01. A retail chain's NOC forwards Cisco Meraki alerts into a ticketing tool. The tool accepts webhooks only in its own JSON schema and rejects anything else. An HTTP server entry with the tool's URL and a shared secret has been created on each Meraki network, and the tool refuses every delivery.
What should the engineer do?
a) Assign a custom payload template to the HTTP server entry so the dashboard sends each alert in the ticketing tool's JSON shape, and keep the shared secret so the tool can still verify the source
b) Have the ticketing tool poll each network's alert history on the alert interval and create tickets from any new entry
c) Configure an MQTT broker on each network and subscribe the tool to the alert topic
d) Point the HTTP server URL at the tool's API and rely on the tool to translate the dashboard's default payload
02. An MSP pilots an AI agent for its multi-tenant NOC, with the model hosted inside the MSP's own environment. The agent reads each customer ticket and the syslog lines attached to it, builds its own prompt from that text, and then calls an MCP tool run_show(device, command) that executes a command over Netmiko. The tool accepts only commands on a show allowlist and logs in with a read-only account whose credentials the server holds. The server does not record which tool calls were made or which request caused them. Rate limits are enforced on the agent.
Which two security risks does this design carry?
(Choose two.)
a) Prompt injection, because ticket text and syslog lines written by outsiders become the instructions the agent reasons over and can steer which devices and commands it chooses
b) Unvalidated autonomous changes, because the agent applies what it concludes from the output to the production network without review
c) Data exposure, because the agent authenticates the Netmiko session itself
d) Over-privileged credentials, because a shared account that can run any CLI command is available to every tenant's requests
e) Weak auditability, since no record ties a command to the request that caused it
03. A bank's network team wants to use a commercially hosted AI model to review its Cisco IOS XE configurations for inconsistencies. The proposed workflow sends each device's complete running configuration, including SNMP community strings, TACACS+ keys and the full ACL set, to the external model and returns the findings to an engineer, who decides what to change. The security review flags one risk in this workflow.
Which mitigation addresses the flagged risk?
a) Log every request sent to the model so that reviewers can later see which configurations were analyzed and when
b) Redact secrets from the configurations and enforce a policy on what may leave the bank
c) Give the model a read-only controller account so that it is unable to alter the configurations it reviews
d) Introduce an approval step in which a senior engineer signs off on every recommended change before it is pushed to any device
04. During a migration to Cisco Catalyst Center (formerly Cisco DNA Center), a global enterprise uses an AI assistant to write a script that forces an inventory resync of one device. The CI stage runs it against a lab controller and fails:
PUT https://cc-lab.example.com/dna/intent/api/v1/network-device/3f2a9c1e-77b4-4d0e-9a2b-5c6d7e8f9a0b/sync
HTTP 404
Asked to fix it, the assistant proposes adding verify=False to the call and appending ?forceSync=true, and states that the per-device sync path is documented. The reviewer checks the official API reference, which lists PUT /dna/intent/api/v1/network-device/sync with a JSON body containing a list of device UUIDs and an optional forceSync query parameter.
What should the reviewer conclude?
a) Accept verify=False for the lab stage only: the lab controller's self-signed certificate produced the 404, and verification can be restored later in the production pipeline
b) Accept the proposed fix, since forceSync=true is the documented way to force a resync on a device that the controller already considers current, and the 404 will clear once it is present
c) Re-authenticate at /dna/system/api/v1/auth/token before retrying, since the token expired
d) Reject both changes: the per-device path does not exist, so rewrite the call to the documented collection endpoint with the UUID in the body
05. A NOC team wants its AI assistant to run the same first-hour triage for any site: pull site health from Cisco Catalyst Center (formerly Cisco DNA Center), list the open issues and summarize them in a fixed format for the incident bridge. The engineers already expose the health and issue queries as FastMCP tools; they now want to package the triage instructions as a reusable template into which the assistant fills the site name.
Which FastMCP decorator provides this?
a) @mcp.resource(), which stores the triage steps as read-only context the assistant loads by URI
b) @mcp.tool(), which registers the instructions as an action
c) @mcp.prompt(), which exposes a reusable prompt template with parameters
d) mcp.run(), which starts the template
06. A lab team builds a CI pipeline that generates Cisco IOS XE Ansible playbooks with an AI coding assistant. Early drafts used a module argument that the cisco.ios collection does not accept and a state: value that does not exist, so each draft failed in the pipeline. The team revises how it prompts the assistant.
Which two prompt practices reduce these errors?
(Choose two.)
a) Ask the assistant to omit tests and error handling so the playbook stays short enough to review quickly
b) Have it generate placeholder credentials to avoid a first-run edit
c) Withhold the collection version so that the assistant chooses the most current syntax it has learned rather than being constrained to older documentation
d) Paste the relevant section of the official module reference into the prompt
e) Name the target platform and collection version so that the syntax matches
07. A university's network team builds a FastMCP server so an AI assistant can help with its Cisco Meraki deployment. The assistant must be able to load the list of the campus's Meraki networks (name, id and product types) as read-only context at the start of every session by referring to a fixed address, without treating it as an action it decides to invoke. The list is fetched from GET /organizations/{organizationId}/networks using a key held by the server.
How should the function that returns this list be registered?
a) By passing it to mcp.run() so it is published on startup
b) With @mcp.resource("meraki://networks"), so the client reads it as addressable read-only context rather than calling it as an action
c) With @mcp.tool(), so the assistant calls it with the organization id when it needs the list
d) With @mcp.prompt(), so the list is embedded in a reusable template
08. A hospital NOC builds one HTTPS receiver, hosted on a private address inside the data center, to take alerts from both its on-premises Cisco Catalyst Center (formerly Cisco DNA Center) and its Cisco Meraki networks. The Catalyst Center destination and subscription are created, and a Meraki HTTP server entry is created with a shared secret. Catalyst Center alerts arrive; Meraki alerts never do.
Which two statements explain what the Meraki side still needs?
(Choose two.)
a) The receiver must answer a GET with a validator string
b) Catalyst Center delivers its events as XML by default, so the receiver needs a second parser for them
c) The Meraki cloud must be able to reach the receiver's URL from the internet
d) The network's alert settings must name the HTTP server as a recipient for each alert type, because creating the server entry alone sends nothing
e) Both controllers publish alerts to an MQTT broker, so the receiver should subscribe to each broker's alert topic instead of exposing an HTTPS route
09. A financial-services firm monitors its branch networks from Cisco Catalyst Center (formerly Cisco DNA Center) site health, but traders at several branches report a slow cloud trading platform while every site score stays green. Each branch has a Cisco ThousandEyes Enterprise Agent.
How should the monitoring be extended so that the NOC sees that degradation?
a) Read the Catalyst Center Compliance report, which lists the cloud applications each branch reaches and their state
b) Pull the branch agents' test results and alerts from the ThousandEyes API into the dashboard
c) Run a Catalyst Center Path Trace from a trader's workstation to the platform's address and alert when a hop changes or fails
d) Deploy an EEM applet on each branch router that pings the platform's address every minute and logs any lost reply
10. A small business with a cloud-managed Cisco Meraki network wants its AI assistant to answer questions about clients and devices. Rather than write an MCP server, the office's IT contractor installs a community-published MCP server package from a public registry, gives it an organization-wide Dashboard API key through an environment variable and connects the assistant. The package has no listed maintainer and its code was not reviewed.
Which risk category does this introduce?
a) Prompt injection, because the community package's tools read Dashboard data that its author can alter to steer the assistant
b) Data exposure, because installing from a public registry publishes the organization's API key to the registry
c) Hallucinated code, because the package was generated by a model
d) Supply-chain risk, because unreviewed third-party code now runs with the organization's API key
The Cisco 300-435 Certification Sample Questions on this page help you become familiar with the question style and knowledge areas of the Cisco Certified DevNet Specialist Enterprise Automation and Programmability (ENAUTO) exam. Each question is written to reflect the syllabus topics and the level of understanding the certification expects, so you can see how theoretical concepts are tested in practice. Working through them lets you check your understanding, identify topics that need further study, and get comfortable interpreting certification-style questions before you sit the official exam.
