Free CCNA Automation Practice Questions

Question 1

A controller accepts POST /devices with a JSON object containing hostname and enabled. Authentication succeeds, but this Python request receives HTTP 400 with the message "Expected object, received string":

payload = {"hostname": "branch-r7", "enabled": True}
response = requests.post(
    url,
    headers={"Authorization": "Bearer " + token},
    json=json.dumps(payload),
    timeout=10,
)

The imports, URL, and token are valid. Which replacement for the json argument corrects the request body?

Accepted Answer

json=payload

Answer

data=payload

Answer

params=payload

Answer

json=str(payload)

Question 2

After an automation VM is restored from a snapshot, its HTTPS calls fail with "certificate is not yet valid." DNS resolves the expected controller address and TCP 443 connects. The certificate matches the hostname, its issuing CA is already trusted, and its validity period is April 1 through December 31, 2026. The actual date is September 15, 2026, but the VM reports February 12, 2026.

Where should the engineer intervene first?

Accepted Answer

Synchronize the VM clock with the approved NTP source.

Answer

Renew the controller certificate.

Answer

Add the controller hostname to the local hosts file to bypass DNS lookups.

Answer

Expand the outbound firewall rule to allow additional HTTPS destination ports.

Question 3

A device exports its administrative setting as XML. The enabled element is always present, and its text is exactly "true" or "false". This parser incorrectly reports the displayed interface as enabled: import xml.etree.ElementTree as ET root = ET.fromstring("false") enabled = bool(root.find("enabled").text) Select the expression that should replace the right-hand side of the final assignment and preserve both possible settings.

Accepted Answer

root.find("enabled").text == "true"

Answer

bool(root.find("enabled").text.strip())

Answer

root.find("enabled") is not None

Answer

root.find("enabled").text.lower() == "false"

Question 4

An asset reconciliation must retrieve every managed Meraki device in organization org_id, across all of its networks. The result spans several pages. dashboard is an authenticated SDK client; network_id identifies just one network in that organization.

The installed SDK exposes:
- dashboard.organizations.getOrganizationDevices(organizationId, total_pages): managed device records for an organization.
- dashboard.networks.getNetworkClients(networkId, timespan, total_pages): observed client records for one network, with timespan in seconds.
For these calls, total_pages="all" retrieves every page; total_pages=1 retrieves one page.

Which call supplies the required inventory?

Accepted Answer

dashboard.organizations.getOrganizationDevices(org_id, total_pages="all")

Answer

dashboard.networks.getNetworkClients(network_id, timespan=86400, total_pages="all")

Answer

dashboard.organizations.getOrganizationDevices(org_id, total_pages=1)

Answer

dashboard.networks.getNetworkClients(org_id, timespan=86400, total_pages="all")

Question 5

A NETCONF verification job reads an interface from the running datastore using . The reply contains true but omits oper-status. The supported YANG model marks oper-status as config false. To establish whether the link is actually operational, the job should:

Accepted Answer

Use <get> with a filter that includes the interface operational data.

Answer

Repeat <get-config> against startup to check the interface state retained across a reboot.

Answer

Treat enabled=true as sufficient evidence that the interface can forward traffic.

Answer

Use <edit-config> to set oper-status to up, then read the interface again.

Question 6

A production automation job writes an active controller API key into a publicly accessible build log. The key permits configuration changes. The job has been paused and the log removed; an initial audit finds no unexpected API calls.

Which action must take priority before the job resumes?

Accepted Answer

Revoke the exposed key and provision a replacement through the secret store.

Answer

Resume with redacted logs and monitor the exposed key.

Answer

Keep the same key but limit it to read-only operations.

Answer

Delete archived logs and build artifacts before reusing the original credentials.

Question 7

Two inventory collectors each send eight GET requests per second to the same organization. The API permits ten requests per second for the organization, shared across all API keys. Both collectors begin receiving HTTP 429 with Retry-After: 6.

Choose the recovery plan that addresses both the response and its underlying cause.

Accepted Answer

Wait at least six seconds, then cap their combined traffic at nine requests per second.

Answer

Wait six seconds, then resume both collectors at eight requests per second each.

Answer

Give each collector a separate API key, then resume the original request rates.

Answer

Suspend both collectors and request a service-outage investigation before attempting further reads.

Question 8

The last committed version of inventory.py contains timeout = 5. A developer changes it to timeout = 10 and runs git add inventory.py. The developer then changes the same line to timeout = 20 without staging again.

No other files have changed. What will git commit -m "Adjust timeout" record?

Accepted Answer

timeout = 10, with the later edit remaining in the working tree.

Answer

timeout = 20, because the commit reads the latest contents of every staged file.

Answer

timeout = 5, because changing a staged file removes its staged modification.

Answer

No commit, because Git rejects a file containing both staged and unstaged changes.

Question 9

A remote inventory run makes 25 small API reads sequentially over one established connection. No read depends on another's result. WAN round-trip time is a stable 80 ms, packet loss is zero, and server processing and payload transmission take negligible time. Bulk transfers on the same path reach 800 Mbps. The API also supports retrieving those same records in one batch request.

Which assessment best supports reducing the inventory run time?

Accepted Answer

About 2 seconds come from serial round trips; use the supported batch request.

Answer

About 1 second is RTT delay; doubling bandwidth will remove it.

Answer

About 0.2 seconds comes from round trips; raise the timeout to accelerate the remaining work.

Answer

About 2 seconds is payload transmission time; increase link capacity.

Question 10

A Cisco Catalyst Center provisioning call succeeds at the HTTP layer and returns a task identifier with a status URL. A successful task is a prerequisite for the next provisioning step. A read of that URL confirms the task is still running, with no error reported. The operation's documented polling interval has not elapsed, and the workflow deadline remains well ahead.

How should the client handle the dependency?

Accepted Answer

Wait for the next permitted poll and require task success before starting the dependent step.

Answer

Start the dependent step because the provisioning request returned HTTP success.

Answer

Resubmit the provisioning request to obtain a task that finishes within the first response.

Answer

Abort provisioning and roll back the site because the task has not yet completed.

Free CCNA Automation Practice Questions

Domain 1: Software Development and Design 15% of exam

Question 1

Question 2

Domain 2: Understanding and Using APIs 20% of exam

Question 3

Question 4

Domain 3: Cisco Platforms and Development 15% of exam

Question 5

Question 6

Domain 4: Application Deployment and Security 15% of exam

Question 7

Domain 5: Infrastructure and Automation 20% of exam

Question 8

Domain 6: Network Fundamentals 15% of exam

Question 9

Question 10

That's 10 of 1,030