ENAUTO practice questions
Cisco · ENAUTO · 300 questions
Original practice questions for the Automating Cisco Enterprise Solutions exam, covering every domain of the official exam outline.
This course contains the use of artificial intelligence.
About the ENAUTO exam
- Questions
- not published
- Passing score
- not published
- Format
- 90-minute exam associated with the CCNP Enterprise and DevNet Professional certifications
Schedule this exam The certification this earns
Exam details published by the vendor, checked 3 November 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Quiz 11
Quiz 12
Quiz 13
Quiz 14
Quiz 15
Browse by Domain
Study specific topics at your own pace.
Network Programmability Foundation (10%) · 30 questions
- A script polls 40 IOS XE switches and repeats the same request-and-retry block, error list included, in six places. Access-layer switches wait 5 seconds between retries while WAN edges wait 20, and a second scheduled script must import the same logic as-is instead of wrapping it in an object. Which Python structure should hold this shared network automation logic?
- A network engineer automates a controller job that takes several minutes to finish. The endpoint answers in under two seconds with HTTP 202 and a task identifier, but the office firewall drops idle connections after 30 seconds. How should the script retrieve the finished result from this asynchronous job?
- A platform team reviews a Python FastAPI service that fronts their network inventory. Clients POST /login first, the server then keeps a session object holding that client's device list, GET /devices returns the cached list, and a delete is triggered with GET /devices?action=delete. Which redesign would make the service follow REST resource naming and statelessness rules?
- Two contractors edit IOS XE backup scripts for a city network and overwrite each other's fixes, with no history or safe sharing. They need a repeatable team workflow for parallel edits and review. Which core git workflow implements clone, add, commit and push?
- A platform team keeps interface descriptions and shutdown state for 180 IOS XE switches in Git and wants one tool to enforce that code. Leadership also wants a saved plan showing pending changes before anything reaches the devices, plus a state file recording the last applied configuration for drift reports between scheduled runs. Which automation approach matches this desired-state, state-tracked workflow for IOS XE?
- You and a teammate both changed the same lines of the pipeline config file, so your feature branch and main have diverged. A reviewer asks you to merge main into your branch while both edits stay in the final file so CI passes. Which git conflict resolution preserves both changes in history?
- Your teammate says a branch only adds a feature to report.py. You stage inventory.py, then edit report.py and config.py locally, and git diff --cached prints one hunk for inventory.py with three plus-marked lines and one minus-marked line. Which change set does that output describe for the commit you are about to create?
- A team is building a service that triggers work on a device instead of reading stored data: a single request names the action, carries its parameters, and returns the result. The lead asks which API style the design follows and which network automation example matches it. Which API style and matching example belong in the design note?
- A platform team with 60 IOS XE switches must choose between Ansible and Terraform and wants an honest summary of how each tool's core pieces work. They care about listing targets, describing the desired configuration, and seeing drift before applying anything. Which statement correctly contrasts the Ansible inventory with the Terraform state file and plan?
- Two automation scripts on one jump host need different versions of the same Python library, and the system tools' packages must stay untouched. Which statement correctly describes what creating a virtual environment isolates?
- Two engineers share a Python automation repo where both edited the SD-WAN inventory parser on separate branches and Git blocks the merge with conflict markers in the same function. The main branch must stay deployable and history must show the fix. Which branching and merging workflow resolves the merge conflict?
- The nightly job that exports 5,000 device records from a paginated REST API often stalls or ends incomplete: the service returns 500 records per page, throttles bursts with 429 plus Retry-After, and occasionally returns an internal server error. Which change to request handling is most likely to improve completeness and accuracy?
- An automation client calls a controller endpoint that handles heavy jobs and replies with HTTP 202 plus a task link in the Location header instead of returning the final data. The controller documents that the task URL returns the current status immediately. The client still needs the finished report for its weekly compliance workbook. Which asynchronous consumption pattern should the client use to retrieve the completed result?
- A network team stores desired IOS XE interface descriptions, VLANs and SNMP settings in git and wants a nightly run that reports which supported tasks would change, changes nothing when devices already comply, and writes no separate state file. Which automation approach satisfies all three requirements?
- After cloning the team repository, you edited snmpcollector.py and README.md, but only the script change is ready to share with the team right now. The shared remote branch is where everyone pulls from. Which git command sequence records exactly that one file as a new commit and publishes it to the shared remote?
- During a change window you review a small Python snippet that summarizes show ip interface brief data across three switches, each returning Gi1/0/1 to Gi1/0/4, so twelve records share four repeated names. Nine state values are up, two are down, one is administratively down. The script appends r["int"] to up when r["state"] == "up" and to down otherwise. What does each list hold when the loop finishes?
- A campus network team is replacing a legacy NMS integration with a REST service covering 3,000 access switches. Clients must fetch a device by its ID, change only the description field, and keep working after a load-balancer failover with no sticky session. Which REST design for resources, methods and state handling best fits these requirements?
- A NetDevOps team reviews a pull request that automates QoS on Catalyst switches. The git diff shows hunks with + and - lines across two files, one staged change, and one unstaged edit. The reviewer must confirm only the intended policy-map change will commit. Which reading git diff output behavior should the reviewer use to see what changed accurately?
- A platform team is documenting two endpoints on the same router: one address triggers a reboot action for a device, and a second address returns that device's configuration object so it can be read or replaced. The architects want new engineers to see how the two call styles are actually shaped. Which statement correctly contrasts the action-style call with the REST resource call?
- A three-person team runs 60 IOS XE switches across two sites. The host list lives in a CSV file, and today every change means editing a one-off Python script for each switch. The lead wants reusable playbooks driven by that inventory so every switch converges on the same declared configuration. Which inventory-and-playbook design fits their IOS XE automation?
- A monitoring platform calls an on-premises controller that follows link-based paging, where each JSON body carries a links.next URL until the final page. The service also answers HTTP 429 with a Retry-After header containing a delay in seconds whenever a client sends requests faster than its stated limit. You need a loop that collects every record without tripping the throttle. Which request-handling pattern satisfies both the paging and rate-limit rules?
- In a monitoring script you are reviewing, the Device class defines a class-level vendor = "Cisco" attribute, and every instance stores its own name set in init. The script runs d1 = Device("core1"), d2 = Device("edge2"), then executes d1.vendor = "Arista". Which values do d1.vendor, d2.vendor and Device.vendor each show afterwards?
- Two engineers pushed changes to main and to a feature branch, and both edited the same lines of inventory.yaml. After git merge feature, Git stops and marks the file as conflicted. The lead wants both edits kept, the conflict settled in the working tree, and history to show a true merge. Which git command sequence keeps both edits and completes the merge?
- A developer built a small lab inventory API. Reading is GET /api/devices/101, deleting a device is GET /api/devices/101?delete=true, and the service stores each client's last filter so the next call can return the next page. The reviewer wants one change that matches REST principles. Which single revision best brings the lab inventory API in line with REST method and statelessness rules?
- A teammate sends the link to your team's IOS XE golden-config repository, and you have never cloned it on this laptop. Your local copy will also hold two unrelated scratch files that must stay out of this commit, so you need to stage only your file, commit with a short message, and push for review. Which git workflow completes your first contribution correctly?
- A team is designing a Python client for routers that support both NETCONF and RESTCONF. For actions like committing a candidate configuration, the engineer wants the client to name a specific operation, send parameters to it, and receive a reply produced by that operation. Which API style should the design use to model these action calls?
- You maintain automation scripts on a shared Linux jump host used by three engineers, and every script must keep using the host's Python installation. One teammate pinned an older library version for an IOS XE backup job while your new Meraki script needs a newer release, and a fresh pin should take effect as soon as pip installs it. Which approach isolates each project's pinned dependencies while keeping the host interpreter?
- You review a teammate's automation changes before merging. Running git diff main -- playbook.yml in the repo prints one hunk: @@ -40,6 +40,8 @@ followed by three - lines, five + lines, and three unchanged context lines. What does that hunk header report about how the file changed?
- An automation engineer reviews a Python inventory script that loops over a list of hostnames, looks each one up in a dictionary of assigned roles, and prints a hostname only when the role equals 'spine'. For inventory {'leaf1': 'leaf', 'spine1': 'spine', 'spine2': 'spine'} and hosts ['leaf1', 'spine1', 'spine2'], which output does the script produce?
- An engineer's Python service triggers a bulk rollout through a network controller that can run for several minutes per device. The controller accepts each request with HTTP 202 and returns a task identifier, and the script must report the final outcome while keeping worker processes free and submitting the job only once. Which API consumption pattern should the script use to follow the rollout to completion?
Automate APIs and Protocols (10%) · 30 questions
- A network engineer is hand-building an XML edit-config payload for an interface YANG module and wants the NETCONF server to accept it on the first attempt. The model defines containers, a list with a key leaf and several leaves, all under a module namespace. Which mapping rule makes this XML a valid instance of that model?
- A team manages IOS XE devices over RESTCONF with JSON payloads. An engineer must change the description on interface GigabitEthernet1/0/1 while leaving every other configured leaf on that interface exactly as it is. Which RESTCONF method and URL should carry that single YANG data update?
- A teammate is choosing between NETCONF and RESTCONF for a nightly job that must save a file containing only the device's current configuration, then stage a change for operator review before it takes effect. Which NETCONF operation and datastore pairing fits both parts of that job?
- A managed-service team runs one Python inventory job across a fabric where the second vendor documents OpenConfig support for interfaces and BGP but implements only a subset of the IETF models. The job must also set a Cisco-only QoS behaviour that exists only in the platform's own model. Which YANG model family should the team choose for each part of the job?
- During a change window an engineer must send a RESTCONF request that adds a loopback interface to an IOS XE router. The payload must follow the device's YANG model, and YANG Suite is the approved tool. Which YANG Suite workflow helps build the correctly structured JSON instance?
