Question bank
Cisco Certified DevNet Associate
40 Cisco Certified DevNet Associate questions with the correct answer and a written explanation, organised across 6 exam domains.
- 40 questions
- 6 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Automation and Programmability
8 questions in this domain
- Question 1Single Choice
What is the best description of a centralized control plane in controller-based networking?
- AThe control plane is centralized for network decisions.Correct answer
- BThe data plane is centralized so all packets pass through the controller.
- CThe management plane is centralized in every network device.
- DAll planes are moved to the end-user devices.
Why this is the answer
The common trap is confusing control plane with data plane. The controller centralizes control-plane logic, while data-plane forwarding can remain on devices.
- Question 2Multiple Select
Which two statements about routing protocols in controller-based networking are true?
- ARouting protocols can still have a role in controller-based networks.Correct answer
- BA controller makes routing protocols obsolete everywhere.
- CAll routing protocols must be removed from managed devices.
- DOSPF or BGP may still be used in some controller-based deployments.Correct answer
Why this is the answer
A controller does not automatically make routing protocols obsolete; they can remain in use and can coexist with controller-based management.
- Question 3Interactive
The exhibit shows a YAML configuration task for a Cisco switch. Which automation tool is being used?
- AAnsibleCorrect answer
- BPuppet
- CChef
- DSaltStack
Why this is the answer
The YAML syntax with hosts and tasks identifies an Ansible playbook. Ansible is an automation tool that can manage network devices.
- Question 4Single Choice
In controller-based networking, what is the southbound interface used for?
- ACommunication between the controller and network devicesCorrect answer
- BCommunication between the controller and applications
- CCommunication between two controllers only
- DCommunication between end users and the data center
Why this is the answer
SBIs are between the controller and network devices; NBIs serve applications. Confusing these interfaces is a common exam trap.
- Question 5Multiple Select
Which two statements about security in controller-based networks are correct?
- AA controller can introduce new security considerations.Correct answer
- BThe controller is a critical component that must be protected.Correct answer
- CController-based networks are automatically secure.
- DSecurity is no longer needed because the network is automated.
Why this is the answer
Controllers add a centralized target and new security concerns. Security controls and protection of the controller are still required.
- Question 6Interactive
After a network automation change, a monitoring tool produces the JSON output shown. What DevOps practice does this represent?
- AFeedback loopCorrect answer
- BSource code management
- CCentralized data plane
- DSouthbound interface
Why this is the answer
Monitoring output is used to improve system behavior, completing the DevOps feedback loop. It is not source control or forwarding.
- Question 7Single Choice
An application uses a controller API to request a new network policy. Which interface type is being used?
- ANorthbound interfaceCorrect answer
- BSouthbound interface
- CEastbound interface
- DWestbound interface
Why this is the answer
Northbound interfaces let applications or automation tools talk to the controller. Southbound interfaces are used between controller and managed devices.
- Question 8Multiple Select
Which two statements correctly differentiate continuous delivery from continuous deployment?
- AContinuous delivery keeps changes in a release-ready state.Correct answer
- BContinuous deployment automatically releases changes to production.Correct answer
- CContinuous delivery and continuous deployment are identical.
- DContinuous deployment requires a manual production approval for every release.
Why this is the answer
Continuous delivery means release-ready; continuous deployment automates release to production. They are not identical.
IP Connectivity and Services
6 questions in this domain
- Question 9Single Choice
A controller computes network paths while switches continue to forward packets. Which plane is centralized?
- AControl planeCorrect answer
- BData plane
- CManagement plane
- DAuthentication plane
Why this is the answer
Controller-based networking centralizes the control plane, while the data plane remains distributed on the forwarding devices.
- Question 10Multiple Select
Which two statements correctly describe routing protocols in controller-based networks?
- ARouting protocols can still be useful.Correct answer
- BControllers make routing protocols obsolete.
- CAn underlay may run BGP or OSPF.Correct answer
- DController networks never use routing protocols.
Why this is the answer
Controller-based networking does not automatically eliminate traditional routing protocols; they often still provide underlay connectivity and path selection.
- Question 11Interactive
The code block shows an external application obtaining data from a controller. Which type of interface is being used?
