Question bank
Arista CloudVision Specialist
40 Arista CloudVision Specialist questions with the correct answer and a written explanation, organised across 4 exam domains.
- 40 questions
- 4 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Automation and Integration
8 questions in this domain
- Question 1Single Choice
What is the primary data serialization format used by CloudVision REST API?
- AJSONCorrect answer
- BProtocol Buffers
- CXML
- DYAML
Why this is the answer
CloudVision REST API uses JSON for data serialization, as stated in the document. Protocol Buffers are used by gRPC.
- Question 2Multiple Select
Which two statements are true about CloudVision's gRPC API?
- AIt uses HTTP/2 as transport protocolCorrect answer
- BIt uses token-based authentication
- CIt supports server streamingCorrect answer
- DIt uses JSON for payload serialization
Why this is the answer
gRPC uses HTTP/2 and supports server streaming. It uses certificate-based mTLS, not tokens, and Protocol Buffers, not JSON.
- Question 3Interactive
Examine the code block. What header is required to authenticate this REST API request?
- AAuthorization: Bearer <token>Correct answer
- BX-API-Key: <key>
- CContent-Type: application/json
- DUser-Agent: CloudVision
Why this is the answer
CloudVision REST API uses token-based authentication. The token must be included in the Authorization header as a Bearer token.
- Question 4Single Choice
Which API type is designed for high-performance bidirectional streaming of telemetry data?
- AREST API
- BgRPC APICorrect answer
- CSNMP API
- DNETCONF API
Why this is the answer
gRPC supports bidirectional streaming and is optimized for high-frequency telemetry. REST is pull-based and not designed for streaming.
- Question 5Multiple Select
Which two methods are used for pagination with CloudVision REST API?
- AUsing limit and offset parametersCorrect answer
- BUsing page tokensCorrect answer
- CUsing gRPC streaming
- DAutomatic pagination without parameters
Why this is the answer
The document states that REST API uses '?limit=' and '?offset=' or page tokens. gRPC streaming is not used for pagination.
- Question 6Interactive
Look at the HTTP request. What is the HTTP method being used?
- AGETCorrect answer
- BPOST
- CPUT
- DDELETE
Why this is the answer
The request line starts with 'GET', indicating a retrieval operation.
- Question 7Single Choice
What is the recommended approach for real-time event-driven automation in CloudVision?
- APolling REST API every second
- BUsing gRPC streaming subscriptionsCorrect answer
- CUsing SNMP traps only
- DUsing SSH periodic checks
Why this is the answer
gRPC streaming provides push-based, low-latency event delivery. Polling adds latency and load, and SNMP traps are unreliable.
- Question 8Multiple Select
Which two options are true regarding multi-vendor integration with CloudVision?
- AgNMI is preferred for read-only telemetryCorrect answer
- BCloudVision can fully configure any third-party device
- CSNMP is a common fallback for older devicesCorrect answer
- DAll multi-vendor devices support the same features as Arista devices
Why this is the answer
gNMI is recommended for monitoring, and SNMP is used as a fallback. Full configuration and feature parity are only possible with Arista devices.
CloudVision Architecture and Deployment
10 questions in this domain
- Question 9Single Choice
Which CloudVision component provides the primary web-based management interface and REST API gateway?
- ACloudVision Portal (CVP)Correct answer
- BCloudVision eXchange (CVX)
- CCloudVision Network Controller (CVNC)
- DTelemetry Database
Why this is the answer
CVP is the central management interface and API gateway, while CVX handles state relay and CVNC enforces policies.
- Question 10Multiple Select
Select two core functions of the CloudVision eXchange (CVX) component.
- ASecure state relay between switches and CVPCorrect answer
- BStorage of historical telemetry data
- CProxy for NetDB and BGP-LS informationCorrect answer
- DEnforcement of network policies
Why this is the answer
CVX relays state and proxies protocols like NetDB; it does not store data or enforce policies—those are done by the Telemetry DB and CVNC respectively.
- Question 11Interactive
Examine the script snippet below. What is its primary purpose?
- AConfigure BGP peering
- BPerform zero-touch provisioning onboardingCorrect answer
- CEnable streaming telemetry
- DShut down the switch
Why this is the answer
The script sets a hostname and registers the switch with CloudVision, which is part of ZTP Day-0 provisioning.
- Question 12Single Choice
What is the minimum number of CloudVision nodes required to form a highly available cluster?
- A2
- B3Correct answer
- C4
- D5
Why this is the answer
A 3-node cluster provides quorum; 2 nodes lack a tiebreaker and cannot maintain writes if one fails.
- Question 13Multiple Select
Which two requirements are necessary for a switch to successfully onboard using Zero-Touch Provisioning (ZTP)?
- ADHCP server offering Option 67 with a config URLCorrect answer
- BStatic IP configuration on the switch
- CIP reachability to the CloudVision clusterCorrect answer
- DPhysical console access to approve the device
Why this is the answer
ZTP relies on DHCP to provide a script URL and on network connectivity to reach CVP. Static IP or console access is not required.
- Question 14Interactive
Given the firewall rule below, which port is being opened for CloudVision telemetry?
- A443
- B22
- C8080Correct answer
- D514
Why this is the answer
CloudVision Collector listens on TCP port 8080 for streaming telemetry from switches. Port 443 is for GUI/API, 22 for SSH, 514 for syslog.
- Question 15Single Choice
Which CloudVision component is responsible for enforcing network policies?
- ACloudVision Portal (CVP)
- BCloudVision eXchange (CVX)
- CCloudVision Network Controller (CVNC)Correct answer
- DTelemetry Database
Why this is the answer
CVNC is the orchestration engine that enforces policies; CVP manages, CVX relays, and Telemetry DB stores data.
- Question 16Multiple Select
Which two characteristics describe CloudVision as-a-Service (CVaaS)?
- ARequires customer-managed server hardware
- BUses a subscription (OPEX) pricing modelCorrect answer
- CTelemetry data is stored only on-premises
- DAutomatic updates are provided by AristaCorrect answer
Why this is the answer
CVaaS is a cloud service with OPEX pricing and automatic upgrades. Customer servers are not needed, and data resides in Arista's cloud.
- Question 17Interactive
Consider the cluster status output below. If the leader node fails, what immediate effect occurs?
- AThe cluster stops processing all write operations permanently
- BThe follower nodes automatically elect a new leaderCorrect answer
- CWrites are rerouted to a follower until the leader recovers
- DA manual intervention is required to restore writes
Why this is the answer
In a 3-node cluster with quorum, if the leader fails, followers detect loss and elect a new leader within seconds. Writes are then served by the new leader.
- Question 18Single Choice
In CloudVision, what is the state of a switch that has completed ZTP but still requires manual approval before full provisioning?
- AProvisioned
- BStagingCorrect answer
- CRegistered
- DUnregistered
Why this is the answer
After ZTP, the device goes to 'Staging' until it is accepted manually or via auto-deploy. 'Registered' is before ZTP, 'Provisioned' is after approval.
Provisioning and Change Management
12 questions in this domain
- Question 19Single Choice
Which DHCP option is typically used to point a bare-metal Arista switch to the CloudVision bootstrap files during Zero-Touch Provisioning?
- AOption 67
- BOption 125Correct answer
- COption 151
- DOption 66
Why this is the answer
CloudVision ZTP uses DHCP option 125 for Arista-specific bootstrapping, as stated in the playbook.
- Question 20Multiple Select
Which of the following are correct statements about CloudVision configlets? (Select two.)
- AA configlet is a complete device startup configuration.
- BConfiglets are applied to devices via containers or tags.Correct answer
- CConfiglets can contain variables for dynamic substitution.Correct answer
- DConfiglets are automatically pushed to devices immediately upon creation.
Why this is the answer
Configlets are configuration fragments assigned via containers/tags and support variable substitution, but they are not full startup configs and require explicit application.
- Question 21Interactive
Study the following YAML data file used for template-based configuration deployment. Which issue will prevent CloudVision from rendering the template correctly?
- AThe template expects a variable 'vlan_list' but the data provides 'vlans'.
- BThe indentation is inconsistent (tab used instead of spaces).Correct answer
- CThe data file is missing a required 'device_id' field.
- DThe YAML file uses a .json extension but contains YAML content.
Why this is the answer
YAML strictly requires spaces for indentation; tabs cause parsing errors. CloudVision will reject the template rendering.
- Question 22Single Choice
What is the primary purpose of a Compliance Engine in CloudVision?
- AIt pushes configuration changes to devices.
- BIt continuously monitors device configurations against desired state.Correct answer
- CIt generates audit logs for user actions.
- DIt manages firmware image uploads.
Why this is the answer
The Compliance Engine continuously verifies that actual device configurations match the intended state defined by configlets and rules.
- Question 23Multiple Select
Which of the following are required to perform a rollback of a failed change control in CloudVision? (Select two.)
- AA pre-change snapshot must have been taken.Correct answer
- BThe change control must have been approved by two people.
- CThe rollback option must be enabled in the change control template.Correct answer
- DThe device must be in maintenance mode.
Why this is the answer
Pre-change snapshots capture the baseline for rollback, and the rollback action must be explicitly configured in the change control template.
- Question 24Interactive
Look at the following Jinja2 template snippet. What will be the output for a device with data 'hostname: leaf-01'?
- Ahostname leaf-01Correct answer
- Bhostname {{ hostname }}
- Cleaf-01
- Dhostname leaf01
Why this is the answer
Jinja2 variable substitution replaces {{ hostname }} with the actual value 'leaf-01', producing 'hostname leaf-01'.
- Question 25Single Choice
In CloudVision, where are EOS image files stored for firmware upgrades?
- AIn the Configlet database
- BIn the Analytics database
- CIn the Image Repository under /cvpi/images/Correct answer
- DIn the device flash memory
Why this is the answer
CVP stores uploaded image files in the Image Repository, specifically under /cvpi/images/ directory.
- Question 26Multiple Select
Which of the following are valid steps in a CloudVision change control workflow for a configlet update? (Select two.)
- ACreate workspace and stage changes
- BBuild workspace to preview configuration diffCorrect answer
- CApprove the change by a designated approverCorrect answer
- DAutomatically push config without approval
Why this is the answer
A typical change control includes building the workspace for preview and an approval step. Workspace creation is a prerequisite, not a step within the change control itself.
- Question 27Interactive
The following command is entered directly on an Arista switch's CLI. After this manual change, CloudVision will detect a drift. What is the correct remediation according to best practices?
- AIgnore the drift because the change was intentional.
- BApply the corresponding configlet via a change control.Correct answer
- CReboot the device to re-apply the last known good config.
- DDelete the device from CloudVision and re-add it via ZTP.
Why this is the answer
The correct practice is to re-apply the intended configlet through a change control, not to ignore or use disruptive methods.
- Question 28Single Choice
Which of the following is a key difference between Zero-Touch Provisioning (ZTP) and configlet-based provisioning?
- AZTP requires explicit approval; configlets do not.
- BZTP is a one-time bootstrapping process for unprovisioned devices.Correct answer
- CConfiglets are only used for Day-0 provisioning.
- DZTP pushes full configurations; configlets push only a fragment.
Why this is the answer
ZTP is a one-time process for initial device deployment; configlets manage ongoing configuration changes for already-managed devices.
- Question 29Multiple Select
Which of the following are true regarding CloudVision audit logs? (Select two.)
- AThey are stored on each managed device.
- BThey capture all user actions including logins and configlet edits.Correct answer
- CThey are automatically forwarded to a SIEM by default.
- DThey are centralized, searchable, and exportable.Correct answer
Why this is the answer
Audit logs reside centrally on CVP and record user activities, but forwarding to SIEM requires configuration.
- Question 30Interactive
In the image upgrade process, after staging the image to flash, what is the next step in a CloudVision change control?
- AThe device reboots immediately.
- BPre-checks are executed.Correct answer
- CThe configlets are applied.
- DA rollback plan is created.
Why this is the answer
After staging, CVP runs pre-checks (e.g., device reachability, disk space) before proceeding to reboot.
Telemetry and Analytics
10 questions in this domain
- Question 31Single Choice
What is the core component that enables streaming telemetry on Arista EOS?
- ATerminAttr AgentCorrect answer
- BSNMP Poller
- CCloudVision API
- DEOS Logging Agent
Why this is the answer
TerminAttr is the daemon that acts as a gRPC client to stream operational data to CloudVision.
- Question 32Multiple Select
Which two of the following are valid TerminAttr parameters?
- AingestgrpcurlCorrect answer
- BingestauthCorrect answer
- Cgrpc-port
- Dtelemetry-profile
Why this is the answer
TerminAttr uses ingestgrpcurl for collector URL and ingestauth for authentication token; others are not direct parameters.
- Question 33Interactive
What information does the command 'show daemon TerminAttr' provide?
- AAgent status and connectivity to CloudVisionCorrect answer
- BInterface error counters
- CBGP neighbor states
- DCPU utilization over time
Why this is the answer
This command shows the TerminAttr agent status, including connection state and uptime.
- Question 34Single Choice
Which CloudVision widget type is best for displaying current CPU load as a single value?
- AGaugeCorrect answer
- BTime Series Graph
- CTop-N Table
- DPie Chart
Why this is the answer
A Gauge widget displays a single metric value, ideal for current load monitoring.
- Question 35Multiple Select
Which two of the following are valid notification channels in CloudVision?
- AEmailCorrect answer
- BWebhookCorrect answer
- CSNMP Polling
- DSSH
Why this is the answer
CloudVision supports email and webhook notifications; SNMP polling is not a notification channel.
- Question 36Interactive
What does the following telemetry profile path configure? (Select two)\npath /interfaces/interface[name=Ethernet1]/state/counters sample-interval 30
- ASample intervalCorrect answer
- BInterface nameCorrect answer
- CBGP peer state
- DCPU temperature
Why this is the answer
The path specifies interface counters for Ethernet1 with a 30-second sample interval.
- Question 37Single Choice
What is the range of the CloudVision device health score?
- A0 to 100Correct answer
- B0 to 10
- C1 to 5
- D0 to 1000
Why this is the answer
Health score is a composite value from 0 (worst) to 100 (best), summarizing device health.
- Question 38Multiple Select
Which two of the following are advantages of streaming telemetry over SNMP polling?
- APush-based data deliveryCorrect answer
- BSub-second granularityCorrect answer
- CHigher CPU overhead on switch
- DRequires polling intervals
Why this is the answer
Streaming telemetry pushes data with fine granularity, unlike SNMP polling which is pull-based and coarse.
- Question 39Interactive
What does the command 'show cloudvision connectivity' test?
- AReachability to CloudVision collectorCorrect answer
- BSNMP community string validity
- CTraceroute to external host
- DBGP peering status
Why this is the answer
This command tests if the switch can reach the CloudVision collector endpoint.
- Question 40Single Choice
Which component acts as the telemetry broker for forwarding data to external analytics platforms?
- ACloudVision eXchange (CVX)Correct answer
- BTerminAttr Agent
- CCloudVision API
- DEOS itself
Why this is the answer
CVX is the telemetry broker that collects data from devices and forwards it to external consumers.
Frequently asked questions
Everything about the Arista CloudVision Specialist question bank and how to use it.