Automation and Programmability

An enterprise network engineering team is evaluating configuration management mechanisms to automate switch provisioning across a campus infrastructure. The network security policy strictly mandates that the selected tool must not require client agent software installation on target devices, must execute configuration pushes on-demand directly from a centralized control node over standard secure transport protocols, and must utilize YAML formatting for configuration code files. Which tool and architectural combination satisfies all specified security and operational requirements?

An enterprise network administrator deploys a Cisco SD-Access fabric overlay using VXLAN for data plane encapsulation over an OSPF-based Layer 3 routed underlay network. During validation, control plane communication between the LISP Control Plane Node and Fabric Edge switches operates normally, and all underlay loopback interfaces show full ping reachability. However, host endpoints in different subnets attached to separate Fabric Edge switches fail to communicate, with packet captures revealing that encapsulated data packets are dropped by transit routers along the underlay path. Which underlay infrastructure condition is causing this traffic delivery failure?

An administrator needs to modify only the target syslog server address on a network device via a RESTCONF API. The existing target resource container contains configuration attributes for syslog logging levels, facility settings, and buffer sizes. To update the server address without deleting or overwriting the unreferenced logging attributes within that resource container, which HTTP verb and header combination must be transmitted?

A network automation engineer sends an HTTP GET request to a Cisco IOS XE RESTCONF endpoint to check IP SLA operation status. The API returns the following JSON payload:

{
"Cisco-IOS-XE-sla:sla": {
"ip-sla": [
{
"oper-id": 101,
"type": "icmp-echo",
"destination": "192.168.50.1",
"stats": {
"rtt-ms": 14,
"state": "active",
"history": [
{"sample-id": 1, "rtt": 12, "success": true},
{"sample-id": 2, "rtt": 16, "success": true}
]
}
},
{
"oper-id": 102,
"type": "udp-jitter",
"destination": "10.10.20.5",
"stats": {
"rtt-ms": 4,
"state": "inactive",
"history": [
{"sample-id": 1, "rtt": 4, "success": false}
]
}
}
]
}
}

Based on the JSON payload provided above, match each data extraction path on the left to its correct extracted value and data type on the right.

A network automation engineer is developing a Python script to interact with a Cisco REST-based API controller. Which two statements accurately describe the characteristics of HTTP headers, verbs, or data formats in REST APIs? (Select two.)

An automation script executes an HTTP GET request to a Cisco RESTCONF API endpoint. The router responds with the following JSON payload:

{
"ietf-interfaces:interface": {
"name": "GigabitEthernet1",
"description": "Uplink to Core",
"type": "iana-if-type:ethernetCsmacd",
"enabled": true,
"ietf-ip:ipv4": {
"address": [
{
"ip": "192.168.1.1",
"netmask": "255.255.255.0"
}
]
}
}
}

What is the value of the "description" key in this interface configuration?

An enterprise network implements a Cisco Software-Defined Access (SD-Access) solution where two endpoints residing on different IP subnets communicate across a campus fabric. Fabric Edge Switch 1 encapsulates packets from Endpoint A destined for Endpoint B on Fabric Edge Switch 2. Which two statements correctly describe the operational roles and behaviors of the underlay and overlay networks during this communication flow?

A network engineer is inspecting traffic behavior on a multilayer switch operating within a controller-managed fabric network. An ingress data packet matching an existing destination entry in the Forwarding Information Base (FIB) arrives at a switch port. At the same moment, an OSPF Hello packet arrives on the same physical port. Which statement correctly describes how the switch architecture handles these two incoming frames?

A network monitoring application sends an HTTP GET request to a Cisco DNA Center REST API endpoint to retrieve device health metrics. The request header includes `Accept: application/json`. Which outcome occurs as a result of including this request header?

A network technician uses a REST API call to retrieve VLAN configuration data from a Cisco switch. The device returns the following JSON payload:

{
"response": {
"vlan_list": [
{
"vlan_id": 10,
"name": "Management",
"active": true
},
{
"vlan_id": 20,
"name": "Engineering",
"active": false
}
],
"total_vlans": 2
}
}

Based on this JSON payload, which of the following statements are correct? (Select TWO.)

A network security policy requires that all configuration management operations across remote branch routers strictly prevent inbound session initiation from central management servers to remote devices. Outbound HTTPS traffic on TCP port 443 initiated by target devices toward the central server is permitted. Which configuration management tool natively meets these architectural constraints while utilizing Ruby-based files to define system state?

An enterprise network architect is creating documentation to clarify plane responsibilities and interfaces in traditional versus software-defined controller-based architectures. Match each operational task or network behavior on the left to the corresponding architectural component or interface model on the right.

A network automation engineer is building a Python script to interact with a Cisco REST-based API. Match each HTTP request verb on the left to its corresponding operational characteristic or CRUD function on the right.

A network automation workflow uses RESTCONF to manage interface configurations on Cisco IOS XE routers. An engineer sends an HTTP PUT request to the URI endpoint of an existing interface resource (`.../ietf-interfaces:interfaces/interface=GigabitEthernet1`). The JSON payload included in the request contains only the updated `description` attribute and omits previously configured child attributes such as `ip` and `enabled`. Which outcome will occur on the target device when this request is processed?

A network administrator receives the following JSON payload from a Cisco DNA Center REST API request:

{
"response": [
{
"hostname": "Switch-Core-01",
"managementIp": "10.1.10.1"
},
{
"hostname": "Switch-Access-01",
"managementIp": "10.1.20.15"
}
]
}

What is the value of `response[1]["managementIp"]` in this JSON structure?

A network administrator is evaluating the operational differences when transitioning an enterprise campus network from traditional distributed networking to a centralized controller-based architecture. Which operational feature uniquely distinguishes the controller-based architecture from the traditional network model during configuration and policy deployment?

In a modern enterprise network transitioning from traditional routing to a software-defined fabric architecture, different operational tasks are assigned to distinct functional planes. Match each specific network task or protocol operation to the corresponding architectural plane responsible for executing it.

A network automation script executes a REST API call to a Cisco SD-WAN vManage controller to retrieve operational statistics. The API returns the following JSON payload:

{
"system_status": {
"controller_group": "Group-Alpha",
"devices": [
{
"hostname": "vEdge-Branch1",
"site_id": 100,
"reachability": "reachable",
"tunnel_stats": [
{"color": "biz-internet", "latency_ms": 12},
{"color": "mpls", "latency_ms": 8}
]
},
{
"hostname": "vEdge-Branch2",
"site_id": 200,
"reachability": "unreachable",
"tunnel_stats": [
{"color": "biz-internet", "latency_ms": 45}
]
}
]
}
}

Assuming the response is stored in a Python dictionary named `payload`, which data path expression correctly extracts the integer value `8` representing the MPLS tunnel latency for `vEdge-Branch1`?

When contrasting traditional distributed networking with a centralized controller-based architecture, which of the following statements accurately highlight key operational and architectural differences? (Select two.)

During a stress test on a core network device within a controller-managed fabric, control processor CPU utilization reaches 100% due to an excessive rate of incoming ARP requests directed to the router's local interfaces. Despite this control processor saturation, pre-established transit data traffic continues to be forwarded between endpoints with zero packet loss and at full line rate. Which architectural characteristic explains why transit data forwarding continues at full line rate despite control processor exhaustion?