Question 570
A network change must apply a standardized access-port policy to 200 managed Catalyst switches consistently. During troubleshooting: Some switches keep old configuration because the template was not provisioned to their site inventory. Which underlying cause best explains the recorded behavior?
- A model-generated insight was treated as definitive without corroborating observations.
- Required device integration, credentials or telemetry sources for Assurance are incomplete.
- The change was drafted but device/site scope and deployment were not completed.
- The change exists only in the candidate datastore because no supported NETCONF commit has been executed.
Explanation
Correct Answer
C:The actual technical cause is: The change was drafted but device/site scope and deployment were not completed. It specifically explains the observation: some switches keep old configuration because the template was not provisioned to their site inventory. The correcting configuration is: use supported Catalyst Center template/provisioning workflow with target device scope and staged validation.
Incorrect Answers
A:That diagnosis is supported by a different symptom: A team changes routing because an AI tile mentions congestion with no matching traffic evidence. Here the recorded observation is: some switches keep old configuration because the template was not provisioned to their site inventory. The applicable cause is: the change was drafted but device/site scope and deployment were not completed.
B:That diagnosis is supported by a different symptom: An administrator assumes inventory registration alone automatically populates all assurance metrics without telemetry collection. Here the recorded observation is: some switches keep old configuration because the template was not provisioned to their site inventory. The applicable cause is: the change was drafted but device/site scope and deployment were not completed.
D:That diagnosis is supported by a different symptom: The candidate edit is successful, but operational interface configuration remains at its old value. Here the recorded observation is: some switches keep old configuration because the template was not provisioned to their site inventory. The applicable cause is: the change was drafted but device/site scope and deployment were not completed.
Question 571
A network change must apply a standardized access-port policy to 200 managed Catalyst switches consistently. The initial change is: Use supported Catalyst Center template/provisioning workflow with target device scope and staged validation. Which continuing control most directly prevents a recurrence of the documented problem: Some switches keep old configuration because the template was not provisioned to their site inventory.
- Check capabilities and candidate support per IOS XE release; lock, validate, commit and unlock using reviewed change procedures.
- Keep operator review and telemetry evidence alongside AI-assisted network recommendations.
- Apply change templates through reviewed sites and post-deployment compliance checks.
- Monitor telemetry coverage and data freshness before basing incidents on health scores.
Explanation
Correct Answer
C:The continuing protective control is: Apply change templates through reviewed sites and post-deployment compliance checks. This addresses the underlying failure mechanism: the change was drafted but device/site scope and deployment were not completed. The corresponding operational check is: preview intended differences and verify running configuration and compliance on a pilot device.
Incorrect Answers
A:That control reduces a separate risk: The change exists only in the candidate datastore because no supported NETCONF commit has been executed. For the described design, the recurring risk arises from: the change was drafted but device/site scope and deployment were not completed. The specific required safeguard is: apply change templates through reviewed sites and post-deployment compliance checks.
B:That control reduces a separate risk: A model-generated insight was treated as definitive without corroborating observations. For the described design, the recurring risk arises from: the change was drafted but device/site scope and deployment were not completed. The specific required safeguard is: apply change templates through reviewed sites and post-deployment compliance checks.
D:That control reduces a separate risk: Required device integration, credentials or telemetry sources for Assurance are incomplete. For the described design, the recurring risk arises from: the change was drafted but device/site scope and deployment were not completed. The specific required safeguard is: apply change templates through reviewed sites and post-deployment compliance checks.
Question 572
A Catalyst Center AI-assisted assurance tile flags a potential root cause for intermittent client drops, but operators want independent confirmation. The incident evidence is: A team changes routing because an AI tile mentions congestion with no matching traffic evidence. Which targeted configuration or design change best addresses the failure?
- Use supported Catalyst Center template/provisioning workflow with target device scope and staged validation.
- Correlate AI insights with actual device telemetry, client timeline and path tests before remediation.
- Use supported Cisco Catalyst Center assurance telemetry, inventory and path trace workflows.
- Inspect device interface counters and compare deltas with SNMP interface telemetry as appropriate.
Explanation
Correct Answer
B:The required correction is: Correlate AI insights with actual device telemetry, client timeline and path tests before remediation. The underlying failure mechanism is: A model-generated insight was treated as definitive without corroborating observations. Verify success by carrying out this direct test: compare the suggested fault time to measured interface errors and packet loss on affected clients.
Incorrect Answers
A:Using supported Catalyst Center template/provisioning workflow with target device scope and staged validation would not correlate AI insights with actual device telemetry, client timeline and path tests.
