Question 880
After Harbor Metro deploys API bearer token scope to authenticate a network automation script without embedding broad shared passwords, the primary acceptance check passes (authorized operations succeed while unrelated administrative calls are denied). What remaining operational risk should still be part of the design review?
- Retry policy must avoid flooding a degraded control-plane endpoint.
- Key changes may alter API resource identities and automation references.
- Not every model path supports ON_CHANGE semantics.
- Token expiration and rotation must be handled without weakening auditability.
Explanation
Correct Answer
D:The relevant boundary of API bearer token scope is that token expiration and rotation must be handled without weakening auditability. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to Python GET response handling in a different scenario where operators need to read router status via REST API without assuming every request succeeds. For the deployed API bearer token scope approach, the relevant caution is instead that token expiration and rotation must be handled without weakening auditability.
B:This concern applies to YANG list key uniqueness in a different scenario where operators need to model several ordered or keyed interface entries without ambiguous instance paths. For the deployed API bearer token scope approach, the relevant caution is instead that token expiration and rotation must be handled without weakening auditability.
C:This concern applies to gNMI ON_CHANGE subscription in a different scenario where operators need to receive notifications only when eligible operational state leaves change. For the deployed API bearer token scope approach, the relevant caution is instead that token expiration and rotation must be handled without weakening auditability.
Question 881
Summit Service Provider must prevent a telemetry collection script from exceeding API request quotas. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- HTTP 429 rate-limit handling
- idempotent API change design
- YANG operational versus config state
- gNMI streaming subscription
Explanation
Correct Answer
A:HTTP 429 rate-limit handling matches this requirement: the team should respect 429 responses and the server's Retry-After or documented backoff policy. A relevant outcome would be that the client reduces request frequency and succeeds after the rate limit interval.
Incorrect Answers
B:idempotent API change design instead addresses a different condition: retry a lost automation response without creating duplicate persistent service objects. It would instead require you to use an idempotent operation or stable resource identity with precondition checks, not the stated goal to prevent a telemetry collection script from exceeding API request quotas.
C:YANG operational versus config state instead addresses a different condition: separate a read-only interface counter from an editable interface configuration leaf. It would instead require you to use YANG config false operational nodes for observed state and config true nodes for settings, not the stated goal to prevent a telemetry collection script from exceeding API request quotas.
D:gNMI streaming subscription instead addresses a different condition: collect continuously updated interface telemetry from a router without repeated shell polling. It would instead require you to subscribe to the supported gNMI model path using an authenticated gRPC session, not the stated goal to prevent a telemetry collection script from exceeding API request quotas.
Question 882
At Ridgeway Networks, the engineering change is approved for HTTP 429 rate-limit handling. The specific goal is to prevent a telemetry collection script from exceeding API request quotas. Which implementation step belongs in this change plan?
- Use an idempotent operation or stable resource identity with precondition checks.
- Respect 429 responses and the server's Retry-After or documented backoff policy.
- Use YANG config false operational nodes for observed state and config true nodes for settings.
- Subscribe to the supported gNMI model path using an authenticated gRPC session.
Explanation
Correct Answer
B:Implementing HTTP 429 rate-limit handling requires the operator to respect 429 responses and the server's Retry-After or documented backoff policy. This makes the required goal testable using evidence that the client reduces request frequency and succeeds after the rate limit interval.
Incorrect Answers
A:The proposed step is for idempotent API change design, whose purpose is to retry a lost automation response without creating duplicate persistent service objects. It would not perform the necessary HTTP 429 rate-limit handling operation: respect 429 responses and the server's Retry-After or documented backoff policy.
C:The proposed step is for YANG operational versus config state, whose purpose is to separate a read-only interface counter from an editable interface configuration leaf. It would not perform the necessary HTTP 429 rate-limit handling operation: respect 429 responses and the server's Retry-After or documented backoff policy.
D:The proposed step is for gNMI streaming subscription, whose purpose is to collect continuously updated interface telemetry from a router without repeated shell polling. It would not perform the necessary HTTP 429 rate-limit handling operation: respect 429 responses and the server's Retry-After or documented backoff policy.
Question 883
Lakeside Transport has deployed HTTP 429 rate-limit handling to prevent a telemetry collection script from exceeding API request quotas. The implementation step was to respect 429 responses and the server's Retry-After or documented backoff policy. Which observation demonstrates that the requested service is working?
- Replaying the request results in the single intended final state.
- Clients can read counters but cannot write them as configuration updates.
- The client reduces request frequency and succeeds after the rate limit interval.
- The collector receives matching sampled or event-driven updates for the requested path.
Explanation
Correct Answer
C:For HTTP 429 rate-limit handling, successful verification means that the client reduces request frequency and succeeds after the rate limit interval. That evidence directly tests whether the provider can prevent a telemetry collection script from exceeding API request quotas after deployment.
Incorrect Answers
A:The observation would verify idempotent API change design under the separate requirement to retry a lost automation response without creating duplicate persistent service objects. It does not demonstrate the needed HTTP 429 rate-limit handling result: the client reduces request frequency and succeeds after the rate limit interval.
