A network security team manages firewall rules across multiple sites. They currently edit configurations manually on each device, leading to drift. They want to adopt a version-controlled, declarative approach to manage these configurations. Which practice should they implement?

Use a script that pushes the same configuration to all devices at once.

Store device configurations in a Git repository and use a configuration management tool to enforce the desired state.

Create a standard operating procedure document for manual configuration changes.

Schedule a nightly backup of each device's running configuration.

A security automation team develops Python scripts to parse firewall logs. They want to integrate these scripts into a CI pipeline to catch errors early. Which action best supports this goal?

Manually test the scripts at the end of each sprint.

Use a shared network drive to store the latest version of the scripts.

Deploy the scripts to production after each merge.

Run unit tests automatically on every commit to the shared repository.

An organization has multiple network devices that must maintain consistent security settings. They want to manage these settings through code, with changes reviewed and versioned. Which tool or approach best fits this requirement?

Use a network monitoring tool to alert on configuration changes.

Use a spreadsheet to track desired configurations.

Use a backup tool to save device configurations daily.

Use a configuration management tool like Ansible to define the desired state and store playbooks in Git.

Which practice is a key component of Continuous Integration?

Manual testing of every build before merging

Automated builds triggered by code commits

Large, infrequent code merges to reduce build frequency

Avoiding integration until the end of the development cycle

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 4Objective 12

4.12 Apply the Principles of DevOps Practices 350-201 Practice Questions (Page 6)

Part of the Automation domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

11concepts

20%of the exam

Questions 26–30

26application · medium
A network security team manages firewall rules across multiple sites. They currently edit configurations manually on each device, leading to drift. They want to adopt a version-controlled, declarative approach to manage these configurations. Which practice should they implement?
Select an answer first
27application · medium
A security automation team develops Python scripts to parse firewall logs. They want to integrate these scripts into a CI pipeline to catch errors early. Which action best supports this goal?
Select an answer first
28application · medium
An organization has multiple network devices that must maintain consistent security settings. They want to manage these settings through code, with changes reviewed and versioned. Which tool or approach best fits this requirement?
Select an answer first
29foundation · easy
Which stage in a CI/CD pipeline is responsible for validating that code changes do not break existing functionality?
Select an answer first
30foundation · easy
Which practice is a key component of Continuous Integration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.