C:Using supported Cisco Catalyst Center assurance telemetry, inventory and path trace workflows would not correlate AI insights with actual device telemetry, client timeline and path tests.
D:Inspecting device interface counters and comparing deltas with SNMP interface telemetry as appropriate would not correlate AI insights with actual device telemetry, client timeline and path tests.
Question 573
A Catalyst Center AI-assisted assurance tile flags a potential root cause for intermittent client drops, but operators want independent confirmation. The proposed remedy is: Correlate AI insights with actual device telemetry, client timeline and path tests before remediation. Which observation would most directly confirm that remedy works as intended?
- Correlate rising errors/discards on the affected port with link test times.
- Preview intended differences and verify running configuration and compliance on a pilot device.
- Inspect an affected client path/health issue and drill into specific device/interface evidence.
- Compare the suggested fault time to measured interface errors and packet loss on affected clients.
Explanation
Correct Answer
D:The decisive acceptance observation is: Compare the suggested fault time to measured interface errors and packet loss on affected clients. This tests the working mechanism, while the original incident was: a team changes routing because an AI tile mentions congestion with no matching traffic evidence.
Incorrect Answers
A:This test measures a different behavior: Correlate rising errors/discards on the affected port with link test times. It does not establish the target outcome. For the documented fault, the direct acceptance test is: compare the suggested fault time to measured interface errors and packet loss on affected clients.
B:This test measures a different behavior: Preview intended differences and verify running configuration and compliance on a pilot device. It does not establish the target outcome. For the documented fault, the direct acceptance test is: compare the suggested fault time to measured interface errors and packet loss on affected clients.
C:This test measures a different behavior: Inspect an affected client path/health issue and drill into specific device/interface evidence. It does not establish the target outcome. For the documented fault, the direct acceptance test is: compare the suggested fault time to measured interface errors and packet loss on affected clients.
Question 574
A Catalyst Center AI-assisted assurance tile flags a potential root cause for intermittent client drops, but operators want independent confirmation. During troubleshooting: A team changes routing because an AI tile mentions congestion with no matching traffic evidence. Which underlying cause best explains the recorded behavior?
- Required device integration, credentials or telemetry sources for Assurance are incomplete.
- No per-interface error counter inspection was performed to distinguish media faults from software failures.
- The change was drafted but device/site scope and deployment were not completed.
- A model-generated insight was treated as definitive without corroborating observations.
Explanation
Correct Answer
D:The actual technical cause is: A model-generated insight was treated as definitive without corroborating observations. It specifically explains the observation: a team changes routing because an AI tile mentions congestion with no matching traffic evidence. The correcting configuration is: correlate AI insights with actual device telemetry, client timeline and path tests before remediation.
Incorrect Answers
A:That diagnosis is supported by a different symptom: An administrator assumes inventory registration alone automatically populates all assurance metrics without telemetry collection. Here the recorded observation is: a team changes routing because an AI tile mentions congestion with no matching traffic evidence. The applicable cause is: a model-generated insight was treated as definitive without corroborating observations.
B:That diagnosis is supported by a different symptom: A host application reports retransmissions, but engineers cannot isolate the damaged physical link. Here the recorded observation is: a team changes routing because an AI tile mentions congestion with no matching traffic evidence. The applicable cause is: a model-generated insight was treated as definitive without corroborating observations.
C:That diagnosis is supported by a different symptom: Some switches keep old configuration because the template was not provisioned to their site inventory. Here the recorded observation is: a team changes routing because an AI tile mentions congestion with no matching traffic evidence. The applicable cause is: a model-generated insight was treated as definitive without corroborating observations.
Question 575
A Catalyst Center AI-assisted assurance tile flags a potential root cause for intermittent client drops, but operators want independent confirmation. Select TWO complementary decisions: the direct technical remedy and a safeguard against recurrence. A verification-only step cannot substitute for either action.
- Correlate AI insights with actual device telemetry, client timeline and path tests before remediation.
- Inspect device interface counters and compare deltas with SNMP interface telemetry as appropriate.
- Apply change templates through reviewed sites and post-deployment compliance checks.
- Keep operator review and telemetry evidence alongside AI-assisted network recommendations.
- Use supported Cisco Catalyst Center assurance telemetry, inventory and path trace workflows.
Explanation
Correct Answers
A:The required correction is: Correlate AI insights with actual device telemetry, client timeline and path tests before remediation. The underlying failure mechanism is: A model-generated insight was treated as definitive without corroborating observations. Verify success by carrying out this direct test: compare the suggested fault time to measured interface errors and packet loss on affected clients.
