Question 910
After Harbor Metro deploys YANG data type validation to reject a management API update containing an out-of-range configuration value, the primary acceptance check passes (invalid values fail model validation before being committed to devices). What remaining operational risk should still be part of the design review?
- Key changes may alter API resource identities and automation references.
- Vendor-specific deviations can alter model constraints across platforms.
- Patch semantics and module support must match the target router.
- Ownership voucher trust anchors must remain current and protected.
Explanation
Correct Answer
B:The relevant boundary of YANG data type validation is that vendor-specific deviations can alter model constraints across platforms. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to YANG list key uniqueness in a different scenario where operators need to model several ordered or keyed interface entries without ambiguous instance paths. For the deployed YANG data type validation approach, the relevant caution is instead that vendor-specific deviations can alter model constraints across platforms.
C:This concern applies to NETCONF interface edit scope in a different scenario where operators need to change only a specified modelled interface parameter using the device's NETCONF service. For the deployed YANG data type validation approach, the relevant caution is instead that vendor-specific deviations can alter model constraints across platforms.
D:This concern applies to secure ZTP device identity validation in a different scenario where operators need to onboard an unconfigured provider router across an untrusted initial management network. For the deployed YANG data type validation approach, the relevant caution is instead that vendor-specific deviations can alter model constraints across platforms.
Question 911
Summit Service Provider must separate a read-only interface counter from an editable interface configuration leaf. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- YANG data type validation
- SNMPv3 authPriv requirements
- YANG operational versus config state
- Ansible declarative desired configuration
Explanation
Correct Answer
C:YANG operational versus config state matches this requirement: the team should use YANG config false operational nodes for observed state and config true nodes for settings. A relevant outcome would be that clients can read counters but cannot write them as configuration updates.
Incorrect Answers
A:YANG data type validation instead addresses a different condition: reject a management API update containing an out-of-range configuration value. It would instead require you to define and enforce an appropriate YANG type and range restriction, not the stated goal to separate a read-only interface counter from an editable interface configuration leaf.
B:SNMPv3 authPriv requirements instead addresses a different condition: poll secure provider management counters with authentication and confidentiality. It would instead require you to configure SNMPv3 authPriv using current supported authenticated encryption settings, not the stated goal to separate a read-only interface counter from an editable interface configuration leaf.
D:Ansible declarative desired configuration instead addresses a different condition: apply a repeated standardized configuration across a provider router fleet. It would instead require you to use an idempotent Ansible playbook with platform-appropriate modules and diff checks, not the stated goal to separate a read-only interface counter from an editable interface configuration leaf.
Question 912
At Ridgeway Networks, the engineering change is approved for YANG operational versus config state. The specific goal is to separate a read-only interface counter from an editable interface configuration leaf. Which implementation step belongs in this change plan?
- Define and enforce an appropriate YANG type and range restriction.
- Configure SNMPv3 authPriv using current supported authenticated encryption settings.
- Use an idempotent Ansible playbook with platform-appropriate modules and diff checks.
- Use YANG config false operational nodes for observed state and config true nodes for settings.
Explanation
Correct Answer
D:Implementing YANG operational versus config state requires the operator to use YANG config false operational nodes for observed state and config true nodes for settings. This makes the required goal testable using evidence that clients can read counters but cannot write them as configuration updates.
Incorrect Answers
A:The proposed step is for YANG data type validation, whose purpose is to reject a management API update containing an out-of-range configuration value. It would not perform the necessary YANG operational versus config state operation: use YANG config false operational nodes for observed state and config true nodes for settings.
B:The proposed step is for SNMPv3 authPriv requirements, whose purpose is to poll secure provider management counters with authentication and confidentiality. It would not perform the necessary YANG operational versus config state operation: use YANG config false operational nodes for observed state and config true nodes for settings.
C:The proposed step is for Ansible declarative desired configuration, whose purpose is to apply a repeated standardized configuration across a provider router fleet. It would not perform the necessary YANG operational versus config state operation: use YANG config false operational nodes for observed state and config true nodes for settings.
Question 913
Lakeside Transport has deployed YANG operational versus config state to separate a read-only interface counter from an editable interface configuration leaf. The implementation step was to use YANG config false operational nodes for observed state and config true nodes for settings. Which observation demonstrates that the requested service is working?
- Clients can read counters but cannot write them as configuration updates.
- Invalid values fail model validation before being committed to devices.
- The NMS receives authorized data while unauthenticated or unencrypted requests fail.
- A second run makes no unexpected configuration change after convergence.
Explanation
Correct Answer
A:For YANG operational versus config state, successful verification means that clients can read counters but cannot write them as configuration updates. That evidence directly tests whether the provider can separate a read-only interface counter from an editable interface configuration leaf after deployment.
Incorrect Answers
B:The observation would verify YANG data type validation under the separate requirement to reject a management API update containing an out-of-range configuration value. It does not demonstrate the needed YANG operational versus config state result: clients can read counters but cannot write them as configuration updates.
