soru 191Soru

A network administrator retrieves interface state data from a Cisco IOS XE device using a RESTCONF GET request. Match each JSON key from the returned payload to its correct JSON data structure or data type based on standard JSON syntax rules.

{
"ietf-interfaces:interface": {
"name": "GigabitEthernet0/0/1",
"enabled": true,
"speed": 1000,
"ietf-ip:ipv4": {
"address": [
{
"ip": "10.0.12.1",
"netmask": "255.255.255.0"
}
]
}
}
}

Which JSON data type or structure corresponds to each specified key?

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

"enabled"
"speed"
"address"
"ietf-ip:ipv4"

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

"enabled" matches Boolean value; "speed" matches Number value; "address" matches Array / List; "ietf-ip:ipv4" matches Object / Dictionary.
Each key in a JSON payload corresponds to a specific primitive data type or data structure: key "enabled" value `true` is a Boolean, key "speed" value `1000` is a Number, key "address" value `[...]` is an Array, and key "ietf-ip:ipv4" value `{...}` is a nested Object.

Adım Adım Çözüm

1
Locate key "enabled" in the JSON structure
The value associated with "enabled" is `true`, which is unquoted and represents a Boolean value.
In JSON, unquoted `true` or `false` represents a boolean primitive.
2
Locate key "speed" in the JSON structure
The value associated with "speed" is `1000`, an unquoted sequence of digits representing a Number.
Numbers in JSON are written directly without double quotes.
3
Locate key "address" in the JSON structure
The value associated with "address" begins with `[` and ends with `]`, identifying an Array.
Square brackets `[]` delimit ordered collections/arrays in JSON syntax.
4
Locate key "ietf-ip:ipv4" in the JSON structure
The value associated with "ietf-ip:ipv4" begins with `{` and ends with `}`, identifying an Object.
Curly braces `{}` delimit key-value object dictionaries in JSON syntax.

Anahtar Kavram

JSON syntax data types (Strings, Numbers, Booleans, Objects, and Arrays)
Soru 192Soru

A Python network automation script stores the following JSON response from a Cisco Catalyst Center API in a dictionary variable named `data`:

{
"response": [
{
"siteId": "USA-NY-OFFICE",
"devices": [
{
"hostname": "Core-Rtr-01",
"managementIp": "192.168.1.1",
"upTimeSeconds": 86400,
"isReachabilityHealthy": true,
"modules": [
{"slot": 0, "status": "OK", "serialNumber": "FOC12345678"},
{"slot": 1, "status": "FAIL", "serialNumber": "FOC87654321"}
]
},
{
"hostname": "Dist-Sw-01",
"managementIp": "192.168.1.2",
"upTimeSeconds": 43200,
"isReachabilityHealthy": false,
"modules": [
{"slot": 0, "status": "OK", "serialNumber": "FOC11223344"}
]
}
]
}
]
}

Which Python expression correctly retrieves the serial number of the failed module on `Core-Rtr-01`, and what is the data type of the returned value?

Cevabı ve açıklamayı göster

Cevap: data["response"][0]["devices"][0]["modules"][1]["serialNumber"] returning a string

Cevap

The expression `data["response"][0]["devices"][0]["modules"][1]["serialNumber"]` correctly retrieves the string value `"FOC87654321"`.
The key `"response"` maps to a list whose first element is at index `0`. Within that dictionary, `"devices"` contains a list where `Core-Rtr-01` is at index `0`. Inside that object, `"modules"` is a list containing the failed module as its second element (index `1`). Accessing `"serialNumber"` extracts `"FOC87654321"`, which is enclosed in double quotes and parsed as a string.

Adım Adım Çözüm

1
Examine the top-level structure of the JSON payload.
The top-level structure is a dictionary where key `"response"` maps to a JSON array `[...]`. The array contains a single dictionary at index `0`.
Accessing elements inside the top-level array requires `data["response"][0]`.
2
Locate the target device within the `"devices"` array.
The `"devices"` key maps to a list. `Core-Rtr-01` is the first element, situated at index `0`.
Python list indices start at `0` (`["devices"][0]`).
3
Locate the failed module within the `"modules"` list.
The `"modules"` array for `Core-Rtr-01` contains two dictionary items. Slot 0 is at index `0` and slot 1 (status `"FAIL"`) is at index `1`.
The second element in a zero-indexed list is index `1` (`["modules"][1]`).
4
Extract the key and determine the Python data type.
Accessing key `"serialNumber"` yields `"FOC87654321"`. Surrounding double quotes signify a string data type (`str`).
Quoted literal values in JSON map directly to string types in Python.

Anahtar Kavram

Interpreting nested JSON arrays versus objects and mapping JSON values to Python data types.
Soru 193Soru

A network engineer needs to update the description field of an existing interface resource on a router using a RESTful API. The requirement specifies that only the description attribute should be modified, while leaving all other existing configuration parameters for that interface unchanged on the server. Which HTTP verb and payload strategy should be selected to perform this operation?

