Cisco CCNP Automation (350-901 AUTOCOR) Practice Exam

What the Cisco CCNP Automation (350-901 AUTOCOR) exam covers

• Network Automation205 questions
• Infrastructure as Code205 questions
• Operations137 questions
• AI in Automation136 questions

Free 350-901 AUTOCOR practice test questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 683.

1. Question 1Network Automation

   An engineer must push VLAN configuration to fifty IOS XE switches using Ansible. Which connection type do the cisco.ios modules expect?

   • Anetwork_cli, which drives the device over SSHCorrect
   • Blocal, which runs the module on the control node
   • Cwinrm, which is used for Windows hosts
   • Ddocker, which executes inside a container
   ✓ Correct answer: A

   The network connection plugin opens a persistent session to the device and the module runs on the control node, issuing commands over that session, which is why no agent is installed on the switch. Setting it correctly in the inventory or play is what makes the modules work at all.

   Why the other options are wrong

   • BThe local connection runs on the control node without a device session.
   • CThe winrm connection is used for Windows hosts rather than IOS XE.
   • DThe docker connection executes inside a container.
2. Question 2AI in Automation

   An automation lead is weighing what to include in the system prompt of a network automation agent. What belongs there?

   • AThe agent's scope, constraints and how to use its toolsCorrect
   • BThe credentials the agent should use
   • CA copy of the network's full configuration
   • DThe complete history of previous conversations
   ✓ Correct answer: A

   Stating what the agent may do, what it must refuse and how to interpret its tools shapes its behaviour consistently, while live data belongs in tool responses where it is current. Credentials are held by the server rather than placed in a prompt.

   Why the other options are wrong

   • BCredentials in a prompt are exposed to the model and its logs.
   • CA full configuration in the prompt is stale and enormous.
   • DConversation history is managed separately from the system prompt.
3. Question 3Infrastructure as Code

   A network engineer must convert a device's YANG-modelled configuration into YAML for a data file. What must be preserved?

   • AThe structure and the leaf names the model definesCorrect
   • BThe exact whitespace of the original output
   • CThe order every leaf appeared in
   • DThe transport used to retrieve it
   ✓ Correct answer: A

   Containers become mappings and lists become sequences of keyed entries, and the leaf names must match the model or nothing downstream can render or send it. Whitespace and ordering are presentation details that YAML handles on the author's behalf.

   Why the other options are wrong

   • BWhitespace is a formatting detail rather than meaning.
   • CLeaf ordering is not significant in the data model.
   • DThe retrieval transport is irrelevant to the data's structure.
4. Question 4Infrastructure as Code

   An operator must understand why rewriting history on a shared branch causes problems. What happens to collaborators?

   • ATheir local branches diverge from the rewritten remoteCorrect
   • BTheir commits are deleted from their clones
   • CTheir remote access is revoked automatically
   • DTheir pipelines stop being triggered
   ✓ Correct answer: A

   Everybody's clone still contains the original commits, so the next fetch shows two divergent histories and recovering requires each person to reset or rebase deliberately. That is why rewriting is reserved for branches nobody else has taken.

   Why the other options are wrong

   • BTheir local commits remain in their clones rather than being deleted.
   • CRemote access is unaffected by a history rewrite.
   • DPipelines continue to be triggered on new commits.
5. Question 5Network Automation

   A platform team is working out what a network automation solution should do with the configuration it replaced. What is prudent?

   • ACapture it as an artefact before applying the changeCorrect
   • BRely on the device's own configuration archive
   • CDiscard it since the intent is recorded elsewhere
   • DEmail it to the operations team after the change
   ✓ Correct answer: A

   Storing the pre-change configuration as a pipeline artefact means it is available beside the run that changed it, which is exactly what a recovery or an investigation needs. Relying on a device archive assumes the device is reachable and that the archive captured the right moment.

   Why the other options are wrong

   • BA device archive assumes the device is reachable when it is needed.
   • CDiscarding it leaves nothing to compare against or restore from.
   • DEmailing it separates the record from the run that produced it.
6. Question 6Network Automation

   A platform team is working out what a Python automation should do with a response it did not expect. What is defensive?

   • AValidate the shape and fail clearly if it differsCorrect
   • BAccess the fields it wants and let errors surface
   • CAssume the fields are present and continue
   • DLog the response and carry on regardless
   ✓ Correct answer: A

   An API that changed, an error object returned with a success status or a partial response all produce data that looks usable until a field is missing deep in the logic. Validating the shape at the boundary turns that into one clear failure naming what was wrong.

   Why the other options are wrong

   • BLetting errors surface produces a confusing failure far from the cause.
   • CAssuming fields are present fails whenever the API changes.
   • DLogging and carrying on makes decisions from unreliable data.
7. Question 7AI in Automation

   A platform team is working out what an AI agent should do when asked to perform an action outside a change window. What behaviour is correct?

   • ADecline and explain the window constraintCorrect
   • BPerform it since the user has the authority
   • CQueue it silently for the next window
   • DAsk the model whether the window applies
   ✓ Correct answer: A

   A change window exists because unplanned changes carry risk the organisation decided not to accept, and an agent that sets it aside for an authorised user removes the control for exactly the people most able to cause damage. Explaining lets the user seek an exception properly.

   Why the other options are wrong

   • BUser authority does not remove the window that applies to everyone.
   • CQueueing it silently applies a change the user has forgotten about.
   • DAsking the model whether a window applies is not a control.
8. Question 8Operations

   A NetDevOps team must settle what an automation report should say when every device was already compliant. What is appropriate?

   • AState that the estate matched intent and nothing changedCorrect
   • BReport nothing, since there was no change
   • CReport a failure because no work was done
   • DReport the run as skipped
   ✓ Correct answer: A

   A run confirming that every device matches intent is exactly the assurance a compliance process wants, and reporting silence makes it impossible to distinguish from a run that never happened. Naming it as compliance turns a quiet run into evidence.

   Why the other options are wrong

   • BReporting nothing is indistinguishable from the run not happening.
   • CNo work being needed is a success rather than a failure.
   • DReporting it as skipped implies the run did not evaluate anything.
9. Question 9Network Automation

   A Terraform apply against a Cisco platform fails partway, and a second apply proposes creating objects that already exist. What has most likely happened?

   • AThe state was not updated for objects created before the failureCorrect
   • BThe provider version changed between the two applies
   • CThe configuration was reformatted between the applies
   • DThe objects were created outside Terraform entirely
   ✓ Correct answer: A

   If the apply was interrupted before writing state, or the state backend was unreachable, Terraform has no record of what it created and the next plan proposes creating it again. Importing the existing objects reconciles state with reality before proceeding.

   Why the other options are wrong

   • BA provider version change would produce different errors.
   • CReformatting the configuration does not affect state contents.
   • DCreation outside Terraform would not follow a failed apply.
10. Question 10Network Automation

    Somebody on the team asks what a template contributes to configuration generation. What does it enable?

    • AOne structure filled with per-device valuesCorrect
    • BA device to configure itself without input
    • CA protocol that replaces the device API
    • DA credential store for the automation
    ✓ Correct answer: A

    Separating the shape of the configuration from the values each device needs means a change to the standard is made once and applied everywhere, and reviewing the template reviews every device at once. It is the main reason generated configuration stays consistent.

    Why the other options are wrong

    • BA device configuring itself without input is not what templating does.
    • CA protocol replacing the device API is unrelated to templating.
    • DA credential store is a separate component entirely.

Who this Cisco CCNP Automation (350-901 AUTOCOR) practice exam is for

This practice set is for anyone preparing for the Cisco CCNP Automation (350-901 AUTOCOR) exam - from first-time candidates building a foundation to experienced Cisco practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this Cisco CCNP Automation (350-901 AUTOCOR) practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real Cisco CCNP Automation (350-901 AUTOCOR) exam.

Related Cisco resources

• Cisco practice examsAll Cisco
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• Cisco CCNP ENARSI (300-410) practice examRelated
• Cisco CCNP ENCOR 350-401 practice examRelated
• Cisco CCNP Security SCOR (350-701) practice examRelated

Cisco CCNP Automation (350-901 AUTOCOR) practice exam FAQ