- A developer models a switch interface with YANG where config holds a container interfaces, a list interface keyed by name, and leaf enabled. The REST payload must mirror that hierarchy exactly. Which JSON instance correctly maps the YANG leaf, container and list to JSON structure?
- During a maintenance window, your team must load a new ACL on 40 branch routers, let the change lead inspect exactly what will be written beforehand, and drop the entire change if it is rejected, so every router ends either fully updated or completely untouched. Which NETCONF staging workflow fits this requirement?
- An engineer must change only the description leaf of an existing Loopback0 interface on an IOS XE router through RESTCONF. The YANG module, list key and datastore path are known, and the entry already holds other configured leaves. Which request makes that single change correctly?
- A netops developer must push VLAN config via RESTCONF to IOS XE but keeps getting 400 errors from hand-built JSON. The team has the exact YANG models from the device and needs valid, namespaced payloads quickly. Which YANG Suite method builds a correct JSON instance?
- A network team automates 40 IOS XE routers from a CI runner whose security group may open only TCP 443 to the devices, and its Python libraries already parse JSON. The job must both read operational state and change configuration on every router. Which protocol and payload format should the team standardize on?
- An engineer prepares a NETCONF edit-config request for a Cisco IOS XE router using YANG Suite. In the tool they load the native model and build a message that gives GigabitEthernet0/1 the description uplink-to-core while leaving it administratively enabled. Which XML structure correctly expresses the interface list entry for the edit-config request?
- A developer hand-writes a NETCONF edit-config XML payload for a YANG module that defines interface configuration. The server rejects it, saying the target node does not exist, even though the tag names and hierarchy match the model. Which statement about the namespaces in that XML instance is accurate?
- You export a NETCONF edit-config payload from YANG Suite for a new loopback interface and its IPv4 address. The tool shows the module, the container tree, and the operation attribute before you copy the XML. Which structural feature makes the export a valid instance of the YANG model?
- A developer must change only the description of GigabitEthernet1/0/1 through RESTCONF on a switch with hundreds of interfaces, and every other leaf in that interface entry has to stay exactly as it is. The entry already exists in the running datastore. Which RESTCONF method and URL structure should the script use?
- A developer models a new campus VLAN with YANG using leaf vlan-id and container vlans from Cisco-IOS-XE-native. The generated NETCONF XML was rejected for wrong hierarchy and missing namespace, though leaf names look right. The script must produce valid device config. Which mapping from YANG model to XML instance with namespaces should the script generate to configure the VLAN correctly?
- A YANG module named example-bgp-config defines container bgp with leaf router-id of type string, plus list neighbor keyed by leaf address of type string and carrying leaf remote-as of type uint32. The engineer is decoding a RESTCONF response as JSON. Which structure for the bgp member maps the container, list and leaf nodes correctly under RFC 7951?
- A network engineer runs pyang -f tree on a vendor YANG module that models interfaces and posts the output to the team channel. The tree shows rw ifName as a leafref, ro ifIndex as a uint32, and a rw address list keyed by ip-address. The team wants to know which parts a NETCONF client may write. Which statement about the rw and ro flags in this pyang tree is correct?
- Your change script must apply a new QoS policy to twelve IOS XE switches in one maintenance window: each switch must accept the policy at commit time, or revert by itself if nobody confirms within five minutes. The team already has YANG models and SSH access. Which configuration protocol gives the script per-switch apply with automatic rollback?
- A YANG model defines a container system holding the leaf hostname and a list ntp keyed by server-address that also holds the leaf iburst. A teammate hand-writes the JSON instance for one NTP server. Which JSON structure matches the model faithfully?
- An automation team has loaded the Cisco-IOS-XE-native interface module into YANG Suite and needs a NETCONF edit-config RPC that sets one interface description. Which YANG Suite action generates the XML?
- A team's automation runs inside an existing web service that speaks HTTP, authenticates with OAuth bearer tokens, and parses responses with a standard JSON library. It must still read and write YANG configuration on branch routers. Which model-driven protocol fits this tooling best?
- A network automation team is building one YANG-based configuration pipeline for BGP neighbor baselines on Cisco IOS XE and Arista EOS. Both vendors advertise OpenConfig support, and the team has verified that its target releases support the same OpenConfig BGP leaves. A later change also sets a DMVPN Phase 3 knob that exists only on Cisco routers. Which model families should the team use for the baseline and for that knob?
- An engineer reads a pyang tree before writing a NETCONF edit-config that adds a sensor: container monitor (rw) holds list sensor keyed by [name], with leaves name (rw, string), interval? (rw, uint32) and last-sample (ro, int32). Which node in this pyang tree must be supplied when the sensor entry is created, and why?
- A team standardises on the OpenConfig interfaces model and builds its RESTCONF payload in YANG Suite's Data worksheet. You need the description change for interface GigabitEthernet0/0/1 to land in the running config. Which JSON structure should YANG Suite produce for that RESTCONF request?
- An engineer loads the Cisco-IOS-XE-native module in YANG Suite and exports JSON for a RESTCONF edit that sets a loopback interface description. The model stores interfaces as a list keyed by name, and the payload must round-trip through a RESTCONF server without ambiguity about which entry is being edited. Which JSON instance structure matches the YANG model for this interface edit?
- A YANG model defines interface as a list keyed by name, and every entry holds a config container with the leaves mtu and enabled. An engineer validates the JSON instance a RESTCONF server returns for one configured entry. Which JSON structure matches that model?
- A network engineer hand-writes a NETCONF edit-config payload from a YANG module that defines a container 'bgp' holding a leaf 'router-id'. The router parses the XML cleanly but rejects the request, reporting that bgp is absent from the schema although the module clearly defines it. Which namespace rule makes the instance match the YANG model?
- You are reviewing the pyang tree for YANG module example-ntp, used by a RESTCONF-managed NTP service: container ntp (rw) holds list server keyed by [address], with leaves address (rw, inet:ip-address), prefer? (rw, boolean) and reach (ro, yang:counter32). A teammate plans a PUT for one server entry. How does the tree diagram constrain what the client may PUT?
- A logistics company runs an all-Cisco IOS XE estate. Its automation must configure standard interface settings plus one Cisco-specific platform feature, and every change has to arrive through a single NETCONF session driven by one Python code path. Which YANG model family should the team standardize on?
- Our team standard mandates a NETCONF-only client for an IOS XE router, built in Python with an XML RPC envelope. The script must first read the entire configuration datastore while leaving out interface counters and link state, then place a change so it only becomes active after a commit step. Which NETCONF operation pair fits this workflow?
Network Device Programmability (20%) · 60 questions
- An engineer runs an Ansible playbook against two IOS XE routers: task one adds three NTP servers with cisco.ios.iosconfig, task two sets an interface description with parents, and both tasks notify a handler that saves the config. After a clean first run, what change status and handler activity should an immediate second run report?
- A campus engineer automates nightly show version collection and VLAN updates on 40 IOS XE switches using Python. The script must log in reliably, run both read and write tasks, and close cleanly. Which Netmiko approach establishes the session and sends show and config commands?
- A colleague is automating a router with ncclient and wants one NETCONF script that reads the hostname and a loopback interface, then rewrites that loopback IPv4 address. The maintenance window expects the change to take effect immediately, so the write must apply to the live configuration. Which ncclient call sequence covers the connection, read and write steps?
- A Python script using the requests library applies interface settings to an IOS XE router over RESTCONF. One run answers 409 Conflict with a JSON body, while a typo in the payload answers 400. How should the script interpret a 409 response and the error body that arrives with it?
- A branch reports brief throughput drops every afternoon, but five-minute SNMP polls stay under every threshold and the interface counters look clean. The engineer can add streaming telemetry from the IOS XE router to a collector. Which streaming telemetry approach gives the best evidence for identifying the cause?
- An operations team wants interface oper-status transitions pushed to a collector the moment they happen, while interface counters arrive on a fixed schedule to the same collector. The engineer must describe the subscription precisely enough that the device knows which nodes to stream, when to stream them, and where to send the data. Which subscription parameters should the engineer set for this delivery?
- An ISP script gathers show interface counters from 60 mixed IOS XE routers, but slow links truncate output and a reload prompt stalls the run. The job needs complete output and safe prompt handling. Which Netmiko technique handles prompts, delays and parsing output?
- A network automation team must apply a block of CLI configuration lines to fifty IOS XE switches from an Ansible controller. SSH is the only enabled management protocol on the estate, and a second run must leave an already configured switch untouched. Which Ansible connection type and module combination should the playbook use?
- Your monitoring team wants interface and CPU sensor data pushed from 40 IOS XE switches into a time-series database. The subscription must be stored in the device configuration so the stream starts automatically after an upgrade reload, even while the collector is offline. Which telemetry subscription type keeps the sensor stream running after that reload?
- An engineer uses ncclient's manager.connect() against an IOS XE router to set the description 'uplink-to-campus' on GigabitEthernet1/0/1. The change must take effect on the live configuration in a single call, and ncclient must generate the RPC wrapper and message identifier so replies can be matched. Which XML structure should be passed to the editconfig() call?
- Forty factory-fresh Catalyst 9200 switches must be brought up at a remote branch office. The provider's DHCP server only leases addresses, outbound internet access is available, no technician will be on site, and the switches arrive with only factory-default settings for access. Which Day 0 provisioning method matches these branch conditions?
- A team subscribes to interface state for 2,000 access ports over NETCONF YANG-Push. Most ports never change for days, the management network is congested, and operators must see a state flip within seconds. Which telemetry publication model fits this subscription?
- You are enabling model-driven telemetry on an IOS XE access switch. The collector at 10.10.5.20 must receive interface state samples every 30 seconds over gNMI with mutual TLS, as fixed-interval samples rather than change-triggered ones. Which subscription parameters should the telemetry subscription use?
- A team supporting 40 branch routers keeps getting user reports of brief latency spikes, but by the time an engineer logs into each device and runs the usual commands the problem has passed. They also want the polling load on the links to stay light. Which telemetry approach should they adopt to catch these issues while they are happening?
- A Python script using ncclient fetches the interface subtree from a fleet of routers and prints each interface name. One device rejects the subtree and raises an error, while another returns a valid reply containing no interface nodes. Which handling reads the reply and reports that device failure correctly?
- A junior engineer is scripting a refresh of 40 Catalyst 9300 switches and needs one Python program that prints show version output and then applies an interface description change on each device. Which Netmiko approach handles both the display and the configuration safely?
- An engineer hands you a playbook with gatherfacts: no that runs cisco.ios.iosconfig with parents: ['interface Loopback0'] and lines: ['description managed by Ansible'] against a lab router. QA plans to run it twice from the ioslab inventory group. Which statement describes the second run?
- An enterprise automation engineer must back up running configs nightly from 60 IOS XE switches and push a standard NTP change using Python over NETCONF on port 830 with trusted host keys. The script must separate read and write operations cleanly. Which ncclient usage meets the NETCONF requirements?
- A retailer is installing 150 factory-default access switches in stores without on-site staff. Each store has only a DHCP server and an HTTP server on the local subnet, and the branch segments cannot reach any controller during installation. Which Day 0 provisioning method meets these branch constraints?
- A network team must stream interface counters from 150 IOS XE switches to a gRPC collector every 30 seconds. Each sample must come from the switches' YANG models, be pushed by the switch itself, and resume on its own after a reload. Which telemetry subscription design meets all three requirements?
- A developer automates nightly checks on 60 IOS XE switches with Netmiko. Some devices take close to a minute to answer, and the change report needs hostname, model and software release as separate fields for every switch it checks. Which Netmiko call pattern meets those timing and parsing needs?
- A Python script using the requests library must set the hostname on an IOS XE router with RESTCONF enabled. The YANG node lives at Cisco-IOS-XE-native:native/hostname, the write has to create the value when it is missing and replace it when it is present, and the team standard requires RFC 8040 yang-data media types on both the request and the response. Which RESTCONF request writes the hostname correctly?
- A campus engineer must add a new loopback description on IOS XE via NETCONF edit-config without replacing sibling config. The device enforces strict schema validation and rejects payloads with wrong namespaces. Which XML payload structure performs the targeted edit-config on IOS XE?
- A network team streams model-driven telemetry from IOS XE switches into one collector. Dashboards need evenly spaced samples of interface counters, engineers need the moment an interface or neighbor changes state, and both feeds must arrive as YANG Push updates rather than polled data. Which subscription plan should the team configure for the two feeds?
- A junior engineer automates an IOS XE router with ncclient. The router advertises the candidate datastore. The script must open a single NETCONF session on the standard NETCONF port, read the running configuration for one subtree, and then apply a new loopback description before disconnecting. Which ncclient call sequence should the script use?
- A network engineer's Netmiko script must capture 'show ip interface brief' from an IOS XE switch and then set descriptions on two interfaces, leaving the change in running config only because the save window is later tonight. Which Netmiko call pattern in one session meets both requirements?
- A pipeline uses ncclient to lock the candidate datastore and stage an interface change on 60 IOS XE routers. Two routers return an <rpc-error> with error-tag lock-denied because another job holds the lock, one router's SSH session drops before the reply arrives, and the rest return <ok/> for the edit-config request. For each device, the pipeline must report the change as staged, delayed or unreachable without stopping the run. Which reply-reading and error-handling pattern should it use?
- A data-centre team sees brief, intermittent drops on a leaf uplink; each episode lasts several seconds but clears before anyone can run a show command. They need the fault caught within seconds, low overhead on the switch, and an automatic page to the on-call engineer. Which telemetry approach should they deploy to detect and troubleshoot this issue?
- A Python script uses the requests library to push interface settings over RESTCONF to several IOS XE devices, and some replies arrive as 204 No Content while others return 400 with a YANG error body. The audit log must judge every edit correctly. Which status-code and error-body interpretation rule should the script follow?
- Interface description changes must be reported as they happen, while CPU and memory state has to arrive every 30 seconds at the gNMI collector. Which subscription parameters should the automation configure for model-driven telemetry?
- A Python script using ncclient pushes a new hostname and an interface description to an IOS XE router. The session authenticates and opens normally, but every editconfig call fails with a parser error about unexpected elements, so nothing changes on the router. Which payload structure lets the ncclient edit-config call succeed on this router?
- A campus team must enable a loopback description on IOS XE via RESTCONF using Python requests. Security mandates HTTPS with JSON payload, correct resource path, and proper CRUD verb without breaking existing interfaces. The first try returned 405 and 415 errors. Which RESTCONF URL, headers and methods using requests pattern should the script implement to update the interface?
- A rollout team is installing 80 new Catalyst 9200 switches in a warehouse where nobody will have console access for the first boot. The switches arrive with the correct image but no configuration, the corporate DHCP server cannot be changed this quarter and does not advertise provisioning options, DNS can be configured for PnP discovery, and Catalyst Center manages the site. Which Day 0 provisioning method fits this warehouse rollout?
- A Netmiko job clears counters on a fleet of IOS XE switches. When it sends clear counters, the device answers Clear counters on all interfaces? [confirm], so sendcommand() waits for a prompt that never arrives and times out without answering. Which Netmiko flow answers the prompt and still returns output the script can parse?
- The NOC wants interface state changes to reach the analytics platform within a second of happening, while CPU utilisation should arrive every five minutes whether or not it moved. The sensors use streaming telemetry from IOS XE. Which comparison of periodic cadence and on-change publication is accurate?
- Your Ansible playbook must push interface descriptions and a syslog server to 40 IOS XE switches over SSH, apply only what is missing, and save the running configuration when it finishes. Re-running the playbook should change nothing on devices that already match. Which connection type and module pairing should the playbook use?
- Intermittent voice jitter keeps reaching the trouble queue: drops on the voice interface last only seconds, and five-minute SNMP polling misses every spike. The voice gateway supports model-driven streaming telemetry. Which telemetry subscription gives the fastest reliable detection of the drops?
- Reviewing a playbook for twelve IOS XE access switches, an engineer must apply interface GigabitEthernet1/0/12, switchport mode access and switchport access vlan 30, changing only that interface block. Which Ansible task structure configures the switches correctly?
- A team is automating interface audits on 30 IOS XE routers with ncclient. The script runs <get-config> with a subtree filter and must record, per device, whether the router returned the interface data or reported an RPC failure such as an unsupported filter. Which reply-reading and error-handling pattern should the script use?
- An engineer is rolling out one change to 40 IOS XE access switches: add an NTP server plus a login banner, then confirm the running config contains both lines. The script must send the change as configuration and read the result back at the normal prompt. Which Netmiko call sequence performs the change and the verification?
- An engineer is scripting against an IOS XE router over NETCONF using ncclient. The script must read the current interface configuration, change an interface description, and leave that change applied after the session ends and after a reload. The router has the optional candidate datastore enabled, and in this lab a successful commit is also saved to startup. Which ncclient calls accomplish the read and the durable write?
- A Python script using the requests library sends a RESTCONF PATCH to update an interface description on an IOS XE router and receives HTTP 400 with a JSON body. The endpoint path and YANG leaf names look right at first glance. Which RFC 8040 error fields identify the standardized failure category and the affected node?
- Your team runs a nightly inventory script against 60 IOS XE switches with Netmiko. On the largest chassis, show interfaces status takes about 40 seconds to finish, and a matching TextFSM template is already installed. The report needs one dictionary per port with port, status and vlan fields, while the script keeps driving devices through its existing Netmiko connection. Which combination of Netmiko command call and output parsing meets those needs?
- The automation team must push a VLAN and an interface description to 40 IOS XE switches that are reachable over SSH, with NETCONF and RESTCONF listeners turned off. The devices need enable-mode credentials, and the change must be previewed with a diff before anything is applied. Which Ansible connection and module pairing should the playbook use to push this VLAN change?
- On a Cisco IOS XE device, a RESTCONF hostname leaf may already exist, so the write should replace its value rather than append to it. The device exchanges YANG-encoded JSON on both the request and response. Which HTTP method, target path and header media types should the write use?
- Your NETCONF script connects to an IOS XE router with ncclient over port 830, then calls m.editconfig(target="running", config=payload) to rename the device to edge1, and the attempt fails with an error before the hostname changes. Which XML payload should the script pass to editconfig for the hostname change?
- A customer is deploying 60 access switches across branches. The design has only a DHCP scope and a local config server, and each switch must pull its first configuration by itself at boot, with all traffic staying inside the customer network. Which Day 0 bootstrap method fits every stated requirement?
- A team is standardizing model-driven telemetry across 300 IOS XE routers. The subscription must ship inside the config template pushed to every device, must keep streaming after a reload, and must push a sample every 60 seconds on a fixed schedule driven by the router. Which telemetry subscription design meets all three requirements?
- A team scripts NETCONF reads across 200 IOS XE routers, must leave every device's state untouched, and needs only the running configuration for the interfaces subtree kept small enough to log. The library already opens SSH to port 830 and returns an ncclient Manager. Which ncclient call retrieves exactly that subtree from the running datastore?
- An engineer is automating an NTP change across 40 IOS XE switches with Netmiko. The connection opens and the prompt is detected, but sendcommand('ntp server 10.10.10.1') returns an IOS error and the running config never gains the NTP line. Which Netmiko method should the script use to apply this change?