B:The observation would verify YANG operational versus config state under the separate requirement to separate a read-only interface counter from an editable interface configuration leaf. It does not demonstrate the needed HTTP 429 rate-limit handling result: the client reduces request frequency and succeeds after the rate limit interval.
D:The observation would verify gNMI streaming subscription under the separate requirement to collect continuously updated interface telemetry from a router without repeated shell polling. It does not demonstrate the needed HTTP 429 rate-limit handling result: the client reduces request frequency and succeeds after the rate limit interval.
Question 884
While troubleshooting HTTP 429 rate-limit handling at Coastal Communications, the intended acceptance outcome is still missing: the client reduces request frequency and succeeds after the rate limit interval. Which fault condition should be investigated first for this particular design?
- An unconditional POST is repeated despite the possibility it already succeeded.
- The script attempts to edit a read-only operational counter.
- A one-time configuration RPC is mistaken for a continuing telemetry subscription.
- The script immediately retries every failed call in a tight loop.
Explanation
Correct Answer
D:The suspected defect directly frustrates HTTP 429 rate-limit handling: the script immediately retries every failed call in a tight loop. Correcting it should allow verification that the client reduces request frequency and succeeds after the rate limit interval.
Incorrect Answers
A:This defect belongs to idempotent API change design, where the affected outcome is to retry a lost automation response without creating duplicate persistent service objects. It is not the direct failure mode identified for the HTTP 429 rate-limit handling design in this case: the script immediately retries every failed call in a tight loop.
B:This defect belongs to YANG operational versus config state, where the affected outcome is to separate a read-only interface counter from an editable interface configuration leaf. It is not the direct failure mode identified for the HTTP 429 rate-limit handling design in this case: the script immediately retries every failed call in a tight loop.
C:This defect belongs to gNMI streaming subscription, where the affected outcome is to collect continuously updated interface telemetry from a router without repeated shell polling. It is not the direct failure mode identified for the HTTP 429 rate-limit handling design in this case: the script immediately retries every failed call in a tight loop.
Question 885
After Bluebird Infrastructure deploys HTTP 429 rate-limit handling to prevent a telemetry collection script from exceeding API request quotas, the primary acceptance check passes (the client reduces request frequency and succeeds after the rate limit interval). What remaining operational risk should still be part of the design review?
- Rate limiting may still require global coordination among multiple workers.
- Not all vendor-specific POST endpoints guarantee idempotent behavior.
- Stale telemetry can differ from the last intended configuration snapshot.
- Subscription cadence and available paths depend on target implementation.
Explanation
Correct Answer
A:The relevant boundary of HTTP 429 rate-limit handling is that rate limiting may still require global coordination among multiple workers. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to idempotent API change design in a different scenario where operators need to retry a lost automation response without creating duplicate persistent service objects. For the deployed HTTP 429 rate-limit handling approach, the relevant caution is instead that rate limiting may still require global coordination among multiple workers.
C:This concern applies to YANG operational versus config state in a different scenario where operators need to separate a read-only interface counter from an editable interface configuration leaf. For the deployed HTTP 429 rate-limit handling approach, the relevant caution is instead that rate limiting may still require global coordination among multiple workers.
D:This concern applies to gNMI streaming subscription in a different scenario where operators need to collect continuously updated interface telemetry from a router without repeated shell polling. For the deployed HTTP 429 rate-limit handling approach, the relevant caution is instead that rate limiting may still require global coordination among multiple workers.
Question 886
Horizon Exchange must retry a lost automation response without creating duplicate persistent service objects. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- API bearer token scope
- idempotent API change design
- YANG list key uniqueness
- IPFIX template metadata
Explanation
Correct Answer
B:idempotent API change design matches this requirement: the team should use an idempotent operation or stable resource identity with precondition checks. A relevant outcome would be that replaying the request results in the single intended final state.
Incorrect Answers
A:API bearer token scope instead addresses a different condition: authenticate a network automation script without embedding broad shared passwords. It would instead require you to supply a scoped bearer token over TLS and restrict access to required endpoints, not the stated goal to retry a lost automation response without creating duplicate persistent service objects.
C:YANG list key uniqueness instead addresses a different condition: model several ordered or keyed interface entries without ambiguous instance paths. It would instead require you to define a YANG list with a suitable unique key leaf for each instance, not the stated goal to retry a lost automation response without creating duplicate persistent service objects.
D:IPFIX template metadata instead addresses a different condition: allow collectors to interpret variable flow record fields correctly. It would instead require you to export matching IPFIX templates before or with the associated data records, not the stated goal to retry a lost automation response without creating duplicate persistent service objects.
Question 887
At Cedar Wireless, the engineering change is approved for idempotent API change design. The specific goal is to retry a lost automation response without creating duplicate persistent service objects. Which implementation step belongs in this change plan?
- Supply a scoped bearer token over TLS and restrict access to required endpoints.
- Define a YANG list with a suitable unique key leaf for each instance.
- Use an idempotent operation or stable resource identity with precondition checks.
