Question 970
After Harbor Metro deploys NetFlow exporter source interface to repair an IOS XR NetFlow exporter that remains disabled because its source interface is missing, the primary acceptance check passes (flow UDP datagrams reach the intended collector with valid export source). What remaining operational risk should still be part of the design review?
- Template refresh and collector restart handling must be planned.
- Do not use an unsupported management interface for packet export.
- Patch semantics and module support must match the target router.
- Certificate revocation and bootstrap reachability must be planned.
Explanation
Correct Answer
B:The relevant boundary of NetFlow exporter source interface is that do not use an unsupported management interface for packet export. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to IPFIX template metadata in a different scenario where operators need to allow collectors to interpret variable flow record fields correctly. For the deployed NetFlow exporter source interface approach, the relevant caution is instead that do not use an unsupported management interface for packet export.
C:This concern applies to NETCONF interface edit scope in a different scenario where operators need to change only a specified modelled interface parameter using the device's NETCONF service. For the deployed NetFlow exporter source interface approach, the relevant caution is instead that do not use an unsupported management interface for packet export.
D:This concern applies to secure ZTP server authenticity in a different scenario where operators need to prevent a newly booted router from accepting malicious provisioning instructions. For the deployed NetFlow exporter source interface approach, the relevant caution is instead that do not use an unsupported management interface for packet export.
Question 971
Summit Service Provider must reduce accounting overhead on a high-rate provider interface. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- NetFlow exporter source interface
- RESTCONF management endpoint selection
- sampled NetFlow capacity
- idempotent API change design
Explanation
Correct Answer
C:sampled NetFlow capacity matches this requirement: the team should configure supported sampled NetFlow with a documented sampling rate. A relevant outcome would be that the collector reports sampled records with appropriate scaling and coverage.
Incorrect Answers
A:NetFlow exporter source interface instead addresses a different condition: repair an IOS XR NetFlow exporter that remains disabled because its source interface is missing. It would instead require you to configure a valid source interface in the exporter map and apply the monitor, not the stated goal to reduce accounting overhead on a high-rate provider interface.
B:RESTCONF management endpoint selection instead addresses a different condition: read YANG-modeled configuration from a device using an authenticated HTTPS client. It would instead require you to enable supported RESTCONF and query the intended data resource over TLS, not the stated goal to reduce accounting overhead on a high-rate provider interface.
D:idempotent API change design instead addresses a different condition: retry a lost automation response without creating duplicate persistent service objects. It would instead require you to use an idempotent operation or stable resource identity with precondition checks, not the stated goal to reduce accounting overhead on a high-rate provider interface.
Question 972
At Ridgeway Networks, the engineering change is approved for sampled NetFlow capacity. The specific goal is to reduce accounting overhead on a high-rate provider interface. Which implementation step belongs in this change plan?
- Configure a valid source interface in the exporter map and apply the monitor.
- Enable supported RESTCONF and query the intended data resource over TLS.
- Use an idempotent operation or stable resource identity with precondition checks.
- Configure supported sampled NetFlow with a documented sampling rate.
Explanation
Correct Answer
D:Implementing sampled NetFlow capacity requires the operator to configure supported sampled NetFlow with a documented sampling rate. This makes the required goal testable using evidence that the collector reports sampled records with appropriate scaling and coverage.
Incorrect Answers
A:The proposed step is for NetFlow exporter source interface, whose purpose is to repair an IOS XR NetFlow exporter that remains disabled because its source interface is missing. It would not perform the necessary sampled NetFlow capacity operation: configure supported sampled NetFlow with a documented sampling rate.
B:The proposed step is for RESTCONF management endpoint selection, whose purpose is to read YANG-modeled configuration from a device using an authenticated HTTPS client. It would not perform the necessary sampled NetFlow capacity operation: configure supported sampled NetFlow with a documented sampling rate.
C:The proposed step is for idempotent API change design, whose purpose is to retry a lost automation response without creating duplicate persistent service objects. It would not perform the necessary sampled NetFlow capacity operation: configure supported sampled NetFlow with a documented sampling rate.
Question 973
Lakeside Transport has deployed sampled NetFlow capacity to reduce accounting overhead on a high-rate provider interface. The implementation step was to configure supported sampled NetFlow with a documented sampling rate. Which observation demonstrates that the requested service is working?
- The collector reports sampled records with appropriate scaling and coverage.
- Flow UDP datagrams reach the intended collector with valid export source.
- The API returns the expected structured configuration with a successful HTTP status.
- Replaying the request results in the single intended final state.
Explanation
Correct Answer
A:For sampled NetFlow capacity, successful verification means that the collector reports sampled records with appropriate scaling and coverage. That evidence directly tests whether the provider can reduce accounting overhead on a high-rate provider interface after deployment.
Incorrect Answers
B:The observation would verify NetFlow exporter source interface under the separate requirement to repair an IOS XR NetFlow exporter that remains disabled because its source interface is missing. It does not demonstrate the needed sampled NetFlow capacity result: the collector reports sampled records with appropriate scaling and coverage.
C:The observation would verify RESTCONF management endpoint selection under the separate requirement to read YANG-modeled configuration from a device using an authenticated HTTPS client. It does not demonstrate the needed sampled NetFlow capacity result: the collector reports sampled records with appropriate scaling and coverage.
D:The observation would verify idempotent API change design under the separate requirement to retry a lost automation response without creating duplicate persistent service objects. It does not demonstrate the needed sampled NetFlow capacity result: the collector reports sampled records with appropriate scaling and coverage.
Question 974
While troubleshooting sampled NetFlow capacity at Coastal Communications, the intended acceptance outcome is still missing: the collector reports sampled records with appropriate scaling and coverage. Which fault condition should be investigated first for this particular design?
- An exporter destination is present but no exporter source interface is defined.
- Every packet is assumed to produce one complete flow record despite sampling.
- The client sends an unauthenticated HTTP request to a disabled RESTCONF endpoint.
- An unconditional POST is repeated despite the possibility it already succeeded.
Explanation
Correct Answer
B:The suspected defect directly frustrates sampled NetFlow capacity: every packet is assumed to produce one complete flow record despite sampling. Correcting it should allow verification that the collector reports sampled records with appropriate scaling and coverage.
Incorrect Answers
A:This defect belongs to NetFlow exporter source interface, where the affected outcome is to repair an IOS XR NetFlow exporter that remains disabled because its source interface is missing. It is not the direct failure mode identified for the sampled NetFlow capacity design in this case: every packet is assumed to produce one complete flow record despite sampling.
C:This defect belongs to RESTCONF management endpoint selection, where the affected outcome is to read YANG-modeled configuration from a device using an authenticated HTTPS client. It is not the direct failure mode identified for the sampled NetFlow capacity design in this case: every packet is assumed to produce one complete flow record despite sampling.
D:This defect belongs to idempotent API change design, where the affected outcome is to retry a lost automation response without creating duplicate persistent service objects. It is not the direct failure mode identified for the sampled NetFlow capacity design in this case: every packet is assumed to produce one complete flow record despite sampling.
Question 975
After Bluebird Infrastructure deploys sampled NetFlow capacity to reduce accounting overhead on a high-rate provider interface, the primary acceptance check passes (the collector reports sampled records with appropriate scaling and coverage). What remaining operational risk should still be part of the design review?
- Do not use an unsupported management interface for packet export.
- RESTCONF data models and URI paths must match platform implementation.
- Sampling introduces estimation error for short or sparse flows.
- Not all vendor-specific POST endpoints guarantee idempotent behavior.
Explanation
Correct Answer
C:The relevant boundary of sampled NetFlow capacity is that sampling introduces estimation error for short or sparse flows. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to NetFlow exporter source interface in a different scenario where operators need to repair an IOS XR NetFlow exporter that remains disabled because its source interface is missing. For the deployed sampled NetFlow capacity approach, the relevant caution is instead that sampling introduces estimation error for short or sparse flows.
B:This concern applies to RESTCONF management endpoint selection in a different scenario where operators need to read YANG-modeled configuration from a device using an authenticated HTTPS client. For the deployed sampled NetFlow capacity approach, the relevant caution is instead that sampling introduces estimation error for short or sparse flows.
D:This concern applies to idempotent API change design in a different scenario where operators need to retry a lost automation response without creating duplicate persistent service objects. For the deployed sampled NetFlow capacity approach, the relevant caution is instead that sampling introduces estimation error for short or sparse flows.
Question 976
Horizon Exchange must check a staged routing configuration before affecting the active running datastore. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- RESTCONF PATCH partial update
- API bearer token scope
- gNMI streaming subscription
- NETCONF candidate validation
Explanation
Correct Answer
D:NETCONF candidate validation matches this requirement: the team should use candidate edit validate and commit semantics where supported. A relevant outcome would be that invalid candidate changes are rejected before impacting forwarding.
Incorrect Answers
A:RESTCONF PATCH partial update instead addresses a different condition: modify a particular YANG-modeled setting without replacing the entire resource. It would instead require you to use an appropriate supported RESTCONF PATCH or PUT operation with precise target path, not the stated goal to check a staged routing configuration before affecting the active running datastore.
B:API bearer token scope instead addresses a different condition: authenticate a network automation script without embedding broad shared passwords. It would instead require you to supply a scoped bearer token over TLS and restrict access to required endpoints, not the stated goal to check a staged routing configuration before affecting the active running datastore.
C:gNMI streaming subscription instead addresses a different condition: collect continuously updated interface telemetry from a router without repeated shell polling. It would instead require you to subscribe to the supported gNMI model path using an authenticated gRPC session, not the stated goal to check a staged routing configuration before affecting the active running datastore.
Question 977
At Cedar Wireless, the engineering change is approved for NETCONF candidate validation. The specific goal is to check a staged routing configuration before affecting the active running datastore. Which implementation step belongs in this change plan?
- Use candidate edit validate and commit semantics where supported.
- Use an appropriate supported RESTCONF PATCH or PUT operation with precise target path.
- Supply a scoped bearer token over TLS and restrict access to required endpoints.
- Subscribe to the supported gNMI model path using an authenticated gRPC session.
Explanation
Correct Answer
A:Implementing NETCONF candidate validation requires the operator to use candidate edit validate and commit semantics where supported. This makes the required goal testable using evidence that invalid candidate changes are rejected before impacting forwarding.
Incorrect Answers
B:The proposed step is for RESTCONF PATCH partial update, whose purpose is to modify a particular YANG-modeled setting without replacing the entire resource. It would not perform the necessary NETCONF candidate validation operation: use candidate edit validate and commit semantics where supported.
C:The proposed step is for API bearer token scope, whose purpose is to authenticate a network automation script without embedding broad shared passwords. It would not perform the necessary NETCONF candidate validation operation: use candidate edit validate and commit semantics where supported.
D:The proposed step is for gNMI streaming subscription, whose purpose is to collect continuously updated interface telemetry from a router without repeated shell polling. It would not perform the necessary NETCONF candidate validation operation: use candidate edit validate and commit semantics where supported.
Question 978
Willow Regional has deployed NETCONF candidate validation to check a staged routing configuration before affecting the active running datastore. The implementation step was to use candidate edit validate and commit semantics where supported. Which observation demonstrates that the requested service is working?
- Only intended resource fields change and API response confirms success.
- Invalid candidate changes are rejected before impacting forwarding.
- Authorized operations succeed while unrelated administrative calls are denied.
- The collector receives matching sampled or event-driven updates for the requested path.
Explanation
Correct Answer
B:For NETCONF candidate validation, successful verification means that invalid candidate changes are rejected before impacting forwarding. That evidence directly tests whether the provider can check a staged routing configuration before affecting the active running datastore after deployment.
Incorrect Answers
A:The observation would verify RESTCONF PATCH partial update under the separate requirement to modify a particular YANG-modeled setting without replacing the entire resource. It does not demonstrate the needed NETCONF candidate validation result: invalid candidate changes are rejected before impacting forwarding.
C:The observation would verify API bearer token scope under the separate requirement to authenticate a network automation script without embedding broad shared passwords. It does not demonstrate the needed NETCONF candidate validation result: invalid candidate changes are rejected before impacting forwarding.
D:The observation would verify gNMI streaming subscription under the separate requirement to collect continuously updated interface telemetry from a router without repeated shell polling. It does not demonstrate the needed NETCONF candidate validation result: invalid candidate changes are rejected before impacting forwarding.
Question 979
While troubleshooting NETCONF candidate validation at Atlas Backbone, the intended acceptance outcome is still missing: invalid candidate changes are rejected before impacting forwarding. Which fault condition should be investigated first for this particular design?
- An unrestricted DELETE is used when a one-field update is needed.
- The token is exposed in query parameters or committed source files.
- The automation assumes every NETCONF target implements a separate candidate datastore.
- A one-time configuration RPC is mistaken for a continuing telemetry subscription.
Explanation
Correct Answer
C:The suspected defect directly frustrates NETCONF candidate validation: the automation assumes every NETCONF target implements a separate candidate datastore. Correcting it should allow verification that invalid candidate changes are rejected before impacting forwarding.
Incorrect Answers
A:This defect belongs to RESTCONF PATCH partial update, where the affected outcome is to modify a particular YANG-modeled setting without replacing the entire resource. It is not the direct failure mode identified for the NETCONF candidate validation design in this case: the automation assumes every NETCONF target implements a separate candidate datastore.
B:This defect belongs to API bearer token scope, where the affected outcome is to authenticate a network automation script without embedding broad shared passwords. It is not the direct failure mode identified for the NETCONF candidate validation design in this case: the automation assumes every NETCONF target implements a separate candidate datastore.
D:This defect belongs to gNMI streaming subscription, where the affected outcome is to collect continuously updated interface telemetry from a router without repeated shell polling. It is not the direct failure mode identified for the NETCONF candidate validation design in this case: the automation assumes every NETCONF target implements a separate candidate datastore.
Question 980
After Starlight IP Services deploys NETCONF candidate validation to check a staged routing configuration before affecting the active running datastore, the primary acceptance check passes (invalid candidate changes are rejected before impacting forwarding). What remaining operational risk should still be part of the design review?
- RESTCONF PATCH support and media types vary by platform release.
- Token expiration and rotation must be handled without weakening auditability.
- Subscription cadence and available paths depend on target implementation.
- NETCONF datastore capabilities are learned from server hello exchange.
Explanation
Correct Answer
D:The relevant boundary of NETCONF candidate validation is that NETCONF datastore capabilities are learned from server hello exchange. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to RESTCONF PATCH partial update in a different scenario where operators need to modify a particular YANG-modeled setting without replacing the entire resource. For the deployed NETCONF candidate validation approach, the relevant caution is instead that NETCONF datastore capabilities are learned from server hello exchange.
B:This concern applies to API bearer token scope in a different scenario where operators need to authenticate a network automation script without embedding broad shared passwords. For the deployed NETCONF candidate validation approach, the relevant caution is instead that NETCONF datastore capabilities are learned from server hello exchange.
C:This concern applies to gNMI streaming subscription in a different scenario where operators need to collect continuously updated interface telemetry from a router without repeated shell polling. For the deployed NETCONF candidate validation approach, the relevant caution is instead that NETCONF datastore capabilities are learned from server hello exchange.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests