300-635 Automating Cisco Data Center Solutions (DCAUTO) Questions and Answers

 Cisco Intersight REST API uses HMAC for authentication, where the message content and headers are signed using an API Key ID (A), and the Cisco Intersight Web service verifies the signature with the RSA public key for the API Key ID ©. The SHA384 hash (B), RSA private key challenge (D), and SHA256 hash (E) are not described in the authentication method for Cisco Intersight REST API requests.

The Python script uses the ACI Cobra SDK to interact with Cisco’s Application Centric Infrastructure (ACI). It logs into the APIC and retrieves a list of all application profiles (‘fvAp’), then prints out their distinguished names (dn), which uniquely identify each application profile within the ACI fabric. References:

Cisco Developer Network

Cisco Learning Network

Consistency of Systems Configuration: Network configuration tools like Ansible and Puppet ensure that configurations across multiple devices in a data center are uniform. This consistency reduces the risk of errors that can occur when configurations are applied manually, leading to a more stable and reliable network infrastructure12.

Automation of Repetitive Tasks: These tools automate routine tasks such as deploying updates, applying configurations, and provisioning systems. By automating these tasks, data center operations become more efficient, reducing the time and effort required for manual configuration and increasing productivity

 The configuration snippet from a network device indicates that telemetry settings are being configured for Ethernet port 1/1. The data is collected and streamed to four different destinations, each with a unique port number. The sample-interval is set to ‘100000’, which is typically in microseconds. Therefore, the data is streamed every 100 milliseconds, as 100,000 microseconds equals 100 milliseconds.

References:

Implementing Automation for Cisco Data Center Solutions (DCAUI) course page.

Cisco Data Center Training Videos.

The Python code in the exhibit is using the Cobra SDK to interact with Cisco’s Application Centric Infrastructure (ACI). The code performs the following actions:

It logs into the ACI fabric using credentials provided.

It creates a new Virtual Routing and Forwarding (VRF) instance named “DevNet_VRF” within a tenant named “DevNet_Tenant”.

It creates a new Bridge Domain (BD) named “DevNet_BD” within the same tenant and associates it with the previously created VRF.

It defines a subnet within this Bridge Domain with the network address “10.10.10.1/24”, which is labeled as “DevNet_Subnet”.

An Application Profile (AppProfile) named “DevNet_App” is created within the tenant.

An Endpoint Group (EPG) named “DevNet_EPG” is created and associated with both the AppProfile (“DevNet_App”) and BridgeDomain (“DevNet_BD”).

Therefore, options B and C are correct: B. This action creates an EPG called “DevNet_EPG” inside an AppProfile called “DevNet_App” located in an ACI tenant called “DevNet_Tenant”. The EPG is linked to a BridgeDomain called “DevNet_BD”. C. This action creates a subnet called “DevNet_Subnet” inside VRF “DevNet_VRF” located in an ACI tenant called “DevNet_Tenant” and sets its network address to “10.10.10.1/24”.

References :=For more information on automating Cisco Data Center Solutions, one can refer to Cisco’s official training course for Implementing Automation for Cisco Data Center Solutions (DCAUI): Cisco Training Course

Cisco Intersight REST API requires a secure authentication process that involves creating a SHA256 hash of the message body and headers. This ensures that the message integrity is maintained and verifies that the message has not been tampered with during transit. Even if the message body is empty, a SHA256 hash is still required. Additionally, the use of RSA private keys enhances security, but the specific key size requirement was not mentioned in the provided resources6

The top level in the ACI Management Information Tree is polUni. This is the top-level class for all policy definition and resolution objects within the Cisco ACI Policy Model. It serves as the root for policy namespace in the Management Information Tree12.

References :=

Cisco ACI Policy Model Guide1

Understanding the Cisco Application Policy Infrastructure Controller2

Without the exhibit or the complete Python code options (A, B, C, D), it is not possible to determine which snippet correctly creates an application policy named OrderProcess with two application endpoint groups under Tenant SuperEats using direct calls to the ACI REST API. The correct answer would depend on the specific API calls made and the structure of the JSON payload in the Python code.