C:The observation would verify SNMPv3 authPriv requirements under the separate requirement to poll secure provider management counters with authentication and confidentiality. It does not demonstrate the needed YANG operational versus config state result: clients can read counters but cannot write them as configuration updates.
D:The observation would verify Ansible declarative desired configuration under the separate requirement to apply a repeated standardized configuration across a provider router fleet. It does not demonstrate the needed YANG operational versus config state result: clients can read counters but cannot write them as configuration updates.
Question 914
While troubleshooting YANG operational versus config state at Coastal Communications, the intended acceptance outcome is still missing: clients can read counters but cannot write them as configuration updates. Which fault condition should be investigated first for this particular design?
- The automation accepts arbitrary strings for a bounded integer parameter.
- The script attempts to edit a read-only operational counter.
- An SNMPv2c community string is treated as equivalent to v3 authPriv security.
- A nonidempotent shell command appends duplicate configuration every run.
Explanation
Correct Answer
B:The suspected defect directly frustrates YANG operational versus config state: the script attempts to edit a read-only operational counter. Correcting it should allow verification that clients can read counters but cannot write them as configuration updates.
Incorrect Answers
A:This defect belongs to YANG data type validation, where the affected outcome is to reject a management API update containing an out-of-range configuration value. It is not the direct failure mode identified for the YANG operational versus config state design in this case: the script attempts to edit a read-only operational counter.
C:This defect belongs to SNMPv3 authPriv requirements, where the affected outcome is to poll secure provider management counters with authentication and confidentiality. It is not the direct failure mode identified for the YANG operational versus config state design in this case: the script attempts to edit a read-only operational counter.
D:This defect belongs to Ansible declarative desired configuration, where the affected outcome is to apply a repeated standardized configuration across a provider router fleet. It is not the direct failure mode identified for the YANG operational versus config state design in this case: the script attempts to edit a read-only operational counter.
Question 915
After Bluebird Infrastructure deploys YANG operational versus config state to separate a read-only interface counter from an editable interface configuration leaf, the primary acceptance check passes (clients can read counters but cannot write them as configuration updates). What remaining operational risk should still be part of the design review?
- Vendor-specific deviations can alter model constraints across platforms.
- Cipher and hash options depend on IOS XR release and platform support.
- Stale telemetry can differ from the last intended configuration snapshot.
- Module coverage and network access permissions vary by router OS.
Explanation
Correct Answer
C:The relevant boundary of YANG operational versus config state is that stale telemetry can differ from the last intended configuration snapshot. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to YANG data type validation in a different scenario where operators need to reject a management API update containing an out-of-range configuration value. For the deployed YANG operational versus config state approach, the relevant caution is instead that stale telemetry can differ from the last intended configuration snapshot.
B:This concern applies to SNMPv3 authPriv requirements in a different scenario where operators need to poll secure provider management counters with authentication and confidentiality. For the deployed YANG operational versus config state approach, the relevant caution is instead that stale telemetry can differ from the last intended configuration snapshot.
D:This concern applies to Ansible declarative desired configuration in a different scenario where operators need to apply a repeated standardized configuration across a provider router fleet. For the deployed YANG operational versus config state approach, the relevant caution is instead that stale telemetry can differ from the last intended configuration snapshot.
Question 916
Horizon Exchange must apply a repeated standardized configuration across a provider router fleet. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- Terraform plan before apply
- gNMI ON_CHANGE subscription
- IPFIX template metadata
- Ansible declarative desired configuration
Explanation
Correct Answer
D:Ansible declarative desired configuration matches this requirement: the team should use an idempotent Ansible playbook with platform-appropriate modules and diff checks. A relevant outcome would be that a second run makes no unexpected configuration change after convergence.
Incorrect Answers
A:Terraform plan before apply instead addresses a different condition: review configuration impact before making a broad service-provider change. It would instead require you to generate and approve the infrastructure plan prior to applying, not the stated goal to apply a repeated standardized configuration across a provider router fleet.
B:gNMI ON_CHANGE subscription instead addresses a different condition: receive notifications only when eligible operational state leaves change. It would instead require you to configure ON_CHANGE for supported state paths rather than fixed polling, not the stated goal to apply a repeated standardized configuration across a provider router fleet.
C:IPFIX template metadata instead addresses a different condition: allow collectors to interpret variable flow record fields correctly. It would instead require you to export matching IPFIX templates before or with the associated data records, not the stated goal to apply a repeated standardized configuration across a provider router fleet.
Question 917
At Cedar Wireless, the engineering change is approved for Ansible declarative desired configuration. The specific goal is to apply a repeated standardized configuration across a provider router fleet. Which implementation step belongs in this change plan?
- Use an idempotent Ansible playbook with platform-appropriate modules and diff checks.
- Generate and approve the infrastructure plan prior to applying.
- Configure ON_CHANGE for supported state paths rather than fixed polling.
- Export matching IPFIX templates before or with the associated data records.
Explanation
Correct Answer
A:Implementing Ansible declarative desired configuration requires the operator to use an idempotent Ansible playbook with platform-appropriate modules and diff checks. This makes the required goal testable using evidence that a second run makes no unexpected configuration change after convergence.
