CCNA 200-301 v2.0 · Original practice content aligned to the official v2.0 exam topics

CCNA v2.0 Practice Questions: AI, Network Operations and Management

Describe agentic AI and choose safe, useful prompts, compare management approaches, use Ansible and read SNMP and syslog.

Domain 5.0 is 10% of CCNA v2.0. Topics: agentic AI in network operations, choosing a generative AI prompt (data classification, output format, persona, instructions), management approaches and infrastructure as code, SNMP, Ansible and syslog.

CCNA v2.0 starts February 3, 2027 and runs 120 minutes. The current v1.1 exam is available until February 2, 2027.

Domain sample questions with answers

AI, Network Operations and Management

CCNA v2.0 sample question 1

An AI agent investigating slow file transfers records this action log:

Step 1  call show interfaces Gi0/1 on R1: input errors 0, CRC 0
Step 2  call show interfaces Gi0/2 on R1: input errors 18452, CRC 18440
Step 3  call show interfaces Gi1/0/24 on SW3 (CDP neighbor of R1 Gi0/2): duplex half
Step 4  propose: set Gi1/0/24 to full duplex, status awaiting approval

Which assessment of the agent's process is correct?

  1. The agent acted outside its scope because AI agents should only answer questions and never run show commands on devices
  2. The agent gathered evidence with read-only commands, traced the errors to a duplex mismatch and held the change for approval
  3. The agent should have applied the duplex change itself, because waiting for approval delays the fix for the users
  4. The agent made an error because it should have changed R1 Gi0/2 to half duplex before checking the neighbor switch
Show correct answer and explanation

Correct answer: B. The agent gathered evidence with read-only commands, traced the errors to a duplex mismatch and held the change for approval

B is correct because heavy CRC errors on R1 Gi0/2 and half duplex on the neighbor port support a duplex mismatch, and the change waits for a human. A misdescribes agentic AI, which is defined by calling tools such as show commands to gather data. C ignores the guardrail that configuration changes need human approval, even when the evidence looks clear. D would guess at a fix before collecting evidence, and setting half duplex would not be the right correction anyway.

AI, Network Operations and Management

CCNA v2.0 sample question 2

An AI agent suggests this fix for users who cannot reach a server:

Agent: Users in VLAN 30 cannot reach 10.50.1.20.
R2 show ip route 10.50.1.20 returns: % Network not in table.
Recommend: on R2 run ip route 10.50.1.0 255.255.255.0 10.0.12.1.
Note: next hop 10.0.12.1 not yet verified with show ip interface brief or
show cdp neighbors

What should the engineer do with the suggestion?

  1. Verify that 10.0.12.1 is a reachable neighbor that knows the 10.50.1.0/24 network before approving the static route
  2. Reject the suggestion, because AI agents should never recommend routing changes for an engineer to review
  3. Ask the agent to apply the route on every router, so that all paths to the 10.50.1.0 network are consistent
  4. Approve the route immediately, because the agent already proved the next hop is correct with its show commands
Show correct answer and explanation

Correct answer: A. Verify that 10.0.12.1 is a reachable neighbor that knows the 10.50.1.0/24 network before approving the static route

A is correct because the missing route is supported by evidence, but the agent itself flags the next hop as unverified, so it must be checked first. B is too broad; recommending a change for human review is exactly how a guarded agent is meant to work. C widens the change far beyond the evidence and the one router that is missing the route. D ignores the agent's own note that the next hop was never verified with any command.

AI, Network Operations and Management

CCNA v2.0 sample question 3

An AI agent investigating a branch outage logs these steps:

Step 1  call show ip interface brief on BR1: Gi0/0 up up, Gi0/1 administratively down down
Step 2  call get-ticket INC4471: technician replaced WAN cable at 09:10
Step 3  call show logging on BR1: skipped (timeout)
Step 4  conclusion: WAN cable is faulty, open RMA for cable

Which assessment of the agent's conclusion is correct?

  1. The conclusion is not supported, because Gi0/0 is up up and must be the interface that failed during the branch outage
  2. The conclusion is not supported; the administratively down state shows Gi0/1 was shut down, and the log was never checked
  3. The conclusion is supported, because a down protocol status on Gi0/1 always means a Layer 1 cable fault on that link
  4. The conclusion is supported, because a recent cable replacement in the ticket proves that the new cable is defective
Show correct answer and explanation

Correct answer: B. The conclusion is not supported; the administratively down state shows Gi0/1 was shut down, and the log was never checked

B is correct because administratively down means a shutdown command, not a cabling fault, and the agent acted on incomplete data after its log check timed out. A misreads the output; up up means Gi0/0 is working, and the problem interface is Gi0/1. C ignores the administratively down status, which means the interface was shut down regardless of the cable. D treats the ticket history as proof and ignores the interface state, which points to configuration rather than the cable.

AI, Network Operations and Management

CCNA v2.0 sample question 4

An engineer sends this prompt to a public generative AI chatbot:

Act as a senior network engineer. Our branch router for Northfield Medical
at 203.0.113.18 uses crypto isakmp key Br4nch!Key2026 address 198.51.100.2
and the tunnel is down. List the likely causes as a numbered list for a
CCNA-level technician.

What is the MOST important problem with the prompt?