Cevabı ve açıklamayı göster

Cevap: HTTP PATCH with a payload containing only the updated description attribute

Cevap

Use HTTP PATCH with a payload containing only the modified description attribute.
HTTP PATCH is specifically designed for partial modifications to an existing resource. When an API receives an HTTP PATCH request, it applies changes only to the keys included in the request body, leaving all unmentioned resource attributes intact.

Adım Adım Çözüm

1
Identify the CRUD operation required for modifying an existing resource.
The operation requires an Update action on specific fields of an existing resource.
The requirement asks to update an existing configuration rather than creating a new resource or reading existing data.
2
Distinguish between complete replacement (PUT) and partial modification (PATCH).
HTTP PATCH is designed for partial updates, whereas HTTP PUT performs full resource replacement.
Sending a partial payload with HTTP PUT will overwrite omitted attributes with null or default values. HTTP PATCH modifies only the specified attributes.

Anahtar Kavram

HTTP Verbs and Resource Mutation (PATCH vs. PUT)
Soru 194Soru

A network operations team needs to automate configuration management across a network of Cisco IOS XE routers. Organization policy strictly forbids installing specialized agent software or extra daemons on network devices. Furthermore, the automation workflow requires a push model where playbooks written in YAML are executed from a central machine over standard SSH. Which configuration management tool meets all of these operational requirements?

Cevabı ve açıklamayı göster

Cevap: Ansible, which utilizes an agentless architecture to push configurations defined in YAML over standard SSH.

Cevap

Ansible, which utilizes an agentless architecture to push configurations defined in YAML over standard SSH.
Ansible is an agentless configuration management tool that uses SSH (or NETCONF) for network device communication, follows a push model from a central control node, and uses YAML data structure for Playbooks. This satisfies all specified security and operational constraints.

Adım Adım Çözüm

1
Identify the agent requirements from the scenario.
The scenario forbids installing third-party agent software on target network devices, requiring an agentless framework.
Ansible communicates directly via native transport protocols (like SSH) without requiring an agent process on the managed node, whereas Puppet and Chef traditionally rely on agent daemons.
2
Identify the operational execution model (push vs pull).
The scenario requires a push model executed centrally.
Ansible operates via a push model where the control node initiates configuration deployment to target devices, whereas Puppet and Chef usually pull configurations periodically from a master/server.
3
Identify the file format and transport protocol requirements.
The requirement mandates YAML playbooks transmitted over SSH.
Ansible uses YAML for Playbooks and SSH as its primary network management transport.

Anahtar Kavram

Ansible Agentless Push Architecture and Attributes
Soru 195Soru

An enterprise organization implements a Software-Defined Networking (SDN) architecture that decouples control plane operations to a centralized controller while maintaining distributed data plane operations on edge switches. If the Southbound API connection between an edge switch and the centralized controller fails unexpectedly, how does the switch handle existing, established data traffic?

Cevabı ve açıklamayı göster

Cevap: The switch continues forwarding established traffic streams locally using its pre-populated hardware forwarding tables.

Cevap

The switch continues forwarding established traffic streams locally using its pre-populated hardware forwarding tables.
In controller-based architectures with decoupled planes, the control plane programs the local data plane hardware (ASICs/TCAM) via Southbound APIs. Once forwarding tables (FIB) are established, the data plane handles packet forwarding autonomously at wire speed. Consequently, a loss of connection to the centralized controller prevents new control updates but allows existing, established data streams to continue forwarding locally without interruption.

Adım Adım Çözüm

1
Analyze the functional responsibilities of the control plane versus the data plane in SDN architectures.
The control plane makes policy decisions and builds routing/forwarding structures (RIB), whereas the data plane performs high-speed packet switching based on programmed forwarding tables (FIB/TCAM).
Decoupling control and data planes isolates packet-level forwarding from control traffic processing.
2
Evaluate the state of the data plane when the Southbound connection to the centralized control plane is interrupted.
The local ASIC/TCAM forwarding tables on the network switch retain previously programmed instructions.
Data plane hardware does not need active controller communication for every packet lookup; it forwards transit packets autonomously based on installed FIB entries.

Anahtar Kavram

Decoupled Control and Data Plane Resilience
Soru 196Soru

A network operations team switches from per-device manual command-line configuration to centralized template-based automation. Which primary operational advantage does this shift deliver?

Cevabı ve açıklamayı göster

Cevap: It reduces configuration drift by enforcing consistent and repeatable changes across all managed devices.

Cevap

It reduces configuration drift by enforcing consistent and repeatable changes across all managed devices.
Transitioning from manual CLI configurations to centralized template-based automation allows engineers to define standardized configuration states once and deploy them uniformly. This eliminates human error and minimizes configuration drift across the network footprint.

Adım Adım Çözüm

1
Analyze the operational impact of moving from manual CLI configurations to centralized template-based automation.
Manual CLI changes often lead to inconsistent settings across devices over time.
Human errors during individual device access introduce configuration drift.
2
Identify the primary core operational benefit provided by centralized templates.
Centralized templates guarantee that defined configurations are pushed identically across target nodes.
Standardizing change execution ensures compliance and reduces configuration drift.

