2.4 Automation/orchestration Design, Integration, and On-Going Support for Networks (such as Interfacing with APIs, Model-Driven Management, Controller-Based Technologies, and Evolution to CI/CD Framework) 400-007 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A large campus network is deploying a controller-based architecture to enforce consistent security policies across thousands of access switches. The design must allow for centralized policy definition while still permitting local forwarding in case of controller failure. Which architecture best meets this requirement?

   • AA fully centralized SDN controller that programs flow tables on every switch and requires the controller for all forwarding decisions.
   • BA distributed control plane with no central controller, where each switch independently enforces its own ACLs.
   • CA hybrid design where the controller distributes policy and configuration, but switches maintain local forwarding tables and can operate independently if the controller is lost.
   • DA controller that only handles management traffic and does not participate in data-plane forwarding decisions.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network team has deployed a model-driven automation solution using YANG and NETCONF. They need to ensure that the automation scripts continue to work after a network device operating system upgrade. What is the most effective way to maintain compatibility?

   • ARely on the vendor's documentation to confirm that the new OS version is backward compatible with all existing YANG models.
   • BFreeze the device OS version and refuse all upgrades to avoid breaking the scripts.
   • CRewrite all automation scripts from scratch after every OS upgrade to ensure they work with the new version.
   • DMaintain a lab environment that mirrors production, test the automation scripts against the new OS version, and update the scripts or YANG models as needed.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A financial services firm is designing an automation workflow to provision new branch office connectivity. The workflow must integrate with the existing ticketing system, enforce compliance checks, and allow for human approval before changes are pushed to production routers. Which orchestration design best satisfies these constraints?

   • AAn orchestration platform that reads the ticket, generates a configuration from templates, runs compliance checks, and pauses for a human approval step before applying changes.
   • BA fully automated pipeline that provisions the branch router as soon as the ticket is created, with no manual intervention.
   • CA script that directly configures the router and sends an email to the engineer after the change is complete.
   • DA manual process where engineers configure the router via CLI and then update the ticket after completion.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A data center operator is evaluating controller-based technologies to automate network provisioning for a new private cloud platform. The design must support dynamic creation of virtual networks and policy enforcement based on application requirements. Which controller-based approach is most suitable?

   • AA traditional network management system (NMS) that monitors devices and provides a dashboard for manual configuration.
   • BA network function virtualization (NFV) orchestrator that only manages virtual network functions, not the underlying switches.
   • CA set of standalone scripts that configure switches via SSH whenever a new virtual network is requested.
   • DA software-defined networking (SDN) controller that provides a northbound API for the cloud platform and uses OpenFlow to program switches.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of YANG data models in model-driven network management?

   • ATo standardize the structure and semantics of configuration and state data
   • BTo encrypt all network management traffic
   • CTo replace all network protocols with a single universal protocol
   • DTo provide a graphical user interface for network administrators
   Reveal Solution Discussion Select an answer first