D:The continuing protective control is: Keep operator review and telemetry evidence alongside AI-assisted network recommendations. This addresses the underlying failure mechanism: a model-generated insight was treated as definitive without corroborating observations. The corresponding operational check is: compare the suggested fault time to measured interface errors and packet loss on affected clients.
Incorrect Answers
B:Interface counters provide useful evidence, but isolated counter snapshots do not independently correlate the affected client, timeline and network path.
C:That control reduces a separate risk: The change was drafted but device/site scope and deployment were not completed. For the described design, the recurring risk arises from: a model-generated insight was treated as definitive without corroborating observations. The specific required safeguard is: keep operator review and telemetry evidence alongside AI-assisted network recommendations.
E:The assurance interface is where the AI suggestion originated; using it alone is not independent corroboration from device and path evidence.
Question 576
A device must expose structured operational/configuration data over a standards-based SSH management session, and the client needs YANG-based datastores. The incident evidence is: SSH login works but NETCONF client cannot complete hello/capability negotiation. Which targeted configuration or design change best addresses the failure?
- Use the supported NETCONF lock/edit-config/commit workflow to apply candidate changes to the running datastore after reviewing the proposed edit.
- Correlate AI insights with actual device telemetry, client timeline and path tests before remediation.
- Enable supported RESTCONF and HTTPS/AAA prerequisites, then make a correctly authenticated RESTCONF request.
- Enable supported NETCONF on the device with proper SSH, credentials and YANG capability negotiation.
Explanation
Correct Answer
D:The required correction is: Enable supported NETCONF on the device with proper SSH, credentials and YANG capability negotiation. The underlying failure mechanism is: The device lacks effective NETCONF service or proper transport/session setup. Verify success by carrying out this direct test: establish a NETCONF session, inspect hello capabilities and read the intended datastore.
Incorrect Answers
A:The change exists only in the candidate datastore because no supported NETCONF commit has been executed. The device lacks effective NETCONF service or proper transport/session setup.
B:A model-generated insight was treated as definitive without corroborating observations. The device lacks effective NETCONF service or proper transport/session setup.
C:NETCONF availability does not automatically enable the separate HTTPS RESTCONF service. The device lacks effective NETCONF service or proper transport/session setup.
Question 577
A device must expose structured operational/configuration data over a standards-based SSH management session, and the client needs YANG-based datastores. The proposed remedy is: Enable supported NETCONF on the device with proper SSH, credentials and YANG capability negotiation. Which observation would most directly confirm that remedy works as intended?
- Compare the suggested fault time to measured interface errors and packet loss on affected clients.
- Establish a NETCONF session, inspect hello capabilities and read the intended datastore.
- Read the advertised :candidate capability, issue the authorized commit and inspect get-config of running to confirm the intended change.
- Send a GET to the supported RESTCONF data path and inspect JSON/XML and HTTP status.
Explanation
Correct Answer
B:The decisive acceptance observation is: Establish a NETCONF session, inspect hello capabilities and read the intended datastore. This tests the working mechanism, while the original incident was: sSH login works but NETCONF client cannot complete hello/capability negotiation.
Incorrect Answers
A:This test measures a different behavior: Compare the suggested fault time to measured interface errors and packet loss on affected clients. It does not establish the target outcome. For the documented fault, the direct acceptance test is: establish a NETCONF session, inspect hello capabilities and read the intended datastore.
C:This test measures a different behavior: Read the advertised :candidate capability, issue the authorized commit and inspect get-config of running to confirm the intended change. It does not establish the target outcome. For the documented fault, the direct acceptance test is: establish a NETCONF session, inspect hello capabilities and read the intended datastore.
D:This test measures a different behavior: Send a GET to the supported RESTCONF data path and inspect JSON/XML and HTTP status. It does not establish the target outcome. For the documented fault, the direct acceptance test is: establish a NETCONF session, inspect hello capabilities and read the intended datastore.
Question 578
A device must expose structured operational/configuration data over a standards-based SSH management session, and the client needs YANG-based datastores. During troubleshooting: SSH login works but NETCONF client cannot complete hello/capability negotiation. Which underlying cause best explains the recorded behavior?
- NETCONF availability does not automatically enable the separate HTTPS RESTCONF service.
- The device lacks effective NETCONF service or proper transport/session setup.
- The change exists only in the candidate datastore because no supported NETCONF commit has been executed.
- A model-generated insight was treated as definitive without corroborating observations.
Explanation
Correct Answer
B:The actual technical cause is: The device lacks effective NETCONF service or proper transport/session setup. It specifically explains the observation: sSH login works but NETCONF client cannot complete hello/capability negotiation. The correcting configuration is: enable supported NETCONF on the device with proper SSH, credentials and YANG capability negotiation.