- ANorthbound APICorrect answer
- BSouthbound API
- CForwarding plane
- DRouting protocol
Why this is the answer
Applications and orchestration tools use northbound APIs, while southbound APIs connect the controller to network devices.
- Question 12Single Choice
A team wants to automate configurations on traditional network devices. Which tool should they select?
- AAnsible or PuppetCorrect answer
- BRouting protocol software
- CManual configuration only
- DUnmanaged switch hardware
Why this is the answer
Traditional network devices can be automated with configuration tools such as Ansible or Puppet even without a centralized controller.
- Question 13Multiple Select
In a DevOps pipeline, which two characteristics define continuous delivery instead of continuous deployment?
- ACode is always release-ready.Correct answer
- BEvery change deploys automatically.
- CManual approval can precede production.Correct answer
- DAutomated tests are optional.
Why this is the answer
Continuous delivery means code is ready to release and production deployment may wait for a manual decision; continuous deployment removes that manual step.
- Question 14Interactive
The code block shows a workflow a network engineer uses after changing a device configuration. Which practice is this?
- AVersion controlCorrect answer
- BFirmware update
- CDynamic routing
- DPort scanning
Why this is the answer
Version control tools like Git track configuration changes and are useful to network engineers, not just application developers.
IP Services
6 questions in this domain
- Question 15Single Choice
In a controller-based network architecture, what is the main responsibility of the centralized control plane?
- AIt makes network control decisions and programs devices, while the actual traffic forwarding remains on the devices.Correct answer
- BIt inspects and forwards every data packet on behalf of the switches and routers.
- CIt replaces all packet forwarding functions in every device.
- DIt only stores accounting and billing records.
Why this is the answer
A centralized control plane centralizes the decision-making logic, not the data plane. Traffic is still forwarded locally by the network devices, while the controller programs and manages forwarding behavior.
- Question 16Multiple Select
Which statements correctly describe the role of routing protocols in a controller-based network? Choose two.
- ARouting protocols such as OSPF and BGP can still operate in controller-based networks.Correct answer
- BA controller can coexist with routing protocols to build network intelligence.Correct answer
- CControllers make routing protocols completely unnecessary.
- DRouting protocols must be disabled whenever a controller is installed.
Why this is the answer
Controller-based networking does not force every organization to stop using distributed routing protocols. OSPF, BGP, and similar protocols can still be used, and controllers often exchange information with routing protocols instead of replacing them entirely.
- Question 17Interactive
A Python script is provided in the code block. The script connects to a network device on TCP port 830. Which protocol does the script use?
- ANETCONFCorrect answer
- BSNMP
- CICMP
- DLLDP
Why this is the answer
NETCONF commonly runs over SSH on TCP port 830. The Python code uses a NETCONF client library and connects to port 830, so it is establishing a NETCONF session.
- Question 18Single Choice
Which statement about automating traditional network devices is true?
- AAutomation tools such as Ansible and Python can manage traditional devices by connecting over SSH and applying CLI commands.Correct answer
- BTraditional routers and switches can be automated only if they have a centralized controller.
- COnly networks with an SDN controller can be automated.
- DAutomation requires the network to use a centralized data plane.
Why this is the answer
Network automation is not restricted to SDN or controller-based networks. Traditional CLI devices can be automated using SSH, Ansible, Python, and other common automation tools.
- Question 19Multiple Select
Which statements about northbound and southbound interfaces in a controller architecture are true? Choose three.
- ASBIs enable communication between the controller and network devices.Correct answer
- BNBIs allow applications to request network information or services from the controller.Correct answer
- COpenFlow and NETCONF are examples of technologies that can be used as SBIs.Correct answer
- DNBIs are used by the controller to physically replace network device data planes.
Why this is the answer
Southbound interfaces connect the controller to infrastructure devices. Northbound interfaces connect the controller to applications. OpenFlow and NETCONF are commonly associated with southbound communication, but NBIs do not replace the data plane.
- Question 20Interactive
The code block shows an Ansible playbook task. What will this task do when run against the group of switches?
- AIt configures a description on interface GigabitEthernet0/1.Correct answer
- BIt removes the startup configuration from the switch.
- CIt creates VLAN 10 and assigns it to GigabitEthernet0/1.
- DIt reloads all switches in the group.
Why this is the answer
The Ansible task uses the ios_config module to enter interface configuration mode and apply the description line to GigabitEthernet0/1. This is an example of automating traditional devices with an infrastructure automation tool.
Network Access
4 questions in this domain
- Question 21Single Choice
In software-defined networking with a centralized controller, which plane is typically centralized?
- AData plane
- BControl planeCorrect answer
- CForwarding plane
- DManagement plane
Why this is the answer
SDN centralizes the control plane on the controller; the data plane and forwarding plane generally remain distributed on the network devices.
- Question 22Multiple Select
Which of the following statements are true about controller-based networking? (Select two.)
- ARouting protocols are no longer needed once a controller exists.
- BTraditional networks are impossible to automate.
- CA controller can centralize control-plane decisions.Correct answer
- DController-based networking introduces new security considerations.Correct answer
Why this is the answer
Controller-based networking centralizes control decisions, but it does not eliminate routing protocols or prevent traditional networks from being automated. It also introduces additional security concerns.
- Question 23Interactive
A network engineer is using a configuration repository. Reviewing the commands in the code block, what is the team applying?
- ADirectly deploying configurations to routers
- BTracking and versioning configuration changesCorrect answer
- CRunning routing protocols from a controller
- DReplacing the network management system
Why this is the answer
The commands show version control activities: adding files, committing a snapshot, and pushing it to a remote repository. Git is useful for tracking network configuration changes, not for direct deployment or protocol replacement.
- Question 24Single Choice
Which pair of components communicates through a northbound interface in an SDN architecture?
- AController and applications or business logicCorrect answer
- BController and network devices
- CNetwork devices and one another
- DData plane and forwarding plane
Why this is the answer
Southbound interfaces are between the controller and network devices, while northbound interfaces are between the controller and applications or higher-level business logic.
Network Fundamentals (Expanded)
8 questions in this domain
- Question 25Single Choice
In a controller-based network, a colleague says the data plane is centralized. Which plane is actually centralized?
- AData plane
- BControl planeCorrect answer
- CManagement plane
- DForwarding plane
Why this is the answer
Controllers centralize control-plane logic and decisions. The data plane remains distributed on network devices that forward packets.
- Question 26Multiple Select
A candidate thinks controller-based networking makes routing protocols obsolete. Which two statements address this misconception?
- ARouting protocols may still operate in controller-based networks.Correct answer
- BCentralizing control plane does not make all routing protocols obsolete.Correct answer
- CControllers replace all data forwarding decisions.
- DRouting protocols disappear when a controller is installed.
Why this is the answer
Controllers centralize control-plane intelligence but do not make routing protocols obsolete. Devices still exchange routing information, and controllers may help manage it.
- Question 27Interactive
Refer to the diagram. Which interface type is used for the connection between the controller and network devices?
- ASouthbound interfaceCorrect answer
- BNorthbound interface
- CData plane interface
- DManagement interface
Why this is the answer
A southbound interface (SBI) is between the controller and network devices, while a northbound interface is used by applications.
- Question 28Single Choice
A candidate believes traditional networking cannot be automated. Which answer goes against that common trap?
- AAutomation tools can manage traditional networks.Correct answer
- BControllers are required for all automation.
- CDevices must be replaced to be automated.
- DOnly cloud networks support automation.
Why this is the answer
Traditional network devices can be automated with tools such as Ansible and Puppet. Controller-based architecture is not a prerequisite.
- Question 29Multiple Select
The common traps list examples of automation tools. Which two tools can be used on traditional network devices?
- AAnsibleCorrect answer
- BPuppetCorrect answer
- CGit
- DREST
Why this is the answer
Ansible and Puppet are configuration automation tools. Git is version control, and REST is an architectural style, not an automation tool.
- Question 30Interactive
The YAML content defines an automation task on a switch. What does it demonstrate?
- ATraditional network automationCorrect answer
- BCentralized data plane
- CContinuous deployment
- DVersion control
Why this is the answer
The snippet uses a network module to interact with a switch, showing that traditional network gear can be automated with modern tooling.
- Question 31Single Choice
A team adopts controller-based networking. Why does this require new security attention?
- AThe controller becomes a central point of attack.Correct answer
- BThe controller removes all network threats.
- CSecurity is only needed on end users.
- DThe controller eliminates the need for encryption.
Why this is the answer
A controller centralizes important network logic, making it an attractive target. Security controls must protect the controller and its interfaces.
- Question 32Multiple Select
Which two statements correctly describe northbound and southbound controller interfaces?
- ANorthbound interfaces connect applications to the controller.Correct answer
- BSouthbound interfaces connect the controller to network devices.Correct answer
- CSouthbound interfaces connect applications to the controller.
- DNorthbound interfaces connect the controller to network devices.
Why this is the answer
Northbound interfaces face applications. Southbound interfaces face network devices and are used by the controller to manage them.
Security Fundamentals
8 questions in this domain
- Question 33Single Choice
What is the common trap regarding the control plane in controller-based networking?
- AThe controller must centralize the data plane.
- BCentralized control plane and centralized data plane are the same.
- CThe control plane is centralized while the data plane often stays distributed.Correct answer
- DData plane functions cannot be automated.
Why this is the answer
A common trap is confusing centralized control plane with centralized data plane. Controllers centralize control logic, but the data plane often remains distributed on network devices.
- Question 34Multiple Select
Which statements accurately describe automation in traditional networking?
- ATraditional networking cannot be automated.
- BAnsible and Puppet can be used to automate traditional network devices.Correct answer
- CAutomation is possible only after replacing all routing protocols.
- DExisting networking infrastructure can be automated using common tooling.Correct answer
Why this is the answer
Traditional networking can be automated with tools such as Ansible and Puppet. Installing automation does not require replacing routing protocols or controller adoption.
- Question 35Interactive
The commands recorded in the code block demonstrate which principle for network engineers?
- AGit is relevant only to software developers.
- BGit can track changes to network configuration files.Correct answer
- CVersion control replaces controller-based networking.
- DVersion control eliminates routing protocols.
Why this is the answer
Git is valuable for network professionals because it tracks changes to network configuration files and supports versioning. Git does not replace network controllers or routing protocols.
- Question 36Single Choice
Southbound interfaces are used between a controller and which components?
- ANetwork devicesCorrect answer
- BEnd-user applications
- CBilling systems
- DAuthentication servers
Why this is the answer
Southbound interfaces are between the controller and the network devices. Northbound interfaces are between applications and the controller.
- Question 37Multiple Select
What does the continuous feedback loop in DevOps emphasize?
- AMonitoring network and system behaviorCorrect answer
- BCollecting feedback to make improvementsCorrect answer
- CDisabling all runtime logging
- DRemoving monitoring after deployment
Why this is the answer
DevOps depends on monitoring and collecting feedback so that teams can improve continuously. Disabling logging and monitoring violates the feedback loop.
- Question 38Interactive
The pipeline in the code block produces a ready release. If it is not deployed automatically, which practice is represented?
- AContinuous deployment
- BContinuous deliveryCorrect answer
- CContinuous monitoring
- DInfrastructure as code
Why this is the answer
Continuous delivery means artifacts are ready for release but not automatically deployed. Continuous deployment means every change is automatically released to production.
- Question 39Single Choice
Which statement is true regarding controller-based networking and routing protocols?
- ARouting protocols become unnecessary.
- BController-based networking renders all routing protocols obsolete.
- CRouting protocols can still be used in controller-based architectures.Correct answer
- DRouting protocols are replaced by centralized data planes.
Why this is the answer
Controller-based networking does not make routing protocols obsolete. Protocols such as OSPF and BGP can still provide connectivity in controller-based environments.
- Question 40Multiple Select
Which statements align with DevOps regarding change approvals?
- ADevOps eliminates all change management approvals.
- BManual approvals may still be required in automated workflows.Correct answer
- CAutomation can reduce manual steps without removing governance.Correct answer
- DChange management only applies to traditional networks.
Why this is the answer
DevOps reduces manual steps through automation, but it does not mean approvals disappear. Governance and change management can still exist in an automated pipeline.
Frequently asked questions
Everything about the Cisco Certified DevNet Associate question bank and how to use it.