An engineer is writing a Python script to read a YAML configuration file that contains a list of interfaces. The YAML file has the following content: interfaces: - name: GigabitEthernet0/1 ip: 192.168.1.1 - name: GigabitEthernet0/2 ip: 192.168.1.2 Which Python code correctly loads this YAML and accesses the IP address of the second interface?

import json; data = json.load(open('config.yaml')); ip = data['interfaces'][1]['ip']

import yaml; data = yaml.safe_load(open('config.yaml')); ip = data['interfaces'][1]['ip']

import yaml; data = yaml.load(open('config.yaml')); ip = data['interfaces'][0]['ip']

import xml.etree.ElementTree as ET; tree = ET.parse('config.yaml'); ip = tree.find('interfaces')[1]['ip']

A network engineer is automating the retrieval of configuration details from a Cisco IOS-XE device using its RESTCONF API. The device requires authentication via HTTP Basic Auth. The engineer wants to fetch the running configuration for interface GigabitEthernet0/1. Which Python code snippet correctly performs this task?

requests.get('https://device/restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=0/1', headers={'Authorization':'Bearer token'})

requests.post('https://device/restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=0/1', auth=('admin','password'), headers={'Content-Type':'application/yang-data+json'})

requests.get('https://device/restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=0/1', auth=('admin','password'), headers={'Accept':'application/yang-data+json'})

requests.get('https://device/restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=0/1', auth=('admin','password'), headers={'Content-Type':'application/yang-data+json'})

A security team is building a Python script to automate configuration backups from multiple network devices. The devices support both Basic Auth and API keys. The team wants to minimize the risk of credentials being exposed in logs and prefers not to store passwords in plaintext. Which approach is most secure and practical?

Use API keys stored in environment variables and include them in the Authorization header.

Use API keys stored in a configuration file with world-readable permissions.

Use Basic Auth and pass credentials as command-line arguments.

Use Basic Auth with the username and password hardcoded in the script.

A Python script that automates firewall rule changes is failing intermittently. The script sends a POST request to create a rule, but sometimes receives a 409 Conflict response. The script currently treats any non-2xx as a failure and retries the entire request. What is the most likely cause and the best fix?

The rule already exists; modify the script to check for 409 and handle it as a success or update the rule.

The JSON payload is malformed; validate the payload before sending.

The server is overloaded; increase the retry timeout.

The authentication token has expired; refresh the token before retrying.

CCIE Security

Domain 3Objective 9

3.9 Interaction with Network Devices Through APIs Using Basic Python Scripts CCIE-SECURITY Practice Questions (Page 9)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

11concepts

15%of the exam

Questions 41–45

41application · medium
An engineer is writing a Python script to read a YAML configuration file that contains a list of interfaces. The YAML file has the following content: interfaces: - name: GigabitEthernet0/1 ip: 192.168.1.1 - name: GigabitEthernet0/2 ip: 192.168.1.2 Which Python code correctly loads this YAML and accesses the IP address of the second interface?
Select an answer first
42application · medium
A network engineer is automating the retrieval of configuration details from a Cisco IOS-XE device using its RESTCONF API. The device requires authentication via HTTP Basic Auth. The engineer wants to fetch the running configuration for interface GigabitEthernet0/1. Which Python code snippet correctly performs this task?
Select an answer first
43application · easy
A network administrator is automating the removal of an old VPN tunnel configuration from a router using its REST API. The API uses standard RESTful conventions. Which HTTP method should the script use to delete the VPN tunnel resource?
Select an answer first
44expert · hard
A security team is building a Python script to automate configuration backups from multiple network devices. The devices support both Basic Auth and API keys. The team wants to minimize the risk of credentials being exposed in logs and prefers not to store passwords in plaintext. Which approach is most secure and practical?
Select an answer first
45expert · hard
A Python script that automates firewall rule changes is failing intermittently. The script sends a POST request to create a rule, but sometimes receives a 409 Conflict response. The script currently treats any non-2xx as a failure and retries the entire request. What is the most likely cause and the best fix?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

3.9 Interaction with Network Devices Through APIs Using Basic Python Scripts CCIE-SECURITY Practice Questions (Page 9)

Questions 41–45

A network administrator is automating the removal of an old VPN tunnel configuration from a router using its REST API. The API uses standard RESTful conventions. Which HTTP method should the script use to delete the VPN tunnel resource?

Keep studying — 3.0 Security Infrastructure