9 Network Automation Capstone Free Online FlashCards

How should network automation intent be managed?

Keep the desired network design in reviewed files, and keep secrets out of the repository.

What roles do a Terraform plan and state serve?

Terraform lets teams write configuration, inspect a proposed plan, and apply approved changes; its state maps declared resources to real objects.

How should automation change a service owned by a network controller?

Use the documented API of the controller that owns the network service, allowing it to translate service intent into device changes.

Why assign one owner to each configuration domain?

Assign one authoritative owner to each configuration domain. Do not let separate tools independently change the same controller-owned settings.

How do RESTCONF and NETCONF differ?

RESTCONF exposes YANG-modeled data through HTTP methods; NETCONF provides RPC operations and configuration datastores.

What should input validation check before a network change?

Check required fields, allowed VLAN ranges, naming conventions, target sites, and device compatibility before deployment.

What should happen during change review?

Run formatting, schema, and policy checks; generate an IaC plan where applicable, and require approval for production changes.

How should a network change be deployed progressively?

Begin in a lab or canary site, then expand in controlled batches. Use supported preview, transaction, or rollback features when available.

What does post-deployment verification need to establish?

Compare observed configuration with intended configuration, then test service reachability and relevant operational indicators.

What should teams record, and do, when deployment validation fails?

Save job results, API responses, change identifiers, and backups. If validation fails, stop or use a supported recovery method.

What security practices should protect RESTCONF requests?

Use HTTPS, validate server identity, authenticate callers, and grant only the permissions required.

Why should Ansible's `overridden` state be used cautiously?

Ansible resource modules use declarative states such as `merged`. Use `overridden` cautiously because it can remove configuration beyond the intended change.