Incorrect Answers
B:The proposed step is for Terraform plan before apply, whose purpose is to review configuration impact before making a broad service-provider change. It would not perform the necessary Ansible declarative desired configuration operation: use an idempotent Ansible playbook with platform-appropriate modules and diff checks.
C:The proposed step is for gNMI ON_CHANGE subscription, whose purpose is to receive notifications only when eligible operational state leaves change. It would not perform the necessary Ansible declarative desired configuration operation: use an idempotent Ansible playbook with platform-appropriate modules and diff checks.
D:The proposed step is for IPFIX template metadata, whose purpose is to allow collectors to interpret variable flow record fields correctly. It would not perform the necessary Ansible declarative desired configuration operation: use an idempotent Ansible playbook with platform-appropriate modules and diff checks.
Question 918
Willow Regional has deployed Ansible declarative desired configuration to apply a repeated standardized configuration across a provider router fleet. The implementation step was to use an idempotent Ansible playbook with platform-appropriate modules and diff checks. Which observation demonstrates that the requested service is working?
- The reviewed plan enumerates proposed create update and delete operations.
- A second run makes no unexpected configuration change after convergence.
- The collector gets an event when the operational leaf changes.
- The collector decodes flow fields by template ID and observation domain.
Explanation
Correct Answer
B:For Ansible declarative desired configuration, successful verification means that a second run makes no unexpected configuration change after convergence. That evidence directly tests whether the provider can apply a repeated standardized configuration across a provider router fleet after deployment.
Incorrect Answers
A:The observation would verify Terraform plan before apply under the separate requirement to review configuration impact before making a broad service-provider change. It does not demonstrate the needed Ansible declarative desired configuration result: a second run makes no unexpected configuration change after convergence.
C:The observation would verify gNMI ON_CHANGE subscription under the separate requirement to receive notifications only when eligible operational state leaves change. It does not demonstrate the needed Ansible declarative desired configuration result: a second run makes no unexpected configuration change after convergence.
D:The observation would verify IPFIX template metadata under the separate requirement to allow collectors to interpret variable flow record fields correctly. It does not demonstrate the needed Ansible declarative desired configuration result: a second run makes no unexpected configuration change after convergence.
Question 919
While troubleshooting Ansible declarative desired configuration at Atlas Backbone, the intended acceptance outcome is still missing: a second run makes no unexpected configuration change after convergence. Which fault condition should be investigated first for this particular design?
- An unreviewed apply destroys a shared routing resource.
- SAMPLE polling is treated as proof the update was event-triggered.
- A nonidempotent shell command appends duplicate configuration every run.
- Data records arrive without a usable template and appear undecodable.
Explanation
Correct Answer
C:The suspected defect directly frustrates Ansible declarative desired configuration: a nonidempotent shell command appends duplicate configuration every run. Correcting it should allow verification that a second run makes no unexpected configuration change after convergence.
Incorrect Answers
A:This defect belongs to Terraform plan before apply, where the affected outcome is to review configuration impact before making a broad service-provider change. It is not the direct failure mode identified for the Ansible declarative desired configuration design in this case: a nonidempotent shell command appends duplicate configuration every run.
B:This defect belongs to gNMI ON_CHANGE subscription, where the affected outcome is to receive notifications only when eligible operational state leaves change. It is not the direct failure mode identified for the Ansible declarative desired configuration design in this case: a nonidempotent shell command appends duplicate configuration every run.
D:This defect belongs to IPFIX template metadata, where the affected outcome is to allow collectors to interpret variable flow record fields correctly. It is not the direct failure mode identified for the Ansible declarative desired configuration design in this case: a nonidempotent shell command appends duplicate configuration every run.
Question 920
After Starlight IP Services deploys Ansible declarative desired configuration to apply a repeated standardized configuration across a provider router fleet, the primary acceptance check passes (a second run makes no unexpected configuration change after convergence). What remaining operational risk should still be part of the design review?
- External drift can invalidate an earlier saved plan.
- Not every model path supports ON_CHANGE semantics.
- Template refresh and collector restart handling must be planned.
- Module coverage and network access permissions vary by router OS.
Explanation
Correct Answer
D:The relevant boundary of Ansible declarative desired configuration is that module coverage and network access permissions vary by router OS. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to Terraform plan before apply in a different scenario where operators need to review configuration impact before making a broad service-provider change. For the deployed Ansible declarative desired configuration approach, the relevant caution is instead that module coverage and network access permissions vary by router OS.
B:This concern applies to gNMI ON_CHANGE subscription in a different scenario where operators need to receive notifications only when eligible operational state leaves change. For the deployed Ansible declarative desired configuration approach, the relevant caution is instead that module coverage and network access permissions vary by router OS.
C:This concern applies to IPFIX template metadata in a different scenario where operators need to allow collectors to interpret variable flow record fields correctly. For the deployed Ansible declarative desired configuration approach, the relevant caution is instead that module coverage and network access permissions vary by router OS.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests