Cisco SD-WAN (20%)

ENAUTO · 60 questions

• A junior engineer is writing a small Python tool that logs in to SD-WAN Manager with POST /jsecuritycheck and then runs six read-only queries in a loop. The first query succeeds while the login response is still in hand, but every later query fails once those headers are discarded. Which authentication approach keeps the Manager API session valid for the whole loop?
• A network team is writing a Python service that polls SD-WAN Manager for tunnel statistics every five minutes and also posts a small configuration change on each run. The tool must authenticate once and carry that identity through both the reads and the writes. Which authentication flow matches how the Manager API issues and reuses sessions?
• Your Python automation queries the SD-WAN Manager API about 40 times in each run: device inventory, configuration templates and health metrics. The security team requires that every run sign in fresh, that the admin password appear in no more than one request, and that the credential survive idle gaps of several minutes between batches. Which Manager API authentication approach satisfies all three requirements?
• A Python job pulls configuration and health data from an SD-WAN Manager appliance using the automation service account instead of an engineer's interactive session. The job makes hundreds of calls, must open a single session and reuse it, and must recover on its own if the manager later rejects that session. Which authentication flow should the script use for the whole run?
• A Python script must read the device inventory from SD-WAN Manager and then push a device template change to the branch routers. The controller uses a local user login rather than SSO, and every call goes through one requests.Session object. Which authentication sequence gives the script a working session for both calls?
• A bank automation service polls SD-WAN Manager nightly for alarms and pushes template tweaks, requiring a persistent API session with CSRF protection across calls. Which authentication flow establishes the Manager API session with cookie and token?
• A regional hospital is staging an SD-WAN upgrade and its asset team needs one automated list of every WAN edge known to SD-WAN Manager, including edges that are currently offline, showing each device's hostname, site ID, serial number and most recently reported software release for reconciliation. Which API family should the automation call to build that device record?
• A service-desk engineer is building one Python tool for a 40-site SD-WAN fabric managed by SD-WAN Manager. It must disable a departed operator's login, list every edge with serial and software version, show interface alarms from the last hour, and push an updated QoS feature template. Which API family handles each of these four jobs?
• A network operations team wants a small Python service that polls SD-WAN Manager every few minutes and raises a ticket when it sees an edge router's control connections drop, while leaving all device configuration untouched. Which SD-WAN Manager API family should the service query for that live control status?
• A single Python service drives SD-WAN Manager: it lists each edge device's model and serial, reports BFD tunnel history for the last 24 hours, edits and attaches a device template, and reads user roles for a quarterly audit. Which SD-WAN Manager API-family assignment matches those four operations?
• A NOC analyst builds a weekly report of average CPU, memory and transport statistics for every edge router in the fabric. The readings are already stored on the controller, and the script should ask for weekly averages instead of paging out raw rows. Which SD-WAN Manager API family should the report query?
• A service provider NOC builds a daily Python report for 60 SD-WAN edge routers. It needs per-interface throughput counters, CPU and memory trends, and every unresolved alarm from the past 24 hours at each site, and a separate script already lists the routers with their software releases. Which SD-WAN Manager API family should the script call to collect the counters, trends, and open alarms?
• A network automation engineer must script a nightly inventory report for a 400-branch SD-WAN overlay. The report has to pull live data from SD-WAN Manager's device inventory API and print each device's host-name, system-ip, site-id and device-type for the morning handoff. Which approach produces the required per-device fields from the live controller?
• A regional MSP manages 180 SD-WAN edges in SD-WAN Manager and needs a nightly Python report showing hostname, device model, reachability and software version for NOC triage. The script must authenticate once and reuse the session for inventory polling. Which Device Inventory API approach retrieves the device list and displays the key fields?
• During migration planning you must list every edge router from SD-WAN Manager with its hostname, system IP, site ID and software release so the team can build a cutover spreadsheet. Which API endpoint returns that device inventory?
• The upgrade team needs a one-off inventory report from SD-WAN Manager: host name, system IP, and software version for every managed device, gathered in a single run with no device identifiers known in advance. Which inventory API call should the script use to build that report?
• A morning health check must list every device managed by SD-WAN Manager with its serial number, site ID, system IP and reachability status. The engineer has Python and a valid auth token, and wants one printed line per device. Which request and parsing step produce that inventory?
• For a quarterly audit, an engineer is writing a Python script that must list every router managed by SD-WAN Manager, showing each device's name, system IP, platform model and software version in one pass. The script authenticates once and then reads the returned records. Which SD-WAN Manager request should the script make to gather those inventory fields?
• A CI job must authenticate to SD-WAN Manager exactly once per run, create a limited admin account with a JSON body, read controller cluster status, and fetch the device certificate that the manager issued for a new edge router. Which Administration API request sequence should the script send?
• A lead engineer scripts pre-upgrade checks against SD-WAN Manager for a 400-site fabric. The work must list the local admin users, show certificate details for connected devices, and read cluster node information, all read-only, after signing in through the standard provider endpoint. Which request set targets the administration APIs correctly?
• An operations engineer must script three SD-WAN Manager tasks: create a read-only auditor account, read controller certificate status, and check cluster health. The script logs in once and reuses the session for every call. Which administration API approach completes all three tasks?
• A bank audit of a 3-node SD-WAN Manager cluster requires evidence of active admin users, certificate expiry dates and cluster health without logging into each node GUI. The script must use supported admin APIs and read-only access. Which Administration API use collects users, certificates and cluster info?
• SD-WAN Manager's administration API uses an authenticated session. A short-schedule script must make several administration calls without logging in for every one. Which authentication pattern should the script use across those calls?
• A managed service provider's onboarding script logs in to Cisco Catalyst SD-WAN Manager with JWT, adds a new operator account, then pulls certificate view data for an audit. Every administration API sits under the /dataservice root, POST calls must carry the XSRF token, and new accounts are added at the user resource. Which request set completes the onboarding workflow on SD-WAN Manager?
• You maintain a Python automation library for SD-WAN Manager and need to duplicate an approved feature template for a lab overlay instead of building one from scratch. The clone must keep every parameter and default while gaining its own identity in the Configuration API. Which feature template cloning sequence should your script use?
• A regional retailer with 40 SD-WAN branches needs a Python script to standardize NTP servers across all VPN feature templates. The script must list existing feature templates, clone the gold NTP template, update servers to 10.1.1.10, and leave device templates untouched until change review. Which Template and feature template API operation should the script perform to implement the standardized NTP change?
• A team must standardise OSPF hello and dead timers on twelve IOS XE edges managed by SD-WAN Manager. The engineer builds one feature template in JSON and wants site-specific addresses kept as variables in the shared template. Which sequence of template configuration API operations should the Python script run to roll this out safely?
• A service provider is onboarding 40 new vEdge routers for a retail customer, and the team will drive SD-WAN Manager from Python so a shared BGP policy stays centrally editable and later edits reach the devices. Which sequence of Configuration API operations puts these devices under feature template control?
• A service provider must push standardized BGP, NTP and logging settings to 40 SD-WAN edge routers while each site supplies its own router ID and site name, and the shared standard has to stay as one reusable definition. The team drives SD-WAN Manager from Python. Which template API approach should the script use?
• A team scripts SD-WAN Manager to standardize NTP settings: create a feature template, refine it after review, then apply it to 60 routers while tracking rollout status per device. Which sequence of configuration API operations does the script need?
• A logistics firm with 60 SD-WAN sites must attach a revised device template to five pilot routers via Python during a maintenance window. Requirements demand staged attach, feature input per device, and polling until push succeeds before closing the ticket. Which attaching a device template and monitoring the push task sequence should the script implement for the pilot rollout?
• During tonight's window you must push a device template built from feature templates to 20 branch routers from Python and prove each push finished before the window closes. Your script already holds the template ID, the device UUIDs and the filled variable values, and SD-WAN Manager runs the push as a background job. Which API sequence starts the attach and then tracks it to completion?
• You automate a rollout through SD-WAN Manager: a Python script posts twelve edge routers and their template variables to the attach endpoint of a device template. The API replies immediately with HTTP 200 and a task identifier while the push is still running. Which follow-up step tells the script when every router has finished receiving the configuration?
• Your Python script attaches a device template to a branch router in SD-WAN Manager, filling in the template's device variables first. The team needs confirmation that the push actually finished on the device before the next site is processed. Which sequence of API steps confirms that the template push completed on that device?
• An engineer attaches one device template to forty branch routers through the SD-WAN Manager Configuration API and receives an identifier for the push job rather than any configuration result. The audit log must reflect what each router actually accepted, beyond the request being accepted. How should the script use that identifier to report the outcome of the device template push?
• A network automation engineer must apply a device template named BRANCH-EDGE to 40 newly onboarded routers in SD-WAN Manager from a Python script. The script has to work asynchronously because the manager queues the rollout, and it must report exactly which devices failed without anyone logging into a router. How should the script attach the template and track the rollout?
• Your operations team runs a morning health script for the SD-WAN fabric. It must chart bytes in and out on one branch router's WAN interface for a fixed two-hour window that ended an hour ago, so the script has to name the range itself rather than accept a preset look-back. Which request pattern puts the fixed two-hour range into the statistics query call?
• An engineer must re-run last Tuesday's 30-minute traffic analysis for one branch router at five-minute granularity using the same time window each time. The SD-WAN Manager statistics resource accepts POST requests whose JSON body carries the time range. Which Monitoring API request design satisfies this statistics query?
• A site reliability engineer is automating a weekly capacity review for a retail SD-WAN overlay. The job must land in one statistics request per run, cover one fixed past window whose bounds are already in epoch milliseconds, and return rows only for the three branch devices under review. Which query structure should the script send to Manager?
• An engineer is investigating a WAN link that degraded last Tuesday between 14:00 and 16:00. The SD-WAN Manager monitoring API must return the recorded interface statistics for one branch router across that whole window in a single request that carries the time range in a JSON body. Which monitoring API request retrieves those historical statistics?
• A NOC engineer needs interface utilization samples for two SD-WAN sites across a fixed six-hour maintenance window from last Tuesday, pulled in a single authenticated call to SD-WAN Manager. The request must pin the exact start and end of that window. Which statistics query body should the script send?
• A network operations engineer must pull CPU and memory statistics for 25 edge routers from SD-WAN Manager for one specific Monday window in a capacity report. The dashboard already shows this data, but the API call has to cover exactly that range. Which request should the script send to the statistics query API to reproduce the Monday window?
• During a branch outage, an engineer must show the current tunnel state for one edge router on a wall display that refreshes every five seconds. Next week a separate report must summarize bandwidth for that same router across seven days. Which monitoring request should drive the live tunnel view?
• An operations team builds a NOC page for the SD-WAN fabric. One tile must show each router's interface error counters as they stand right now and refresh every minute, while a second tile plots a 30-day trend from the readings the platform already archives. Which pairing of SD-WAN Manager endpoints fits those two tiles?
• During a WAN outage, a NOC engineer must read current CPU and interface state for the affected edges right now, while a manager wants a chart of interface errors across the past seven days for a weekly report. Both come from SD-WAN Manager. Which monitoring request design serves the live query and the seven-day trend query?
• A NOC dashboard built on SD-WAN Manager must show the current CPU and memory for one edge router, refreshed live on the wall screen, and a seven-day tunnel throughput trend for a weekly report. Which pair of API calls should the script build to serve both needs?
• An engineer is building a branch dashboard in Python against SD-WAN Manager. One panel must show the router's current interface error counters and refresh often, while another must report average CPU across the whole site for the past seven days in hourly slices. Which pair of monitoring endpoint styles should the script use for these two panels?
• A NOC team is building a dashboard on the SD-WAN Manager monitoring APIs. One tile must show whether each WAN tunnel is up right now and refresh every five seconds, while a second tile plots average latency across the last 30 days for a chosen site. Which split between real-time and historical endpoints should the dashboard use?
• A branch reports brief outages every fifteen minutes. On SD-WAN Manager the engineer sees overlay tunnels carrying packet loss and BFD sessions resetting, but the fault's origin is still unclear. Which API query gives the clearest first evidence about the health of the router's control plane?
• The NOC sees a branch site lose reachability to the data center every few minutes, and one engineer suspects the tunnel rather than an application. Your runbook requires checking control connections, BFD sessions and tunnel state through the SD-WAN Manager APIs before any policy change. Which order of API checks gives you a layer-by-layer readout of where the failure starts?
• A branch site's overlay traffic stops while every remote site keeps forwarding. SD-WAN Manager lists the router as connected, and an API query shows its control connections established with the controllers, so the management and control planes are healthy. The team must work out whether the data path is up between this edge and its peers. Which SD-WAN Manager API data source should they read to diagnose the forwarding outage?
• A newly onboarded branch router shows as reachable in SD-WAN Manager, but its configuration never arrives and the site stays unavailable while every other site works normally. An engineer wants to confirm the router control-plane health through the monitoring APIs before touching the data plane. Which API view should they query first?
• A pair of SD-WAN edges at a branch cannot carry traffic between their local subnets. Each edge shows its local link up, holds a valid device certificate and has a synced clock, and you have read-only access to the SD-WAN Manager APIs. Which API query should you run first to identify which overlay layer has failed?
• A branch site drops traffic for a few minutes at a time while its underlay circuit stays up, and the edge router CLI shows nothing conclusive. The engineer must pinpoint whether the fault sits in control connections, BFD sessions, or overlay tunnels using only the SD-WAN Manager APIs. Which set of SD-WAN Manager API checks should the script run?
• A network engineer's Python script posts a device template to SD-WAN Manager and the call fails with HTTP 400. The script prints only 'request failed', while the JSON response body names the exact field the manager rejected. The engineer needs to find that rejected value, and a retry of this request would return the identical failure. Which part of the error response should the script parse to identify the rejected field?
• While troubleshooting, a Python script fetches a single device from an SD-WAN Manager REST endpoint by UUID and receives HTTP 404 with a JSON body reporting that the device cannot be found. The same request with a valid UUID returns HTTP 200, and the session was created earlier in the same job. Which interpretation of the 404 response is correct?
• A junior engineer's Python script logs into SD-WAN Manager successfully, lists devices, then updates a device template. The device list call returns HTTP 401 with an empty body, while the template update returns HTTP 400 with a JSON message naming a field that is missing from the payload. Which interpretation of these two error responses should guide the next fix?
• A Python automation job posts an update to SD-WAN Manager and fails, but the script prints only 'HTTP 400' while the same request works from Postman. The engineer needs to know exactly which part of the request was rejected. Which part of the error response should the script log first to identify the failing input?
• A provisioning script that posts new device records to SD-WAN Manager now fails, and the log shows only 'HTTP 400 Bad Request'. The same script also returns 401 on long overnight runs. How should the script read each API error response to diagnose both failures?
• A nightly script backs up SD-WAN configuration through the SD-WAN Manager API. Every run returns HTTP 401 with a JSON message reporting an invalid or expired session, even though the password is correct. What does the 401 error response tell you to fix first?