- Export matching IPFIX templates before or with the associated data records.
Explanation
Correct Answer
C:Implementing idempotent API change design requires the operator to use an idempotent operation or stable resource identity with precondition checks. This makes the required goal testable using evidence that replaying the request results in the single intended final state.
Incorrect Answers
A:The proposed step is for API bearer token scope, whose purpose is to authenticate a network automation script without embedding broad shared passwords. It would not perform the necessary idempotent API change design operation: use an idempotent operation or stable resource identity with precondition checks.
B:The proposed step is for YANG list key uniqueness, whose purpose is to model several ordered or keyed interface entries without ambiguous instance paths. It would not perform the necessary idempotent API change design operation: use an idempotent operation or stable resource identity with precondition checks.
D:The proposed step is for IPFIX template metadata, whose purpose is to allow collectors to interpret variable flow record fields correctly. It would not perform the necessary idempotent API change design operation: use an idempotent operation or stable resource identity with precondition checks.
Question 888
Willow Regional has deployed idempotent API change design to retry a lost automation response without creating duplicate persistent service objects. The implementation step was to use an idempotent operation or stable resource identity with precondition checks. Which observation demonstrates that the requested service is working?
- Authorized operations succeed while unrelated administrative calls are denied.
- Clients can address one specific modeled entry by its stable key.
- The collector decodes flow fields by template ID and observation domain.
- Replaying the request results in the single intended final state.
Explanation
Correct Answer
D:For idempotent API change design, successful verification means that replaying the request results in the single intended final state. That evidence directly tests whether the provider can retry a lost automation response without creating duplicate persistent service objects after deployment.
Incorrect Answers
A:The observation would verify API bearer token scope under the separate requirement to authenticate a network automation script without embedding broad shared passwords. It does not demonstrate the needed idempotent API change design result: replaying the request results in the single intended final state.
B:The observation would verify YANG list key uniqueness under the separate requirement to model several ordered or keyed interface entries without ambiguous instance paths. It does not demonstrate the needed idempotent API change design result: replaying the request results in the single intended final state.
C:The observation would verify IPFIX template metadata under the separate requirement to allow collectors to interpret variable flow record fields correctly. It does not demonstrate the needed idempotent API change design result: replaying the request results in the single intended final state.
Question 889
While troubleshooting idempotent API change design at Atlas Backbone, the intended acceptance outcome is still missing: replaying the request results in the single intended final state. Which fault condition should be investigated first for this particular design?
- An unconditional POST is repeated despite the possibility it already succeeded.
- The token is exposed in query parameters or committed source files.
- Repeated unkeyed list elements are used where unique instance lookup is required.
- Data records arrive without a usable template and appear undecodable.
Explanation
Correct Answer
A:The suspected defect directly frustrates idempotent API change design: an unconditional POST is repeated despite the possibility it already succeeded. Correcting it should allow verification that replaying the request results in the single intended final state.
Incorrect Answers
B:This defect belongs to API bearer token scope, where the affected outcome is to authenticate a network automation script without embedding broad shared passwords. It is not the direct failure mode identified for the idempotent API change design design in this case: an unconditional POST is repeated despite the possibility it already succeeded.
C:This defect belongs to YANG list key uniqueness, where the affected outcome is to model several ordered or keyed interface entries without ambiguous instance paths. It is not the direct failure mode identified for the idempotent API change design design in this case: an unconditional POST is repeated despite the possibility it already succeeded.
D:This defect belongs to IPFIX template metadata, where the affected outcome is to allow collectors to interpret variable flow record fields correctly. It is not the direct failure mode identified for the idempotent API change design design in this case: an unconditional POST is repeated despite the possibility it already succeeded.
Question 890
After Starlight IP Services deploys idempotent API change design to retry a lost automation response without creating duplicate persistent service objects, the primary acceptance check passes (replaying the request results in the single intended final state). What remaining operational risk should still be part of the design review?
- Token expiration and rotation must be handled without weakening auditability.
- Not all vendor-specific POST endpoints guarantee idempotent behavior.
- Key changes may alter API resource identities and automation references.
- Template refresh and collector restart handling must be planned.
Explanation
Correct Answer
B:The relevant boundary of idempotent API change design is that not all vendor-specific POST endpoints guarantee idempotent behavior. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to API bearer token scope in a different scenario where operators need to authenticate a network automation script without embedding broad shared passwords. For the deployed idempotent API change design approach, the relevant caution is instead that not all vendor-specific POST endpoints guarantee idempotent behavior.
C:This concern applies to YANG list key uniqueness in a different scenario where operators need to model several ordered or keyed interface entries without ambiguous instance paths. For the deployed idempotent API change design approach, the relevant caution is instead that not all vendor-specific POST endpoints guarantee idempotent behavior.
D:This concern applies to IPFIX template metadata in a different scenario where operators need to allow collectors to interpret variable flow record fields correctly. For the deployed idempotent API change design approach, the relevant caution is instead that not all vendor-specific POST endpoints guarantee idempotent behavior.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests