Cisco DNA Center (20%)

ENAUTO · 60 questions

• A regional hospital runs 250 CLI-managed switches with per-device configs, slow changes, and audit drift. Leadership wants centralized intent, automated provisioning, and continuous compliance checks. Which operational difference defines controller-based networking for intent enforcement?
• A network team is scripting the network hierarchy in Catalyst Center before a branch rollout. The site creation call returns a task reference instead of the site itself, and the script needs each new building's ID before it can add floors beneath it. Which sequence of Site API calls creates each site and then retrieves its ID?
• A network engineer has saved a CLI template in Catalyst Center for six branch access switches and wants to push it from a Python script that already finds the devices by management address. The change window closes soon, so the script must send the template with its parameters and then confirm each switch finished successfully. Which Template API call sequence proves the deployment completed?
• A NetDevOps pair is splitting the work for a fresh Catalyst Center deployment. One script must create the campus site, claim twelve new access switches, and push the gold configuration template, while the second must pull hourly health scores and open assurance issues for those switches to feed a Grafana board. Which API pairing correctly matches each script to its Catalyst Center API role?
• A university NOC built a Flask endpoint that receives Catalyst Center outbound webhooks and routes each event by severity, sending critical events to a shared chat channel and the rest to a log. The reply must return within one second because routing can take six, malformed bodies must be answered with 400, and only valid events may enter the routing queue. Which request-handling sequence satisfies the timing, validation, and severity-routing requirements?
• A junior engineer's script posts a site update to the Catalyst Center Intent API and marks the job successful the moment the call comes back with a task identifier. Days later the site shows the change never applied. Which task polling step and response fields should the script use to confirm the Intent API deployment outcome?
• A fabric built with Catalyst Center raises an assurance event when a fabric edge node drops off the network. The team's chat workflow must fire within seconds, hand a script structured device and timestamp fields to parse, and the chat server only accepts inbound HTTPS posts. Which Catalyst Center notification capability fits this event workflow?
• A service account in Catalyst Center reads network health fine through the Intent API, but every POST to a template creation endpoint returns HTTP 403, while the built-in admin account succeeds with the same request. Credentials stay in the vault and the account must remain least-privilege. Which Catalyst Center permission change resolves the 403 failure?
• After submitting a configuration template deployment through the Catalyst Center Intent API, your script receives HTTP 202 with a taskId. The deployment has reported no progress for several minutes. Which check during task polling returns the failure reason the operator needs?
• A retail chain is automating Catalyst Center so each point-of-sale port joins the corporate virtual network when it comes up. The site is already in the fabric, the switch already holds the edge role, the corporate virtual network already exists, and the script knows the switch management address, the interface, the data pool name and the port authentication profile. Which SDA API should the script call to onboard those switch ports?
• A Python script pulls interface and device inventory from a Catalyst Center cluster at https://dnac.corp.local using a service account whose password sits in an environment variable. One run makes a single token exchange and then several inventory, topology, and device-detail calls. Which token authentication flow should the script implement for these Catalyst Center API requests?
• A university automates Catalyst Center to push campus QoS policy and to feed a NOC dashboard with client health trends. The code must separate intent changes from operational insight calls. Which distinction contrasts Intent API versus Network Assurance API roles?
• Your assurance team wants Catalyst Center to POST an alert to a ServiceNow relay when a wired client issue opens in the new building, with only those client events reaching the relay. You already built the webhook destination. Which configuration completes the outbound webhook event subscription?
• An audit requires the output of 'show version' and 'show ip interface brief' from 40 Catalyst Center managed switches. The engineer has API credentials and a Python script, but the Command Runner endpoint replies with an identifier instead of the command output. Which workflow retrieves the actual results from the Command Runner task identifier?
• A team is adding a new lab subnet to Catalyst Center and wants one script that starts discovery and then reads the inventory back. It must wait for the job to finish and report each device's hostname, platformId and softwareVersion. Which API sequence starts discovery, waits for the task, and returns those three fields?
• An automation job reads device compliance from Catalyst Center with a dedicated service account and now receives an HTTP 403 response from Catalyst Center on one Intent API call, while the same request succeeds when the engineer opens the equivalent page as a super admin in the GUI. The token is refreshed on every run. Which authentication or permission issue should the engineer correct first?
• A university is rolling out SD-Access fabric across six buildings and wants NOC staff to get fabric health alerts while netops automates virtual networks and host pools consistently. Central policy and wired host onboarding must stay unified. Which statement describes Catalyst Center events with SD-Access automation?
• A hospital runs 240 access switches that are configured one CLI session at a time. The team is moving a guest VLAN policy to Catalyst Center so the policy is authored once, deployed to every switch without per-device edits, and checked for drift after rollout. Which operational difference between traditional and controller-based networking does this shift show?
• A hospital NOC uses Catalyst Center and ServiceNow where device-down and license events must create tickets within a minute through a secure HTTPS endpoint with token auth. The solution must survive reboots and show delivery status. Which outbound webhook design creates the event subscription and destination?
• A NOC dashboard refreshes device health scores and open issues from Catalyst Center every five minutes, and a separate job must deploy a versioned configuration template to a branch switch so the change is tracked as intent. Which API approach fits these two jobs?
• An engineer automates a campus rollout in Catalyst Center where the area Global/EMEA Campus already exists and a new building called Warehouse B must be added beneath it. Address and coordinates are ready, the script fetches a token from the authentication endpoint first, and confirmation must come from the site query before any devices arrive. Which API sequence creates and verifies the new site in Catalyst Center?
• An engineer must deploy a Catalyst Center template version to one access switch. Its variables take the syslog server address and the login banner from a YAML file, and the script has to report whether the switch finished the change. Which API flow confirms that template deployment?
• A campus network of 40 access switches across six buildings needs a new VLAN and QoS policy, and port roles differ by building so identical CLI lines will not fit. The team wants the policy defined centrally, configured with the required site-specific differences, and applied automatically, with compliance status refreshed automatically rather than requiring a manually launched check. Which approach best meets these requirements?
• A NOC team enables outbound webhooks in Catalyst Center so a small Python receiver can open tickets for high-severity assurance events. The receiver must pull event name and severity from the delivered JSON, handle each event only once even when redelivered, and answer the sender quickly to keep retries from piling up. Which receiver logic satisfies all three requirements?
• A Python script runs discovery and then provisions a site through the Catalyst Center REST API. The script must authenticate once, reuse the session across dozens of calls, and re-authenticate only when the controller reports the token has expired. Which authentication flow should the script implement?
• A retail network team runs a Catalyst Center lab and wants its Assurance eventing to POST a JSON payload into a chatbot when a client-health issue is raised, while a second engineer scripts the fabric site build with SD-Access automation APIs. Which configuration pair delivers both the event-driven webhook notification and the scripted fabric build?
• Your Python script POSTs a device template deployment to the Catalyst Center Intent API and receives a 202 response carrying a taskId. Polling the task URL shows the job finished in error while the progress text stays generic. Which part of the task response should the script read to explain the failure?
• A hospital runs Catalyst Center with an outbound event webhook to a Python Flask receiver for switch-down alerts. The receiver logs 401 errors, drops duplicate events during flaps, and must acknowledge within seconds while queuing heavy work. The team sees delayed retries and missing severity fields. Which webhook payload handling behavior should the receiver script implement to process Catalyst Center events reliably?
• A network team is standing up a new building's fabric through Catalyst Center's SDA APIs from a Python pipeline. Wired endpoints there must land in the corporate overlay, and each call returns a task that has to finish before the next call runs. Which SDA provisioning sequence should the pipeline execute?
• A network operations team is building two Python jobs for Catalyst Center: one onboards branch switches with sites, credentials and profiles, and another feeds a dashboard with open issues and client health for those branches. Which split between the Intent API and the Network Assurance API should each job adopt?
• Your team is onboarding 30 branch switches into Catalyst Center with Python, and the only credential stored for them is an SSH CLI login. After the job runs you must confirm every device appears with its management IP before templates are pushed. Which pair of Catalyst Center API calls starts the discovery and then returns the synced device inventory?
• A monitoring engineer wants an OSPF configuration snippet from twelve switches and posts the CLI commands to the Catalyst Center Command Runner endpoint, which responds with a task identifier instead of the command output. The team's policy requires the script to release the connection right away and come back for the results later. How should the script use that task identifier to retrieve the Command Runner output?
• A network operations team runs Catalyst Center across 40 sites and wants its ticketing relay to receive push notifications rather than scheduled report exports. Only high-severity device-down events from the Reno building should reach the relay, an internal HTTPS endpoint, and alarms must arrive as pushes rather than being pulled from Assurance on a schedule. How should the outbound webhook destination and event subscription be configured?
• A monitoring script authenticates against Catalyst Center with basic auth, stores the returned token, and reads inventory successfully. The same token then returns HTTP 403 on every POST to the intent endpoint, while identical GET requests to the same path keep returning 200. What does the 403 on write requests reveal about the account's permission setup?
• A data-center team automates Catalyst Center inventory reports with Python requests. The script must authenticate over HTTPS, reuse the session token for inventory calls, and handle expiry without hardcoding passwords in code. Nightly runs fail with 401 after one hour. Which token authentication to Catalyst Center behavior should the script implement to sustain API access?
• Catalyst Center keeps device configuration and operational alerting in separate subsystems. An engineer must both build an SD-Access fabric and be told when a provisioning job fails. Which statement correctly pairs what the SD-Access automation workflow does with what the event notification system does?
• The operations team needs Catalyst Center to notify its incident system the moment a device is added or falls out of compliance. The endpoint accepts JSON posts and is reachable only from the Catalyst Center server, and polling scripts are banned during this change window. Which event outbound webhook setup in Catalyst Center delivers these device events?
• An automation engineer must collect 'show version' and 'show interfaces status' from 60 Catalyst switches through Catalyst Center inside a Python job. The job should start the collection and carry on rather than sit idle while every switch answers. Which Command Runner flow returns the command output?
• A campus network needs a new segmentation policy on 400 access switches this month, and 60 replacement switches installed later must pick up the same policy automatically. The audit team wants evidence that each switch still matches the intended policy. Which controller-based design satisfies both the onboarding and audit requirements?
• A network engineer is onboarding 12 new branch sites into Catalyst Center with Python so the fabric design can be built later. Each site needs an area, a building with coordinates and a floor with its dimensions, and the script must confirm each site exists before the next stage runs. Using the Create Site calls that take parentName, which Site API sequence should the script follow?
• After building a configuration template in Catalyst Center, a network engineer must deploy it to one managed device with VLAN parameters supplied at run time, then confirm from the API that Catalyst Center actually finished applying it. Which API call sequence performs the template deployment and the status check?
• A network team's receiver opens a ServiceNow ticket for every Catalyst Center event webhook it accepts, and the service desk now sees duplicate tickets for the same assurance alert. The endpoint is slow, so the handler must acknowledge quickly before its ticket work finishes. Which receiver design handles these event webhook payloads correctly?
• A network team is extending an existing automation pipeline. The next release must push a configuration template to 40 access switches, place them into a new building site, then read device health scores, open issues, and client-health trends into a reporting dashboard. Which Catalyst Center API assignment covers both the provisioning work and the assurance work?
• A network engineer is onboarding a new branch in Denver as part of a migration script. The area US-Central already exists in Catalyst Center, and the script must add a building named Denver-HQ beneath it. The pipeline needs proof the site is ready before it assigns devices to the building. Which Site API request pattern should the engineer use to create and verify the Denver-HQ site?
• A Python service lists managed devices in Catalyst Center every ten minutes using one shared controller account. The engineer wants the API session to reuse a single issued token instead of attaching credentials to every call, and the service must survive the token aging out. How should the service obtain and attach the Catalyst Center token?
• A retailer with a 12-switch SDA fabric wants its internal portal to create a user segment for a warehouse extension. The portal should express the outcome and let the controller coordinate the fabric changes instead of generating device configurations by hand. Which Catalyst Center API approach should the portal use to create that segment?
• Your listener receives Catalyst Center event notifications as JSON POSTs at /hooks/catalyst. Yesterday one notification was delivered twice and fired two identical remediation jobs, yet a later fresh occurrence of the same event type must still fire a job of its own; every log line must carry the event time and the reply must return within a couple of seconds. How should the receiver parse, de-duplicate and acknowledge each notification?
• An automation pipeline pushes a configuration template to 40 devices through the Catalyst Center Intent API. Each POST returns 202 Accepted with a task identifier, yet a deployment can still fail minutes later when a device goes unreachable. The script must detect that failure and show the platform's own reason for it. Which follow-up sequence confirms real success and surfaces the error detail?
• Your deployment pipeline provisions SDA fabric resources through the Catalyst Center intent API: it creates a site, a virtual network and an SGT, then assigns a port. Each call returns in about a second while the fabric state settles a minute later, so the pipeline needs a trustworthy completion signal without sending the request a second time. Which API pattern should the script use to confirm each operation has completed?
• A long-running script must pull the device inventory from Catalyst Center every few minutes for a full shift, reusing one token instead of re-authenticating on each call, and it must keep running unattended if the controller expires that token mid-shift. Which token authentication flow should the script implement?
• A campus refresh brings twelve new access switches, and the automation lead has asked the team to avoid manual CLI work. Your script must start a discovery job, wait for it to finish, and then read back the inventory so the imported data can be validated. Which sequence of Catalyst Center API calls should the script make on its first run?
• An engineer submits three show commands for forty Catalyst Center-managed switches in one Command Runner request and immediately receives only a task identifier. The switches respond at different speeds, and the output feeds a compliance report later. Which Command Runner workflow collects the command output for the report?
• A university is rolling out SD-Access fabric across four buildings and repeats the same design each year as labs move. The team wants to model the site hierarchy, assign switches and routers to fabric roles, and create a guest virtual network without typing CLIs per device. Which Catalyst Center capability should drive this rollout?
• A read-only automation account runs a script that reads the device inventory successfully, then fails when it posts a new site to the Intent API. The token endpoint returned HTTP 200 and the same header carries the token on both calls, yet the create request comes back with HTTP 403. Which Catalyst Center permission condition explains that 403 response?
• A network engineer must run 'show cdp neighbors' on forty access switches through Catalyst Center and save the output for a report. The POST to the Command Runner endpoint returns quickly with a task ID while devices are still replying. Which workflow collects the finished command output for that task?
• The SOC wants Catalyst Center to post network events to a new internal relay at https://events.corp.example:8443/ingest. The relay still needs to be registered, company policy requires TLS, and only device reachability and configuration-change alerts should leave the platform. Which destination and subscription setup delivers exactly that?
• A campus team currently logs into 40 access switches during each change window and hand-types identical VLAN and port settings, then verifies every device one at a time. Leadership wants the same change applied consistently, with policy defined once and compliance confirmed centrally. Which operational difference of a controller-based network best delivers that outcome?
• An operations engineer has built a template in Catalyst Center that renders interface descriptions and a banner for access switches. Twelve newly discovered switches are waiting, and the template must be applied through the API with each switch's own hostname and location values, followed by an API check that the job completed. Which API workflow delivers both the deployment and the status confirmation?
• An engineer must bring 40 unclaimed access switches in one 10.10.40.0/24 subnet into Catalyst Center using CLI credentials, then confirm every switch appears in the inventory. The script today only queries devices. Which sequence of Catalyst Center API calls should the script make to discover the subnet and verify the devices?
• An automation engineer is scripting Catalyst Center for a new campus: the script must create an area, create a building under it, and fetch that building's details by name afterward to confirm the hierarchy. The create call returns a task rather than the finished site, and the engineer wants one predictable flow for creation and read-back. Which sequence should the script follow to create and then verify the site?