Network Assurance

A network engineer wants to proactively identify recurring client connectivity issues across a large campus without manually parsing individual device logs. Management asks for a solution that uses machine learning to establish baselines and flag anomalies against normal behavior. Which Cisco Catalyst Center (formerly Cisco DNA Center) capability specifically provides this AI-driven baseline comparison and anomaly detection?

A network engineer is troubleshooting intermittent PPP authentication failures on a router that terminates hundreds of dialer sessions. Enabling 'debug ppp authentication' globally would overwhelm the console with output from all sessions. The engineer wants to capture debug output only for traffic related to interface Dialer1 without impacting other sessions. Which set of commands correctly restricts the debug output to only that interface?

A network engineer needs to capture traffic from a distribution switch in Building A and forward that mirrored traffic to a packet analyzer that resides on a subnet reachable only through a routed Layer 3 path in the data center. The source and destination are in different IP subnets separated by multiple router hops. Which monitoring feature must the engineer configure to accomplish this?

A network engineer is configuring ERSPAN on a Catalyst switch to send a copy of traffic from GigabitEthernet1/0/10 to a monitoring appliance located across a routed Layer 3 network at IP address 10.50.50.100. The engineer has entered the following on the source switch: monitor session 1 type erspan-source source interface Gi1/0/10 destination erspan-id 100 ip address 10.50.50.100 After committing the configuration, no traffic is arriving at the monitoring appliance. Which additional configuration step under the destination sub-mode is required for the ERSPAN session to become operational?

A network engineer is configuring Flexible NetFlow on a Catalyst switch to export traffic statistics to a collector at 10.20.30.40. They have already created a flow record named REC-APP with match and collect fields, and a flow exporter named EXP-COLL pointing to the collector. Traffic is flowing through GigabitEthernet1/0/1, but no flow data appears at the collector. Which additional configuration step is required to complete the deployment?

A network engineer wants a static default route to a primary ISP to automatically fail over to a backup ISP when the primary next-hop becomes unreachable, even though the physical interface to the primary ISP stays up. The engineer configures an IP SLA ICMP echo operation targeting an address across the primary ISP link. Which additional configuration is REQUIRED to make the floating static route react to the IP SLA results?

A network engineer must proactively measure the quality of a VoIP path across the WAN between two Catalyst routers. Management wants continuous reporting of one-way latency, jitter, packet loss, and an estimated voice quality (MOS) score without deploying any external probes. Which IP SLA operation should the engineer configure to satisfy all of these requirements?

A network automation engineer is standardizing programmable interfaces on new Catalyst switches. The security team requires all management traffic to use encrypted transport, and the automation platform will use HTTP-based tooling (curl, Postman) for ad-hoc configuration changes. The engineer must enable the correct protocol and confirm the transport it uses. Which statement correctly describes RESTCONF on a Cisco IOS XE device?

A network engineer is automating configuration changes on an IOS XE router using NETCONF over SSH on port 830. The engineer wants the ability to stage a batch of configuration changes, validate them, and then apply them all at once as a single transaction — with the option to discard the staged changes if validation fails. Which NETCONF capability must the device support to accomplish this workflow?

A network engineer configures Flexible NetFlow on a WAN edge router to monitor a long-lived backup transfer that runs for over 30 minutes. The engineer notices that the collector does not receive any flow records for this transfer until it finishes, making real-time capacity monitoring impossible. The flow monitor uses the default cache settings. Which action allows the collector to receive periodic updates about the ongoing transfer while it is still in progress?

A network automation engineer is writing a Python script to retrieve interface operational data from a Catalyst 9300 switch using RESTCONF over HTTPS. The script sends a GET request to https://switch/restconf/data/ietf-interfaces:interfaces-state, but the switch responds with HTTP 406 Not Acceptable. The engineer confirms the RESTCONF service is enabled, the credentials are valid, and the URI path is correct. Which action resolves this error?

A network automation engineer is writing a Python script to modify the configuration on an IOS-XE router via RESTCONF. The router already has an interface GigabitEthernet2 configured with an IP address and description. The engineer needs to change ONLY the interface description without affecting or resending any other attributes of that interface's existing configuration. Which HTTP method should the script use against the interface resource URI?

A network administrator must enable SNMP-based monitoring on a Catalyst switch. Corporate security policy requires that all SNMP messages be both authenticated and encrypted so that no polling data or credentials traverse the network in cleartext. Which SNMP configuration meets this requirement?

A network engineer is configuring a local SPAN session on a Catalyst 9300 to capture traffic from an application server for analysis. The engineer enters: monitor session 1 source interface GigabitEthernet1/0/10 monitor session 1 destination interface GigabitEthernet1/0/20 After connecting the analyzer to Gi1/0/20, users on that switchport report they can no longer reach the network. What is the cause of the connectivity loss?

A network engineer wants their syslog server to receive only messages that indicate a warning condition or something more severe from a Catalyst switch. Interface up/down notifications (severity 5) are currently flooding the server and should be excluded. Which command applied to the switch achieves this goal?

A network engineer runs a traceroute from a branch router toward a data center server that traverses a service provider MPLS L3VPN. The traceroute completes successfully and shows the destination, but several intermediate provider hops display asterisks (* * *) while the hops before and after them respond normally. The end-to-end connectivity is confirmed working with ping. What is the MOST likely reason the intermediate hops show asterisks?