References :=

Automating Cisco Data Center Solutions (DCAUI) v1

Cisco Application Centric Infrastructure (ACI) documentation

This means the client initiating the API call will wait for the server to process the request and return a response before moving on to other tasks, which can be simpler to implement and debug but may be less efficient if the server takes a long time to respond.

References:

General programming and API design principles

The ACI Cobra SDK is a Python library provided by Cisco for interacting with the Application Centric Infrastructure (ACI). The code in the image uses this SDK to log into an APIC controller, which is the central management entity for the ACI fabric. After logging in, it creates a class query for ‘fvCEp’, which stands for Fabric Endpoint. This class contains information about endpoints within the ACI fabric, including their MAC and IP addresses.

The ‘subtree’ property set to ‘full’ indicates that the query will return all objects within this class’s subtree, meaning it will retrieve detailed information about each endpoint. The mo_dir.query(cq) method executes this query against the APIC.

Finally, for each object returned by the query (each endpoint), it prints out two attributes: ‘mac’ and ‘ip’. These attributes correspond to the MAC address and IP address of each endpoint in the ACI fabric. Therefore, option C is correct as this code prints all endpoint MAC and IP addresses.

References:

Implementing Automation for Cisco Data Center Solutions (DCAUI)

Cisco Learning Network - Data Center Training Videos

conf t

Event manager applet link monitor

Event syslog pattern “IF_UP”

Action 1 cli command “source cdp_description.py”

Exit

When exploring automation capabilities for ACI, it’s beneficial to:

B. Look for an open-source package or SDK: These resources can simplify the process by providing pre-built functions and methods for common tasks.

C. Use the API Inspector and test API Calls: The API Inspector within ACI allows you to see the API calls that are made when you perform actions in the GUI, which is invaluable for understanding how to automate those actions.

References:

ACI documentation on Cisco’s official website

Community forums and discussions on Cisco’s automation tools

GET, firmware, RunningFirmwares

To ensure Docker daemon persistence during a switchover on Cisco Nexus 9500 Series Switches running Cisco NX-OS, the Docker configuration must be changed to include the live restore option. This option allows running containers to continue operating during the daemon downtime, which is particularly useful during a switchover. References: Cisco Nexus 9500 Series documentation and Docker official documentation.

The Cisco Data Center Network Manager (DCNM) REST API provides a robust platform for automating various tasks in the data center. Two of its capabilities include:

A: The DCNM REST API uses the dcnm-token header for requests authentication after initial basic authentication. This token-based authentication is more secure as it reduces the need to repeatedly send credentials over the network.

E: The DCNM REST API is organized into different management areas such as Classic LAN, LAN Fabric, Media Controller, and SAN Management. This categorization allows for targeted automation and management within specific domains of the data center network.

References :=

Implementing Automation for Cisco Data Center Solutions (DCAUI) v1.0

Cisco Data Center Network Manager documentation

The correct iteration for creating three EPGs in Cisco ACI using an Ansible task is found in option C. This task utilizes the aci_epg module, which is part of Ansible’s suite of modules for managing Cisco ACI environments. The task includes a loop that iterates over a list of EPG names, creating each one in turn. This approach is efficient for automating the creation of multiple EPGs, reducing the need for repetitive task definitions. References := For more information on automating Cisco Data Center solutions, including the use of Ansible for task automation, you can refer to the official Cisco documentation and training resources such as the Implementing Automation for Cisco Data Center Solutions (DCAUI) course.

The -brief command in the Cisco bigmuddy-network-telemetry-collector is used to display only the message headers. This command provides a concise view of the telemetry data streamed from XR routers, which is useful for quick inspections or debugging purposes without the need for full message details1.

References := Cisco Code Exchange, VCEGuide