- A Python script uses ncclient to fetch the running configuration and print every interface description on an IOS XE router. The router may answer with a normal data payload or an rpc-error inside the reply, and the automation job must log a clear NETCONF error instead of crashing. Which reply handling approach should the script use?
- A monitoring team wants interface up and down transitions streamed to their collector as they happen, rather than a full interface table every minute. They will configure one model-driven telemetry subscription on an IOS XE router, and the collector has already opened the gRPC receiver it will use. Which subscription parameter set matches the need for change-only interface state updates?
- A teammate hands you an Ansible playbook for branch IOS XE routers with three tasks: one applies an NTP server list that is already on the router using iosconfig in its default comparison mode, one applies syslog servers the router already has but sets match to none, and one runs ioscommand to show the clock. On a second run against that unchanged router, which task does Ansible report as changed?
- A Python script using the requests library sends a RESTCONF PATCH to set an interface description and receives HTTP 400 with a YANG error body whose error-path names a leaf absent from the device's YANG model. The engineer must decide what to fix before sending anything again. Which interpretation of that RESTCONF response should the script act on?
- A Netmiko script runs a maintenance command on a switch that stops mid-run to ask Enter your choice [y/n]: before printing any data, so sendcommand() keeps waiting for a prompt that never comes back. Which Netmiko call pattern answers that mid-command prompt and still captures the results?
- An automation engineer is writing a Python script with ncclient that sets a MOTD banner on an IOS XE router over NETCONF. The session opens and getconfig returns data, but the editconfig call is rejected and the engineer is unsure which element must hold the configuration it sends. Which XML structure must the payload use to deliver the banner change to the target datastore?
- You are setting an interface description on an IOS XE router using Python requests and RESTCONF over HTTPS. The YANG path is ietf-interfaces:interfaces/interface=Loopback10, and the JSON payload must reach the exact resource, create it when it is missing, and use the RESTCONF JSON media type in both headers. Which requests call delivers the payload to the RESTCONF resource as required?
- A NOC enables model-driven telemetry on IOS XE and needs link-down events delivered within a few seconds while no recurring telemetry updates are sent during hours of stable operation on the subscribed interfaces. Which telemetry publication model fits both requirements, and what triggers each message?
- A platform team must configure forty IOS XE switches from a Linux automation server running Ansible. Each play has to reuse one SSH CLI session per device, gather platform facts with iosfacts, and apply interface descriptions with iosconfig using the current cisco.ios collection modules. Which Ansible connection setup meets all three requirements?
- A platform team must stream interface counters from 200 routers into a single dashboard, and the sensor list changes every week without editing any device configurations or causing commits. Which telemetry subscription approach fits all of those constraints?
Cisco DNA Center (20%) · 60 questions
- A regional hospital runs 250 CLI-managed switches with per-device configs, slow changes, and audit drift. Leadership wants centralized intent, automated provisioning, and continuous compliance checks. Which operational difference defines controller-based networking for intent enforcement?
- A network team is scripting the network hierarchy in Catalyst Center before a branch rollout. The site creation call returns a task reference instead of the site itself, and the script needs each new building's ID before it can add floors beneath it. Which sequence of Site API calls creates each site and then retrieves its ID?
- A network engineer has saved a CLI template in Catalyst Center for six branch access switches and wants to push it from a Python script that already finds the devices by management address. The change window closes soon, so the script must send the template with its parameters and then confirm each switch finished successfully. Which Template API call sequence proves the deployment completed?
- A NetDevOps pair is splitting the work for a fresh Catalyst Center deployment. One script must create the campus site, claim twelve new access switches, and push the gold configuration template, while the second must pull hourly health scores and open assurance issues for those switches to feed a Grafana board. Which API pairing correctly matches each script to its Catalyst Center API role?
- A university NOC built a Flask endpoint that receives Catalyst Center outbound webhooks and routes each event by severity, sending critical events to a shared chat channel and the rest to a log. The reply must return within one second because routing can take six, malformed bodies must be answered with 400, and only valid events may enter the routing queue. Which request-handling sequence satisfies the timing, validation, and severity-routing requirements?
- A junior engineer's script posts a site update to the Catalyst Center Intent API and marks the job successful the moment the call comes back with a task identifier. Days later the site shows the change never applied. Which task polling step and response fields should the script use to confirm the Intent API deployment outcome?
- A fabric built with Catalyst Center raises an assurance event when a fabric edge node drops off the network. The team's chat workflow must fire within seconds, hand a script structured device and timestamp fields to parse, and the chat server only accepts inbound HTTPS posts. Which Catalyst Center notification capability fits this event workflow?
- A service account in Catalyst Center reads network health fine through the Intent API, but every POST to a template creation endpoint returns HTTP 403, while the built-in admin account succeeds with the same request. Credentials stay in the vault and the account must remain least-privilege. Which Catalyst Center permission change resolves the 403 failure?
- After submitting a configuration template deployment through the Catalyst Center Intent API, your script receives HTTP 202 with a taskId. The deployment has reported no progress for several minutes. Which check during task polling returns the failure reason the operator needs?
- A retail chain is automating Catalyst Center so each point-of-sale port joins the corporate virtual network when it comes up. The site is already in the fabric, the switch already holds the edge role, the corporate virtual network already exists, and the script knows the switch management address, the interface, the data pool name and the port authentication profile. Which SDA API should the script call to onboard those switch ports?
- A Python script pulls interface and device inventory from a Catalyst Center cluster at https://dnac.corp.local using a service account whose password sits in an environment variable. One run makes a single token exchange and then several inventory, topology, and device-detail calls. Which token authentication flow should the script implement for these Catalyst Center API requests?
- A university automates Catalyst Center to push campus QoS policy and to feed a NOC dashboard with client health trends. The code must separate intent changes from operational insight calls. Which distinction contrasts Intent API versus Network Assurance API roles?
- Your assurance team wants Catalyst Center to POST an alert to a ServiceNow relay when a wired client issue opens in the new building, with only those client events reaching the relay. You already built the webhook destination. Which configuration completes the outbound webhook event subscription?
- An audit requires the output of 'show version' and 'show ip interface brief' from 40 Catalyst Center managed switches. The engineer has API credentials and a Python script, but the Command Runner endpoint replies with an identifier instead of the command output. Which workflow retrieves the actual results from the Command Runner task identifier?
- A team is adding a new lab subnet to Catalyst Center and wants one script that starts discovery and then reads the inventory back. It must wait for the job to finish and report each device's hostname, platformId and softwareVersion. Which API sequence starts discovery, waits for the task, and returns those three fields?
- An automation job reads device compliance from Catalyst Center with a dedicated service account and now receives an HTTP 403 response from Catalyst Center on one Intent API call, while the same request succeeds when the engineer opens the equivalent page as a super admin in the GUI. The token is refreshed on every run. Which authentication or permission issue should the engineer correct first?
- A university is rolling out SD-Access fabric across six buildings and wants NOC staff to get fabric health alerts while netops automates virtual networks and host pools consistently. Central policy and wired host onboarding must stay unified. Which statement describes Catalyst Center events with SD-Access automation?
- A hospital runs 240 access switches that are configured one CLI session at a time. The team is moving a guest VLAN policy to Catalyst Center so the policy is authored once, deployed to every switch without per-device edits, and checked for drift after rollout. Which operational difference between traditional and controller-based networking does this shift show?
- A hospital NOC uses Catalyst Center and ServiceNow where device-down and license events must create tickets within a minute through a secure HTTPS endpoint with token auth. The solution must survive reboots and show delivery status. Which outbound webhook design creates the event subscription and destination?
- A NOC dashboard refreshes device health scores and open issues from Catalyst Center every five minutes, and a separate job must deploy a versioned configuration template to a branch switch so the change is tracked as intent. Which API approach fits these two jobs?
- An engineer automates a campus rollout in Catalyst Center where the area Global/EMEA Campus already exists and a new building called Warehouse B must be added beneath it. Address and coordinates are ready, the script fetches a token from the authentication endpoint first, and confirmation must come from the site query before any devices arrive. Which API sequence creates and verifies the new site in Catalyst Center?
- An engineer must deploy a Catalyst Center template version to one access switch. Its variables take the syslog server address and the login banner from a YAML file, and the script has to report whether the switch finished the change. Which API flow confirms that template deployment?
- A campus network of 40 access switches across six buildings needs a new VLAN and QoS policy, and port roles differ by building so identical CLI lines will not fit. The team wants the policy defined centrally, configured with the required site-specific differences, and applied automatically, with compliance status refreshed automatically rather than requiring a manually launched check. Which approach best meets these requirements?
- A NOC team enables outbound webhooks in Catalyst Center so a small Python receiver can open tickets for high-severity assurance events. The receiver must pull event name and severity from the delivered JSON, handle each event only once even when redelivered, and answer the sender quickly to keep retries from piling up. Which receiver logic satisfies all three requirements?
- A Python script runs discovery and then provisions a site through the Catalyst Center REST API. The script must authenticate once, reuse the session across dozens of calls, and re-authenticate only when the controller reports the token has expired. Which authentication flow should the script implement?
- A retail network team runs a Catalyst Center lab and wants its Assurance eventing to POST a JSON payload into a chatbot when a client-health issue is raised, while a second engineer scripts the fabric site build with SD-Access automation APIs. Which configuration pair delivers both the event-driven webhook notification and the scripted fabric build?
- Your Python script POSTs a device template deployment to the Catalyst Center Intent API and receives a 202 response carrying a taskId. Polling the task URL shows the job finished in error while the progress text stays generic. Which part of the task response should the script read to explain the failure?
- A hospital runs Catalyst Center with an outbound event webhook to a Python Flask receiver for switch-down alerts. The receiver logs 401 errors, drops duplicate events during flaps, and must acknowledge within seconds while queuing heavy work. The team sees delayed retries and missing severity fields. Which webhook payload handling behavior should the receiver script implement to process Catalyst Center events reliably?
- A network team is standing up a new building's fabric through Catalyst Center's SDA APIs from a Python pipeline. Wired endpoints there must land in the corporate overlay, and each call returns a task that has to finish before the next call runs. Which SDA provisioning sequence should the pipeline execute?
- A network operations team is building two Python jobs for Catalyst Center: one onboards branch switches with sites, credentials and profiles, and another feeds a dashboard with open issues and client health for those branches. Which split between the Intent API and the Network Assurance API should each job adopt?
- Your team is onboarding 30 branch switches into Catalyst Center with Python, and the only credential stored for them is an SSH CLI login. After the job runs you must confirm every device appears with its management IP before templates are pushed. Which pair of Catalyst Center API calls starts the discovery and then returns the synced device inventory?
- A monitoring engineer wants an OSPF configuration snippet from twelve switches and posts the CLI commands to the Catalyst Center Command Runner endpoint, which responds with a task identifier instead of the command output. The team's policy requires the script to release the connection right away and come back for the results later. How should the script use that task identifier to retrieve the Command Runner output?
- A network operations team runs Catalyst Center across 40 sites and wants its ticketing relay to receive push notifications rather than scheduled report exports. Only high-severity device-down events from the Reno building should reach the relay, an internal HTTPS endpoint, and alarms must arrive as pushes rather than being pulled from Assurance on a schedule. How should the outbound webhook destination and event subscription be configured?
- A monitoring script authenticates against Catalyst Center with basic auth, stores the returned token, and reads inventory successfully. The same token then returns HTTP 403 on every POST to the intent endpoint, while identical GET requests to the same path keep returning 200. What does the 403 on write requests reveal about the account's permission setup?
- A data-center team automates Catalyst Center inventory reports with Python requests. The script must authenticate over HTTPS, reuse the session token for inventory calls, and handle expiry without hardcoding passwords in code. Nightly runs fail with 401 after one hour. Which token authentication to Catalyst Center behavior should the script implement to sustain API access?
- Catalyst Center keeps device configuration and operational alerting in separate subsystems. An engineer must both build an SD-Access fabric and be told when a provisioning job fails. Which statement correctly pairs what the SD-Access automation workflow does with what the event notification system does?
- The operations team needs Catalyst Center to notify its incident system the moment a device is added or falls out of compliance. The endpoint accepts JSON posts and is reachable only from the Catalyst Center server, and polling scripts are banned during this change window. Which event outbound webhook setup in Catalyst Center delivers these device events?
- An automation engineer must collect 'show version' and 'show interfaces status' from 60 Catalyst switches through Catalyst Center inside a Python job. The job should start the collection and carry on rather than sit idle while every switch answers. Which Command Runner flow returns the command output?
- A campus network needs a new segmentation policy on 400 access switches this month, and 60 replacement switches installed later must pick up the same policy automatically. The audit team wants evidence that each switch still matches the intended policy. Which controller-based design satisfies both the onboarding and audit requirements?
- A network engineer is onboarding 12 new branch sites into Catalyst Center with Python so the fabric design can be built later. Each site needs an area, a building with coordinates and a floor with its dimensions, and the script must confirm each site exists before the next stage runs. Using the Create Site calls that take parentName, which Site API sequence should the script follow?
- After building a configuration template in Catalyst Center, a network engineer must deploy it to one managed device with VLAN parameters supplied at run time, then confirm from the API that Catalyst Center actually finished applying it. Which API call sequence performs the template deployment and the status check?
- A network team's receiver opens a ServiceNow ticket for every Catalyst Center event webhook it accepts, and the service desk now sees duplicate tickets for the same assurance alert. The endpoint is slow, so the handler must acknowledge quickly before its ticket work finishes. Which receiver design handles these event webhook payloads correctly?
- A network team is extending an existing automation pipeline. The next release must push a configuration template to 40 access switches, place them into a new building site, then read device health scores, open issues, and client-health trends into a reporting dashboard. Which Catalyst Center API assignment covers both the provisioning work and the assurance work?
- A network engineer is onboarding a new branch in Denver as part of a migration script. The area US-Central already exists in Catalyst Center, and the script must add a building named Denver-HQ beneath it. The pipeline needs proof the site is ready before it assigns devices to the building. Which Site API request pattern should the engineer use to create and verify the Denver-HQ site?
- A Python service lists managed devices in Catalyst Center every ten minutes using one shared controller account. The engineer wants the API session to reuse a single issued token instead of attaching credentials to every call, and the service must survive the token aging out. How should the service obtain and attach the Catalyst Center token?
- A retailer with a 12-switch SDA fabric wants its internal portal to create a user segment for a warehouse extension. The portal should express the outcome and let the controller coordinate the fabric changes instead of generating device configurations by hand. Which Catalyst Center API approach should the portal use to create that segment?
- Your listener receives Catalyst Center event notifications as JSON POSTs at /hooks/catalyst. Yesterday one notification was delivered twice and fired two identical remediation jobs, yet a later fresh occurrence of the same event type must still fire a job of its own; every log line must carry the event time and the reply must return within a couple of seconds. How should the receiver parse, de-duplicate and acknowledge each notification?
- An automation pipeline pushes a configuration template to 40 devices through the Catalyst Center Intent API. Each POST returns 202 Accepted with a task identifier, yet a deployment can still fail minutes later when a device goes unreachable. The script must detect that failure and show the platform's own reason for it. Which follow-up sequence confirms real success and surfaces the error detail?
- Your deployment pipeline provisions SDA fabric resources through the Catalyst Center intent API: it creates a site, a virtual network and an SGT, then assigns a port. Each call returns in about a second while the fabric state settles a minute later, so the pipeline needs a trustworthy completion signal without sending the request a second time. Which API pattern should the script use to confirm each operation has completed?
- A long-running script must pull the device inventory from Catalyst Center every few minutes for a full shift, reusing one token instead of re-authenticating on each call, and it must keep running unattended if the controller expires that token mid-shift. Which token authentication flow should the script implement?
- A campus refresh brings twelve new access switches, and the automation lead has asked the team to avoid manual CLI work. Your script must start a discovery job, wait for it to finish, and then read back the inventory so the imported data can be validated. Which sequence of Catalyst Center API calls should the script make on its first run?
- An engineer submits three show commands for forty Catalyst Center-managed switches in one Command Runner request and immediately receives only a task identifier. The switches respond at different speeds, and the output feeds a compliance report later. Which Command Runner workflow collects the command output for the report?
- A university is rolling out SD-Access fabric across four buildings and repeats the same design each year as labs move. The team wants to model the site hierarchy, assign switches and routers to fabric roles, and create a guest virtual network without typing CLIs per device. Which Catalyst Center capability should drive this rollout?
- A read-only automation account runs a script that reads the device inventory successfully, then fails when it posts a new site to the Intent API. The token endpoint returned HTTP 200 and the same header carries the token on both calls, yet the create request comes back with HTTP 403. Which Catalyst Center permission condition explains that 403 response?
- A network engineer must run 'show cdp neighbors' on forty access switches through Catalyst Center and save the output for a report. The POST to the Command Runner endpoint returns quickly with a task ID while devices are still replying. Which workflow collects the finished command output for that task?
- The SOC wants Catalyst Center to post network events to a new internal relay at https://events.corp.example:8443/ingest. The relay still needs to be registered, company policy requires TLS, and only device reachability and configuration-change alerts should leave the platform. Which destination and subscription setup delivers exactly that?
- A campus team currently logs into 40 access switches during each change window and hand-types identical VLAN and port settings, then verifies every device one at a time. Leadership wants the same change applied consistently, with policy defined once and compliance confirmed centrally. Which operational difference of a controller-based network best delivers that outcome?
- An operations engineer has built a template in Catalyst Center that renders interface descriptions and a banner for access switches. Twelve newly discovered switches are waiting, and the template must be applied through the API with each switch's own hostname and location values, followed by an API check that the job completed. Which API workflow delivers both the deployment and the status confirmation?
- An engineer must bring 40 unclaimed access switches in one 10.10.40.0/24 subnet into Catalyst Center using CLI credentials, then confirm every switch appears in the inventory. The script today only queries devices. Which sequence of Catalyst Center API calls should the script make to discover the subnet and verify the devices?
- An automation engineer is scripting Catalyst Center for a new campus: the script must create an area, create a building under it, and fetch that building's details by name afterward to confirm the hierarchy. The create call returns a task rather than the finished site, and the engineer wants one predictable flow for creation and read-back. Which sequence should the script follow to create and then verify the site?
Cisco SD-WAN (20%) · 60 questions
- A junior engineer is writing a small Python tool that logs in to SD-WAN Manager with POST /jsecuritycheck and then runs six read-only queries in a loop. The first query succeeds while the login response is still in hand, but every later query fails once those headers are discarded. Which authentication approach keeps the Manager API session valid for the whole loop?
- A network team is writing a Python service that polls SD-WAN Manager for tunnel statistics every five minutes and also posts a small configuration change on each run. The tool must authenticate once and carry that identity through both the reads and the writes. Which authentication flow matches how the Manager API issues and reuses sessions?
- Your Python automation queries the SD-WAN Manager API about 40 times in each run: device inventory, configuration templates and health metrics. The security team requires that every run sign in fresh, that the admin password appear in no more than one request, and that the credential survive idle gaps of several minutes between batches. Which Manager API authentication approach satisfies all three requirements?
- A Python job pulls configuration and health data from an SD-WAN Manager appliance using the automation service account instead of an engineer's interactive session. The job makes hundreds of calls, must open a single session and reuse it, and must recover on its own if the manager later rejects that session. Which authentication flow should the script use for the whole run?
- A Python script must read the device inventory from SD-WAN Manager and then push a device template change to the branch routers. The controller uses a local user login rather than SSO, and every call goes through one requests.Session object. Which authentication sequence gives the script a working session for both calls?
- A bank automation service polls SD-WAN Manager nightly for alarms and pushes template tweaks, requiring a persistent API session with CSRF protection across calls. Which authentication flow establishes the Manager API session with cookie and token?
- A regional hospital is staging an SD-WAN upgrade and its asset team needs one automated list of every WAN edge known to SD-WAN Manager, including edges that are currently offline, showing each device's hostname, site ID, serial number and most recently reported software release for reconciliation. Which API family should the automation call to build that device record?
- A service-desk engineer is building one Python tool for a 40-site SD-WAN fabric managed by SD-WAN Manager. It must disable a departed operator's login, list every edge with serial and software version, show interface alarms from the last hour, and push an updated QoS feature template. Which API family handles each of these four jobs?
- A network operations team wants a small Python service that polls SD-WAN Manager every few minutes and raises a ticket when it sees an edge router's control connections drop, while leaving all device configuration untouched. Which SD-WAN Manager API family should the service query for that live control status?
- A single Python service drives SD-WAN Manager: it lists each edge device's model and serial, reports BFD tunnel history for the last 24 hours, edits and attaches a device template, and reads user roles for a quarterly audit. Which SD-WAN Manager API-family assignment matches those four operations?
- A NOC analyst builds a weekly report of average CPU, memory and transport statistics for every edge router in the fabric. The readings are already stored on the controller, and the script should ask for weekly averages instead of paging out raw rows. Which SD-WAN Manager API family should the report query?
- A service provider NOC builds a daily Python report for 60 SD-WAN edge routers. It needs per-interface throughput counters, CPU and memory trends, and every unresolved alarm from the past 24 hours at each site, and a separate script already lists the routers with their software releases. Which SD-WAN Manager API family should the script call to collect the counters, trends, and open alarms?
- A network automation engineer must script a nightly inventory report for a 400-branch SD-WAN overlay. The report has to pull live data from SD-WAN Manager's device inventory API and print each device's host-name, system-ip, site-id and device-type for the morning handoff. Which approach produces the required per-device fields from the live controller?
- A regional MSP manages 180 SD-WAN edges in SD-WAN Manager and needs a nightly Python report showing hostname, device model, reachability and software version for NOC triage. The script must authenticate once and reuse the session for inventory polling. Which Device Inventory API approach retrieves the device list and displays the key fields?
- During migration planning you must list every edge router from SD-WAN Manager with its hostname, system IP, site ID and software release so the team can build a cutover spreadsheet. Which API endpoint returns that device inventory?
- The upgrade team needs a one-off inventory report from SD-WAN Manager: host name, system IP, and software version for every managed device, gathered in a single run with no device identifiers known in advance. Which inventory API call should the script use to build that report?
- A morning health check must list every device managed by SD-WAN Manager with its serial number, site ID, system IP and reachability status. The engineer has Python and a valid auth token, and wants one printed line per device. Which request and parsing step produce that inventory?
- For a quarterly audit, an engineer is writing a Python script that must list every router managed by SD-WAN Manager, showing each device's name, system IP, platform model and software version in one pass. The script authenticates once and then reads the returned records. Which SD-WAN Manager request should the script make to gather those inventory fields?
- A CI job must authenticate to SD-WAN Manager exactly once per run, create a limited admin account with a JSON body, read controller cluster status, and fetch the device certificate that the manager issued for a new edge router. Which Administration API request sequence should the script send?
- A lead engineer scripts pre-upgrade checks against SD-WAN Manager for a 400-site fabric. The work must list the local admin users, show certificate details for connected devices, and read cluster node information, all read-only, after signing in through the standard provider endpoint. Which request set targets the administration APIs correctly?
- An operations engineer must script three SD-WAN Manager tasks: create a read-only auditor account, read controller certificate status, and check cluster health. The script logs in once and reuses the session for every call. Which administration API approach completes all three tasks?
- A bank audit of a 3-node SD-WAN Manager cluster requires evidence of active admin users, certificate expiry dates and cluster health without logging into each node GUI. The script must use supported admin APIs and read-only access. Which Administration API use collects users, certificates and cluster info?
- SD-WAN Manager's administration API uses an authenticated session. A short-schedule script must make several administration calls without logging in for every one. Which authentication pattern should the script use across those calls?
- A managed service provider's onboarding script logs in to Cisco Catalyst SD-WAN Manager with JWT, adds a new operator account, then pulls certificate view data for an audit. Every administration API sits under the /dataservice root, POST calls must carry the XSRF token, and new accounts are added at the user resource. Which request set completes the onboarding workflow on SD-WAN Manager?
- You maintain a Python automation library for SD-WAN Manager and need to duplicate an approved feature template for a lab overlay instead of building one from scratch. The clone must keep every parameter and default while gaining its own identity in the Configuration API. Which feature template cloning sequence should your script use?
- A regional retailer with 40 SD-WAN branches needs a Python script to standardize NTP servers across all VPN feature templates. The script must list existing feature templates, clone the gold NTP template, update servers to 10.1.1.10, and leave device templates untouched until change review. Which Template and feature template API operation should the script perform to implement the standardized NTP change?
- A team must standardise OSPF hello and dead timers on twelve IOS XE edges managed by SD-WAN Manager. The engineer builds one feature template in JSON and wants site-specific addresses kept as variables in the shared template. Which sequence of template configuration API operations should the Python script run to roll this out safely?
- A service provider is onboarding 40 new vEdge routers for a retail customer, and the team will drive SD-WAN Manager from Python so a shared BGP policy stays centrally editable and later edits reach the devices. Which sequence of Configuration API operations puts these devices under feature template control?
- A service provider must push standardized BGP, NTP and logging settings to 40 SD-WAN edge routers while each site supplies its own router ID and site name, and the shared standard has to stay as one reusable definition. The team drives SD-WAN Manager from Python. Which template API approach should the script use?
- A team scripts SD-WAN Manager to standardize NTP settings: create a feature template, refine it after review, then apply it to 60 routers while tracking rollout status per device. Which sequence of configuration API operations does the script need?
- A logistics firm with 60 SD-WAN sites must attach a revised device template to five pilot routers via Python during a maintenance window. Requirements demand staged attach, feature input per device, and polling until push succeeds before closing the ticket. Which attaching a device template and monitoring the push task sequence should the script implement for the pilot rollout?
- During tonight's window you must push a device template built from feature templates to 20 branch routers from Python and prove each push finished before the window closes. Your script already holds the template ID, the device UUIDs and the filled variable values, and SD-WAN Manager runs the push as a background job. Which API sequence starts the attach and then tracks it to completion?
- You automate a rollout through SD-WAN Manager: a Python script posts twelve edge routers and their template variables to the attach endpoint of a device template. The API replies immediately with HTTP 200 and a task identifier while the push is still running. Which follow-up step tells the script when every router has finished receiving the configuration?
- Your Python script attaches a device template to a branch router in SD-WAN Manager, filling in the template's device variables first. The team needs confirmation that the push actually finished on the device before the next site is processed. Which sequence of API steps confirms that the template push completed on that device?
- An engineer attaches one device template to forty branch routers through the SD-WAN Manager Configuration API and receives an identifier for the push job rather than any configuration result. The audit log must reflect what each router actually accepted, beyond the request being accepted. How should the script use that identifier to report the outcome of the device template push?
- A network automation engineer must apply a device template named BRANCH-EDGE to 40 newly onboarded routers in SD-WAN Manager from a Python script. The script has to work asynchronously because the manager queues the rollout, and it must report exactly which devices failed without anyone logging into a router. How should the script attach the template and track the rollout?
- Your operations team runs a morning health script for the SD-WAN fabric. It must chart bytes in and out on one branch router's WAN interface for a fixed two-hour window that ended an hour ago, so the script has to name the range itself rather than accept a preset look-back. Which request pattern puts the fixed two-hour range into the statistics query call?
- An engineer must re-run last Tuesday's 30-minute traffic analysis for one branch router at five-minute granularity using the same time window each time. The SD-WAN Manager statistics resource accepts POST requests whose JSON body carries the time range. Which Monitoring API request design satisfies this statistics query?
- A site reliability engineer is automating a weekly capacity review for a retail SD-WAN overlay. The job must land in one statistics request per run, cover one fixed past window whose bounds are already in epoch milliseconds, and return rows only for the three branch devices under review. Which query structure should the script send to Manager?
- An engineer is investigating a WAN link that degraded last Tuesday between 14:00 and 16:00. The SD-WAN Manager monitoring API must return the recorded interface statistics for one branch router across that whole window in a single request that carries the time range in a JSON body. Which monitoring API request retrieves those historical statistics?
- A NOC engineer needs interface utilization samples for two SD-WAN sites across a fixed six-hour maintenance window from last Tuesday, pulled in a single authenticated call to SD-WAN Manager. The request must pin the exact start and end of that window. Which statistics query body should the script send?
- A network operations engineer must pull CPU and memory statistics for 25 edge routers from SD-WAN Manager for one specific Monday window in a capacity report. The dashboard already shows this data, but the API call has to cover exactly that range. Which request should the script send to the statistics query API to reproduce the Monday window?
- During a branch outage, an engineer must show the current tunnel state for one edge router on a wall display that refreshes every five seconds. Next week a separate report must summarize bandwidth for that same router across seven days. Which monitoring request should drive the live tunnel view?
- An operations team builds a NOC page for the SD-WAN fabric. One tile must show each router's interface error counters as they stand right now and refresh every minute, while a second tile plots a 30-day trend from the readings the platform already archives. Which pairing of SD-WAN Manager endpoints fits those two tiles?
- During a WAN outage, a NOC engineer must read current CPU and interface state for the affected edges right now, while a manager wants a chart of interface errors across the past seven days for a weekly report. Both come from SD-WAN Manager. Which monitoring request design serves the live query and the seven-day trend query?
- A NOC dashboard built on SD-WAN Manager must show the current CPU and memory for one edge router, refreshed live on the wall screen, and a seven-day tunnel throughput trend for a weekly report. Which pair of API calls should the script build to serve both needs?
- An engineer is building a branch dashboard in Python against SD-WAN Manager. One panel must show the router's current interface error counters and refresh often, while another must report average CPU across the whole site for the past seven days in hourly slices. Which pair of monitoring endpoint styles should the script use for these two panels?
- A NOC team is building a dashboard on the SD-WAN Manager monitoring APIs. One tile must show whether each WAN tunnel is up right now and refresh every five seconds, while a second tile plots average latency across the last 30 days for a chosen site. Which split between real-time and historical endpoints should the dashboard use?
- A branch reports brief outages every fifteen minutes. On SD-WAN Manager the engineer sees overlay tunnels carrying packet loss and BFD sessions resetting, but the fault's origin is still unclear. Which API query gives the clearest first evidence about the health of the router's control plane?
- The NOC sees a branch site lose reachability to the data center every few minutes, and one engineer suspects the tunnel rather than an application. Your runbook requires checking control connections, BFD sessions and tunnel state through the SD-WAN Manager APIs before any policy change. Which order of API checks gives you a layer-by-layer readout of where the failure starts?
- A branch site's overlay traffic stops while every remote site keeps forwarding. SD-WAN Manager lists the router as connected, and an API query shows its control connections established with the controllers, so the management and control planes are healthy. The team must work out whether the data path is up between this edge and its peers. Which SD-WAN Manager API data source should they read to diagnose the forwarding outage?
- A newly onboarded branch router shows as reachable in SD-WAN Manager, but its configuration never arrives and the site stays unavailable while every other site works normally. An engineer wants to confirm the router control-plane health through the monitoring APIs before touching the data plane. Which API view should they query first?
- A pair of SD-WAN edges at a branch cannot carry traffic between their local subnets. Each edge shows its local link up, holds a valid device certificate and has a synced clock, and you have read-only access to the SD-WAN Manager APIs. Which API query should you run first to identify which overlay layer has failed?
- A branch site drops traffic for a few minutes at a time while its underlay circuit stays up, and the edge router CLI shows nothing conclusive. The engineer must pinpoint whether the fault sits in control connections, BFD sessions, or overlay tunnels using only the SD-WAN Manager APIs. Which set of SD-WAN Manager API checks should the script run?
- A network engineer's Python script posts a device template to SD-WAN Manager and the call fails with HTTP 400. The script prints only 'request failed', while the JSON response body names the exact field the manager rejected. The engineer needs to find that rejected value, and a retry of this request would return the identical failure. Which part of the error response should the script parse to identify the rejected field?
- While troubleshooting, a Python script fetches a single device from an SD-WAN Manager REST endpoint by UUID and receives HTTP 404 with a JSON body reporting that the device cannot be found. The same request with a valid UUID returns HTTP 200, and the session was created earlier in the same job. Which interpretation of the 404 response is correct?
- A junior engineer's Python script logs into SD-WAN Manager successfully, lists devices, then updates a device template. The device list call returns HTTP 401 with an empty body, while the template update returns HTTP 400 with a JSON message naming a field that is missing from the payload. Which interpretation of these two error responses should guide the next fix?
- A Python automation job posts an update to SD-WAN Manager and fails, but the script prints only 'HTTP 400' while the same request works from Postman. The engineer needs to know exactly which part of the request was rejected. Which part of the error response should the script log first to identify the failing input?
- A provisioning script that posts new device records to SD-WAN Manager now fails, and the log shows only 'HTTP 400 Bad Request'. The same script also returns 401 on long overnight runs. How should the script read each API error response to diagnose both failures?
- A nightly script backs up SD-WAN configuration through the SD-WAN Manager API. Every run returns HTTP 401 with a JSON message reporting an invalid or expired session, even though the password is correct. What does the 401 error response tell you to fix first?
Cisco Meraki (20%) · 60 questions
- A retail chain's Meraki alert service misbehaves in production: informational notices reach the pager, and a sender retry opens a second ticket for one incident. The team wants tickets only for the alert types enabled in Dashboard, each naming the affected device's serial. Which payload fields should the parser read to fix the service?
- A Python receiver in a warehouse collects Meraki alerts into an incident log. The HTTP server in Dashboard was set up with a shared secret, and every POST body carries that secret with alertType, networkId and sentAt. Which validation should the webhook handler run before it saves the alert?
- A retail chain scripts Meraki port changes for 120 stores with Python, needing secure calls, correct endpoint routing, and handling of busy-hour throttling. Which Dashboard API practice covers authentication, base URL and rate limits?
- You are syncing a Meraki organization from Python: the update to an existing wireless network must be idempotent so a second run cannot apply it twice, and the new Shenzhen network must be registered through the organization's network collection. Which HTTP method mapping should the script use?
- A provisioning engineer is writing a reusable Python function that adds branch networks to a Meraki organization for a growing chain of clinics. Each branch will run wireless access points and a security appliance, so the function has to ask Dashboard for those product lines as it creates the network. Which required parameters must every create-network request body contain?
- A hotel group is adding member Wi-Fi at a new site through the Meraki Dashboard API in Python. The build must place the SSID's clients on VLAN 20, block them from the card-payment subnet, and preserve the existing allow rule that opens everything else. Which sequence of Meraki API operations satisfies all three requirements?
- A managed service provider runs a small Python service that receives Meraki alert webhooks for the customer networks it monitors. Every delivery must be answered within a second, only alerts naming a network on the watch list may be recorded, and a malformed body must be logged instead of crashing the process. How should the receiver validate each delivery to meet all three requirements?
- A campus MX needs a new wireless SSID mapped to VLAN 40 plus an L3 firewall rule that blocks guest traffic to internal ranges, all driven from CI through the Meraki Dashboard API. The network ID and endpoint are verified, VLAN support is disabled, and the first call to create VLAN 40 returns HTTP 404. Which Meraki API step clears that VLAN creation failure?
- An engineer's script reads every network in an organization from the Meraki Dashboard API. It authenticates with a bearer token and calls the versioned base URL, but repeated runs start returning HTTP 429. Which request behavior keeps this integration within the Dashboard API rate limits?
- A mall operator wants Meraki-powered foot-traffic analytics, needing opt-in Wi-Fi probe data delivered continuously to its analytics engine without polling the cloud. Which Location Scanning API design matches purpose and delivery?
- A Python service receives Meraki alert webhooks over HTTPS. The JSON body carries the alert type, the device serial and the alert-specific details, and every outgoing team message must name both the alert type and identify the device using only the data in the payload. Which JSON parsing approach should the script use to route each Meraki webhook?
- A CI pipeline updates the syslog server settings on one existing Meraki network every night. Reruns are expected, downstream reports reference that network's permanent identifier, and the job must leave every other network in the organization untouched. Which Meraki Dashboard API request pattern should the pipeline use?
- A retail chain uses Meraki MV smart cameras to measure queue length and needs anonymized counts every minute without storing video in its analytics app. The app must scale to 40 stores and respect privacy rules for no facial data. Which MV Sense API capability delivers the required camera analytics?
- A Python script pulls every network and access point status from the Meraki Dashboard for a 60-site rollout. The first burst of calls returned HTTP 429, so the team needs a pattern that uses the documented base address, authenticates correctly, and keeps the run going. Which request pattern handles the base address, authentication and throttling together?
- A retail chain runs Meraki MR access points across 120 stores and has hired an analytics vendor that needs the raw wireless observations detected in each store, delivered continuously rather than pulled from periodic reports. The vendor only accepts data posted to an HTTPS endpoint it provides. Which Meraki capability should carry those observations to the vendor?
- Your Flask service receives Meraki alert webhooks on a public URL and must check that each alert includes the secret configured for your dashboard before it opens a ticket. Which validation should your handler perform first?
- Your Meraki network already exists in Dashboard and you have its network ID. An API change must rename it and set its timezone for that one network only, without adding a second network to the organization. Which HTTP method and endpoint perform this update on the existing network?
- A retail chain posts Meraki alert webhooks for every store network to a single Python endpoint through one configured HTTP server. Each JSON body carries sharedSecret, networkName, alertType and alertId. Only alerts from the Downtown store should page the on-call engineer, the shared secret must be checked before acting, and the endpoint replies 200 before the slow paging call runs. Which handler flow processes each incoming webhook payload correctly?
- A retailer wants foot-traffic and dwell data for its stores from the existing MR access points, covering Wi-Fi clients and Bluetooth beacon sightings. Its analytics service is an HTTPS receiver that Meraki's cloud must post to. Which Location Scanning API setup delivers the data correctly?
- A nightly Python job collects wireless client counts for every Meraki network in a large retail organization. It runs behind a corporate egress proxy that forwards only standard Authorization headers, the API answers some bursts with HTTP 429, and the report must still contain every network. Which request pattern satisfies the proxy, throttling, and completeness requirements?
- A coffee-chain operations team wants doorway area counts recorded every few seconds into its own dashboard. The stores have Meraki MV cameras but no BLE beacons, and the team will not host computer-vision models or download video. Which camera-analytics capability should they use for these doorway counts?
- A coffee shop chain offers free Wi-Fi on Meraki MR with a branded loyalty portal that must capture email before granting four-hour access and track repeat visits. The portal is hosted externally and must enforce auth per client. Which External Captive Portal API flow grants the required access?
- A Python service behind HTTPS receives Meraki alert webhooks for a warehouse network. During rollout a malformed test POST crashed the handler, and a slow path held the reply open past the sender's timeout. Which request-handling sequence for the alert webhook satisfies payload validation and timely acknowledgement?
- A script receives Meraki webhook alerts for fifteen branch networks. When an offline-device alert arrives it must page the on-call engineer with the network and device names, while repeated copies of the same delivery are ignored. Which parsing and action plan handles this alert payload best?
- A coffee chain hosts its own signup page on a company web server and points the guest SSID's splash setting to that external URL. Customers reach the form, but nobody gets online. In the Meraki external captive portal flow, which step must the hosted page perform after the customer submits the form to authorize the client?
- A retail chain wants foot-traffic analytics from its MR access points, and the analytics platform runs as an HTTPS service the team operates. The Location Scanning API must deliver observed wireless client data to that service without an analyst signing into the dashboard. Which delivery mechanism should the engineer configure for location scanning data?
- A flagship store wants hourly people counts for four in-store zones plus average occupancy per zone from its existing Meraki MV cameras, with every count produced by the cameras themselves. Which Meraki API capability delivers these zone analytics?
- An on-call engineer's small Flask service receives Meraki alert webhooks from a 300-device warehouse network. It must open a ticket only for warning and critical events, tolerate alerts that omit the device serial, and reject requests with an invalid shared secret. Which parsing and validation sequence should the handler apply to each webhook JSON body?
- A university uses Meraki webhooks to auto-open dorm Wi-Fi outage tickets. Security requires the Python receiver to prove alerts came from Meraki Dashboard, reject forged posts, and still parse device MAC and alert type. A student replayed an old alert and created a false ticket. Which webhook alert API and shared secret validation behavior should the receiver implement to authenticate Meraki posts?
- A NOC script polls Meraki Dashboard every five minutes for organization-wide appliance status and wireless client counts. It must authenticate correctly against the current API version endpoint and behave politely when requests are throttled. Which request pattern should the script follow?
- A Flask service receives Meraki webhook alerts whenever an access point goes offline. The team configured a shared secret for the webhook, so each POST carries it as a sharedSecret field in the JSON body. Anyone who finds the public URL can still post fake alerts. Which check best rejects requests that do not know the configured shared secret?
- The company hosts its own voucher splash page for guest Wi-Fi and points the SSID at it as an external captive portal. The Dashboard API key your portal uses stays on that server and must never reach the guest's device, and the client must stay blocked until the voucher checks out. Which hop sequence validates the voucher and releases the guest?
- A flagship store wants footfall numbers for one lobby camera, sampled every minute. The four counting areas are already drawn in Meraki Dashboard and your config holds their area IDs. The integration standard is to pull on demand from current, supported endpoints only. Which Meraki API request returns the per-area people counts for each sample window?
- A managed-service team writes a Python script that lists every MX and MS device across twelve customer organizations in Meraki Dashboard. The script must authenticate with an API key, call the documented endpoint, and stay under the per-organization request ceiling during a full inventory sweep. How should the script address, authenticate and throttle its Dashboard API calls?
- A managed provider onboards a retail chain with one Meraki organization, three regions, and mixed MX and MR devices per store. The automation must create isolated networks per store, assign correct device types, and preserve org-wide policies. Which organization to network hierarchy and creating a network approach should the Python script implement for clean onboarding?
- For a network configured to use the legacy Meraki Scanning API, a retail chain wants raw WiFi and Bluetooth scan observations from its Meraki access points flowing into an in-house analytics service. The developer opens the API reference looking for a REST route that returns yesterday's observations for a network, expecting a paginated list of scan records. How does the Scanning API deliver those observations to the customer's service?
- A national retail chain wants its own analytics database to hold the device observation records that Meraki MR access points collect in each store. The data team prefers a push model over dashboard polling and needs batches delivered to infrastructure they host, with no manual export step. Which delivery design matches how the Location Scanning API hands over observation data?
- Your team is writing a Python script that provisions a new branch office in the Meraki Dashboard org. The script already holds an API key and the organization ID, and the site needs an MX appliance plus MS switches. Which JSON body should the create-network request send for the Dashboard to accept it?
- A grocery chain has MV cameras above 40 store entrances and wants a dashboard showing how many people enter each minute. The cameras have MV Sense licenses, and the chain has an MQTT broker. Which Meraki analytics capability should the script use to obtain the people counts?
- A retail chain is opening twelve stores and its provisioning script must build the dashboard structure for each one. Every store needs a single network created under the existing organization with switch, wireless and appliance product types enabled so devices can be assigned later, in one call using the organization id. Which Meraki Dashboard API request creates a store network?
- A webhook receiver runs a failover script whenever Meraki Dashboard posts a port-down alert to a public endpoint, so anyone who guesses the URL can send a body. Which check best verifies that an incoming alert was signed with your Meraki webhook server's shared secret?
- A retail chain hosts its own terms-and-conditions splash page for an open guest SSID using Meraki's external captive portal. The access point has already redirected the visitor's browser to your portal with Meraki's grant parameters. Which step completes the external captive portal flow and puts the visitor online?
- A managed service provider has already created one Meraki organization for a new retail customer. The customer now needs three separate networks, one per store, each holding MX security appliances and MR access points, with its own wireless settings and VLANs. Which Meraki hierarchy and create-network request produces those three store networks?
- A hotel group wants guest Wi-Fi sign-in hosted on its own web server so it can collect a room number and marketing consent. The MR access points will redirect each guest browser to the hotel portal, and after the check the guest must land back on the controller link so access is granted. Which step carries that return handoff in the external captive portal flow?
- A retail chain registered a Meraki webhook that posts switch and access point alerts to an internal receiver. The team set a shared secret at registration, but the endpoint sits on a public URL where health checks omit the shared-secret header, the comparison must resist timing measurement, and unauthenticated bodies must stay out of the parser. Which validation sequence meets all three requirements?
- A Python script provisions a new branch site in the Meraki dashboard with requests.post, targeting /organizations/123456789/networks so the site gets an MX, an MS and an MR. The payload carries only name, timeZone and tags, and the API answers with a parameter error. Which values must the request supply for the network to be created?
- A branch office is getting a new MX appliance and one MR access point. The script must switch on VLAN support, add VLAN 72 for guests, point the Branch-Guest SSID at it, and block guest clients from reaching the 10.50.0.0/16 headquarters subnet. Which sequence of Meraki API calls should the script send to finish provisioning the branch?
- A warehouse runs Meraki MV cameras and wants a Python service that alerts the moment more than five people cross the north aisle entrance, plus a monthly report of people counts from the last 30 days, with all video staying on the cameras. Which combination of Meraki camera analytics should the team use?
- A script that manages a Meraki dashboard creates a new SSID in an existing wireless network each time it runs, so the list of SSIDs keeps growing. The script only needs to change the authentication mode of one SSID that already exists in that network. Which HTTP method and resource URL should it use to make that change?
- A new branch must be stood up with zero console clicks: one standalone Meraki network, separate from any configuration template, needs an MX layer-3 firewall rule set, an enabled SSID, and an additional switch VLAN created through the dashboard REST API in a single run. Which sequence of API calls should the script perform?
- A managed-service provider creates customer networks in Meraki Dashboard from a Python script. The token works and the POST to /organizations/{orgId}/networks carries the network name, a timezone and tags, yet the API replies with a 400 validation error. Which request body will create the network successfully?
- Several Meraki networks post alert webhooks to one internal service, and someone has begun sending look-alike events from a public test server. The receiver must prove each alert came from the configured dashboard by validating the shared secret, log the outcome, and answer quickly. Which shared-secret check should run before the receiver processes an alert?
- A boutique hotel hosts its guest Wi-Fi sign-in page on its own server and points an MX at it as an external captive portal. Meraki redirects each guest browser there before access is allowed. Which step in the external captive portal flow authorizes the guest on the network?
- An engineer automates onboarding for a new branch office in the Meraki dashboard. The account manages one organization that already holds several networks, and the new site needs both a switch and an access point from day one. The script must place the new network inside the organization hierarchy and declare its hardware up front. Which API request should the script send to create this network?
- A network engineer exposes a Python web endpoint that receives Meraki alert webhooks and starts remediation on switch ports. The endpoint is reachable from the internet, and forged or repeated deliveries must be stopped before any action runs. Which check should the script perform first to confirm the alert has the shared secret configured for their Meraki organization, before separately applying replay protection?
- A retail company is opening a fifth store, and its Meraki organization already holds four store networks with their own MX firewalls and MR access points. Automation must add the new store network through the REST API so its hardware can be assigned to it afterwards, sitting alongside the existing four in the same organization. Which API call creates the network at the correct level of the Meraki hierarchy?
- A retail chain's Meraki Dashboard posts port-down alerts to an internal service that also ingests events from two other vendors' monitoring tools. The team must confirm each alert truly came from Meraki before acting on it. Which webhook validation control should the service enforce first?
- A new Meraki WLAN for contractors must use SSID "Contractor", but the appliance has no VLAN 30 yet and the firewall rule list starts with a broad allow rule. The WLAN must run on VLAN 30 and stay clear of the internal server subnet. Which API configuration sequence for the SSID, VLAN and firewall rules delivers all three requirements?
- Your provisioning script must edit an existing appliance static route in a branch network and also add the first static route in a brand-new network through the Meraki dashboard API. The API accepts a call only when the method matches the action. Which HTTP method should the script send for each of the two tasks?
- A Python script uses the Meraki Dashboard API to create a branch network with a valid API access key and a known organization ID, and the account already manages other networks in that organization. The call returns HTTP 400 naming invalid parameters. Which request details must be present for network creation to succeed?
These questions are original practice material and are NOT actual exam questions or brain-dump content. Cisco Systems, Inc. and related marks are trademarks of their respective owners. This material is not affiliated with, endorsed by, or sponsored by Cisco Systems, Inc..