3.10 Cisco DNAC Northbound APIs Use Cases CCIE-SECURITY Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security analyst wants to use DNAC Northbound APIs to get a list of all hosts currently connected to the network, along with their IP addresses and switch port locations. The analyst has a service account with the 'Host Viewer' role. What is the correct way to retrieve this information?

   • AObtain a token, then call the topology API to get host locations.
   • BObtain a token, then call the host inventory API to get the list of hosts, which includes IP and connected device/port details.
   • CObtain a token, then call the network discovery API to get host information.
   • DObtain a token, then call the device inventory API and filter for hosts.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A developer is building an integration that uses DNAC Northbound APIs to manage device configurations. The integration will run as a background service and needs to authenticate without user interaction. The developer wants to ensure the service account's credentials are not hard-coded in the script. What should the developer do?

   • AUse the service account's password as the API token directly.
   • BStore the credentials in a secure vault and have the script retrieve them at runtime to obtain a token from the auth endpoint.
   • CHave the script use the 'admin' user's credentials, which are stored in the script.
   • DUse the DNAC UI to generate a pre-authenticated token and embed it in the script.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A network team has just added a new subnet to their campus network. They want to use DNAC APIs to discover the devices in that subnet and then verify that the hosts in that subnet are visible in the host inventory. They have a service account with the 'Discovery Admin' role. What should they do?

   • AUse the device inventory API to add the subnet and then query the host inventory.
   • BUse the topology API to add the subnet and then query the host inventory.
   • CQuery the host inventory first; it will automatically trigger discovery for unknown subnets.
   • DTrigger a new discovery for the subnet, wait for it to complete, then query the host inventory to see the hosts.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A network administrator needs to automate the collection of device health scores from DNAC for all switches in the network. The administrator has a service account with the 'Health Viewer' role. The script should run daily and only retrieve health data. What is the best way to implement this?

   • AObtain a token using the service account, then call the health API to get health scores for all devices.
   • BUse the device inventory API to get health scores.
   • CUse the 'Network Admin' account to get a token, then call the health API.
   • DCall the health API without authentication; health data is public.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security team wants to identify all hosts connected to a specific access switch. They have the switch's IP address. Using DNAC Northbound APIs, what is the most efficient way to get this information?

   • AQuery the device inventory API and look for hosts.
   • BQuery the topology API to find hosts connected to the switch.
   • CTrigger a network discovery for the switch's IP address and then query the device inventory.
   • DQuery the host inventory API and filter by the switch's IP address or device ID.
   Reveal Solution Discussion Select an answer first