Incorrect Answers
A:That diagnosis is supported by a different symptom: An HTTPS RESTCONF request receives a service error even though a NETCONF SSH session succeeds. Here the recorded observation is: sSH login works but NETCONF client cannot complete hello/capability negotiation. The applicable cause is: the device lacks effective NETCONF service or proper transport/session setup.
C:That diagnosis is supported by a different symptom: The candidate edit is successful, but operational interface configuration remains at its old value. Here the recorded observation is: sSH login works but NETCONF client cannot complete hello/capability negotiation. The applicable cause is: the device lacks effective NETCONF service or proper transport/session setup.
D:That diagnosis is supported by a different symptom: A team changes routing because an AI tile mentions congestion with no matching traffic evidence. Here the recorded observation is: sSH login works but NETCONF client cannot complete hello/capability negotiation. The applicable cause is: the device lacks effective NETCONF service or proper transport/session setup.
Question 579
A device must expose structured operational/configuration data over a standards-based SSH management session, and the client needs YANG-based datastores. The initial change is: Enable supported NETCONF on the device with proper SSH, credentials and YANG capability negotiation. Which continuing control most directly prevents a recurrence of the documented problem: SSH login works but NETCONF client cannot complete hello/capability negotiation.
- Apply AAA and management ACL controls around NETCONF rather than opening arbitrary SSH access.
- Keep operator review and telemetry evidence alongside AI-assisted network recommendations.
- Check capabilities and candidate support per IOS XE release; lock, validate, commit and unlock using reviewed change procedures.
- Monitor management plane HTTPS certificates, ACL and API authorization on RESTCONF endpoints.
Explanation
Correct Answer
A:The continuing protective control is: Apply AAA and management ACL controls around NETCONF rather than opening arbitrary SSH access. This addresses the underlying failure mechanism: the device lacks effective NETCONF service or proper transport/session setup. The corresponding operational check is: establish a NETCONF session, inspect hello capabilities and read the intended datastore.
Incorrect Answers
B:That control reduces a separate risk: A model-generated insight was treated as definitive without corroborating observations. For the described design, the recurring risk arises from: the device lacks effective NETCONF service or proper transport/session setup. The specific required safeguard is: apply AAA and management ACL controls around NETCONF rather than opening arbitrary SSH access.
C:That control reduces a separate risk: The change exists only in the candidate datastore because no supported NETCONF commit has been executed. For the described design, the recurring risk arises from: the device lacks effective NETCONF service or proper transport/session setup. The specific required safeguard is: apply AAA and management ACL controls around NETCONF rather than opening arbitrary SSH access.
D:That control reduces a separate risk: NETCONF availability does not automatically enable the separate HTTPS RESTCONF service. For the described design, the recurring risk arises from: the device lacks effective NETCONF service or proper transport/session setup. The specific required safeguard is: apply AAA and management ACL controls around NETCONF rather than opening arbitrary SSH access.
Question 580
A Cisco IOS XE automation client needs HTTPS-accessible YANG data via RESTCONF, but the router has only NETCONF over SSH enabled. The incident evidence is: An HTTPS RESTCONF request receives a service error even though a NETCONF SSH session succeeds. Which targeted configuration or design change best addresses the failure?
- Use supported Cisco Catalyst Center assurance telemetry, inventory and path trace workflows.
- Use the supported NETCONF lock/edit-config/commit workflow to apply candidate changes to the running datastore after reviewing the proposed edit.
- Enable supported NETCONF on the device with proper SSH, credentials and YANG capability negotiation.
- Enable supported RESTCONF and HTTPS/AAA prerequisites, then make a correctly authenticated RESTCONF request.
Explanation
Correct Answer
D:The required correction is: Enable supported RESTCONF and HTTPS/AAA prerequisites, then make a correctly authenticated RESTCONF request. The underlying failure mechanism is: NETCONF availability does not automatically enable the separate HTTPS RESTCONF service. Verify success by carrying out this direct test: send a GET to the supported RESTCONF data path and inspect JSON/XML and HTTP status.
Incorrect Answers
A:Required device integration, credentials or telemetry sources for Assurance are incomplete. NETCONF availability does not automatically enable the separate HTTPS RESTCONF service.
B:The change exists only in the candidate datastore because no supported NETCONF commit has been executed. NETCONF availability does not automatically enable the separate HTTPS RESTCONF service.
C:The device lacks effective NETCONF service or proper transport/session setup. NETCONF availability does not automatically enable the separate HTTPS RESTCONF service.
Implementing Cisco Enterprise Network Core Technologies (ENCOR) (350-401) Practice Tests