Anahtar Kavram

Impact of Network Automation on Operational Consistency and Configuration Drift
Soru 197Soru

A network administrator is evaluating the core architectural differences between traditional networking and controller-based software-defined networking (SDN). In a controller-based architecture, how is the control plane managed compared to a traditional network?

Cevabı ve açıklamayı göster

Cevap: Control plane intelligence is centralized on a software controller that dynamically programs forwarding logic onto network devices.

Cevap

Control plane intelligence is centralized on a software controller that dynamically programs forwarding logic onto network devices.
In a controller-based network, control plane functions are decoupled from individual network hardware and centralized into a software-defined controller. The controller maintains a global view of the network topology and uses Southbound APIs (such as OpenFlow, NETCONF, or RESTCONF) to program the forwarding tables of data plane devices.

Adım Adım Çözüm

1
Identify the plane separation characteristics of traditional vs. controller-based networks.
Traditional networks distribute both control and data planes across every node, whereas controller-based networks centralize control plane functions.
Centralizing the control plane allows software controllers (such as Cisco DNA Center) to maintain global network state and push configuration/forwarding rules via Southbound APIs.

Anahtar Kavram

Centralized Control Plane in SDN vs. Distributed Control Plane in Traditional Networking
Tahmini Süre:45s
Soru 198Soru

A junior network technician is reviewing device configuration procedures for a new campus deployment. Which key architectural difference characterizes a controller-based network when compared to a traditional network architecture?

Cevabı ve açıklamayı göster

Cevap: Control plane intelligence is centralized on a dedicated network controller rather than running independently on each node.

Cevap

Control plane intelligence is centralized on a dedicated network controller rather than running independently on each node.
Controller-based networking separates the control plane from the data plane, moving control intelligence into a centralized controller that programmatically manages network devices.

Adım Adım Çözüm

1
Identify how control plane functions operate in traditional networks.
In traditional networking, every router and switch runs its own control plane protocol stack independently (distributed control plane).
Traditional devices build routing and forwarding tables locally.
2
Compare traditional behavior with controller-based network architecture.
In controller-based networking (SDN), control plane functions are abstracted and centralized into a central software controller.
Centralization allows policy-based automated management, while physical devices handle data plane forwarding.

Anahtar Kavram

Centralized Control Plane vs Distributed Control Plane
Soru 199Soru

In a software-defined fabric deployment, an engineer is preparing the physical network switches prior to building virtual tunnels. Which essential service must the underlay network provide to enable overlay operational functionality?

Cevabı ve açıklamayı göster

Cevap: Reliable Layer 3 IP reachability between all physical fabric devices

Cevap

Reliable Layer 3 IP reachability between all physical fabric devices
The physical underlay network acts as the foundational transport layer in software-defined architectures. Its mandatory function is to establish end-to-end Layer 3 IP reachability between physical fabric nodes (such as switches and VTEPs) using traditional routing protocols like OSPF, IS-IS, or BGP. Overlay tunnels rely entirely on this underlying IP reachability to transmit encapsulated packets.

Adım Adım Çözüm

1
Identify the role of the physical underlay in software-defined network architectures.
The underlay consists of physical switches, routers, links, and Interior Gateway Protocols (such as OSPF or IS-IS).
The main purpose of the underlay is providing standard Layer 3 IP packet transport across physical devices.
2
Determine the dependency of the overlay on the underlay.
Overlay virtual tunnels (e.g., VXLAN tunnels between VTEPs) transport virtualized traffic over the physical network.
Overlay tunnels cannot be established or forward traffic unless the underlay provides IP reachability between the physical IP addresses of the tunnel endpoints.

Anahtar Kavram

Underlay Layer 3 IP Reachability Requirement
Soru 200Soru

In a Cisco Software-Defined Access (SD-Access) architecture, which function is strictly the responsibility of the physical underlay network?

Cevabı ve açıklamayı göster

Cevap: Providing underlying IP connectivity to ensure reachability between fabric nodes.

Cevap

Providing underlying IP connectivity to ensure reachability between fabric nodes.
The underlay network provides basic, robust Layer 3 unicast IP reachability between all fabric nodes (such as fabric edge switches and control plane nodes) using traditional routing protocols.

Adım Adım Çözüm

1
Identify the primary definition of the underlay in software-defined network architectures.
The underlay is the physical infrastructure (switches, routers, links) and IGP routing protocols.
The underlay exists to establish basic Layer 3 IP reachability across all physical network devices.
2
Differentiate underlay transport from overlay fabric services.
Encapsulation (VXLAN), control plane mapping (LISP), and policy enforcement (Cisco TrustSec/SGTs) operate in the overlay built on top of the underlay.
Keeping transport functions in the underlay decouples physical topology from virtual fabric services.

Anahtar Kavram

SDN Underlay vs. Overlay Functionality
Tahmini Süre:45s
ÖncekiSayfa 10 / 10
Automation and Programmability Alıştırma Soruları — Cisco CCNA — Sayfa 10 | Examkin