  1. It asks the model to make configuration changes on the router
  2. It does not specify any output format for the model's answer
  3. It does not set any persona for the model to adopt in its answer
  4. It exposes a pre-shared key and customer details to a public model
Show correct answer and explanation

Correct answer: D. It exposes a pre-shared key and customer details to a public model

D is correct because the IKE pre-shared key, customer name and real public addresses are sensitive data that should be redacted or sent only to an approved internal model. A misreads the prompt, which asks only for a list of likely causes. B is false; the prompt asks for a numbered list aimed at a CCNA-level technician. C is false; the prompt opens with a senior network engineer persona.

AI, Network Operations and Management

CCNA v2.0 sample question 5

An engineer reviews this prompt before sending it to the company's approved internal AI assistant:

Act as a senior network engineer. Here is show spanning-tree vlan 10 from
SW1 and SW2 (Catalyst 9200, IOS XE 17.9). Find why VLAN 10 has a loop,
rewrite our whole STP design for the campus, write a training plan for the
team, and draft an email to management.

Which change would MOST improve it?

  1. Remove the platform and IOS XE version, because the model already knows which platform every customer uses
  2. Send the prompt to a public model instead, because the internal assistant cannot read spanning-tree output
  3. Remove the show spanning-tree output, because evidence makes the model answer less reliably than a plain question
  4. Split the request so the prompt asks one task: identify the cause of the VLAN 10 loop from the output
Show correct answer and explanation

Correct answer: D. Split the request so the prompt asks one task: identify the cause of the VLAN 10 loop from the output

D is correct because the prompt bundles four unrelated tasks, so focusing on one task with clear output gets a better and more checkable answer. A is wrong; the model cannot know the platform, and the version helps it give correct syntax. B has no basis and would move internal data to a less controlled model without any benefit. C is wrong; relevant show output gives the model facts to reason from and reduces guessing.

AI, Network Operations and Management

CCNA v2.0 sample question 6

An engineer plans to send this prompt to a public AI model:

You are a network engineer. Platform: ISR 4331, IOS XE 17.6. Output:
numbered steps, show commands only. Data: snmp-server community N3tW0rkRO
RO, snmp-server host 198.51.100.40 version 2c N3tW0rkRO. Task: explain why
the NMS at 198.51.100.40 receives no traps.

Which revision BEST fixes the prompt while keeping it useful?

  1. Add the enable secret and the SSH username so that the model has full context about how to log in to the router
  2. Remove the persona and platform lines, because a public model works best when given the shortest possible prompt
  3. Remove the output format line, because asking for numbered steps limits how well the model can explain the problem
  4. Replace the community string with a placeholder such as COMMUNITY and keep the rest of the prompt as written
Show correct answer and explanation

Correct answer: D. Replace the community string with a placeholder such as COMMUNITY and keep the rest of the prompt as written

D is correct because the community string is a credential that must not reach a public model, while the persona, platform, format and task are already sound. A adds more credentials to a prompt for a public model, which makes the data exposure worse. B takes away context that steers the answer toward correct IOS XE syntax at the right level. C removes a useful component; a clear format helps the technician follow and check the answer.

AI, Network Operations and Management

CCNA v2.0 sample question 7

An IaC repository contains this desired state for SW1:

device: SW1
vlans:
  - {vlan_id: 10, name: USERS}
  - {vlan_id: 20, name: VOICE}
  - {vlan_id: 30, name: PRINTERS}
state: overridden

An engineer then adds VLAN 40 to SW1 directly through the CLI without changing the repository. What happens the next time the IaC pipeline checks SW1?

  1. It deletes VLANs 10, 20 and 30 and keeps VLAN 40, because the most recent change on the device always wins
  2. It adds VLAN 40 to the repository automatically, because the device configuration is the source of truth
  3. It ignores VLAN 40, because IaC tools only compare interface settings and never check VLAN definitions
  4. It reports VLAN 40 as configuration drift and, with state overridden, removes it so SW1 matches the file
Show correct answer and explanation

Correct answer: D. It reports VLAN 40 as configuration drift and, with state overridden, removes it so SW1 matches the file

D is correct because the repository is the source of truth, and state overridden makes the device VLAN list match the file exactly, so the unlisted VLAN 40 is drift and is removed. A has the outcome backwards; the file defines VLANs 10, 20 and 30 as the desired state. B reverses the IaC model; the files are the source of truth and the device is made to match them. C is false; the desired state lists VLANs explicitly, so the tool compares them.

AI, Network Operations and Management

CCNA v2.0 sample question 8

A change that was merged into the IaC repository yesterday has caused problems on several switches. The Git history, newest first, shows:

commit 9b07d11  Oct 13  Change trunk allowed VLANs on uplinks (approved by M. Chen)
commit c41e9a2  Oct 2   Add VLAN 50 to access switches (approved by J. Ortiz)
commit 5f3a810  Sep 21  Initial baseline for building B

What is the BEST way to roll back?

  1. Delete the repository and rebuild it from the current running configurations of the switches
  2. Revert commit 9b07d11 through a reviewed change and let the pipeline apply the restored desired state
  3. Log in to each switch and undo the trunk change by hand, leaving the repository as it is now
  4. Revert commit 5f3a810, because the initial baseline is the oldest commit and is likely the cause
Show correct answer and explanation

Correct answer: B. Revert commit 9b07d11 through a reviewed change and let the pipeline apply the restored desired state

B is correct because 9b07d11 is the commit merged yesterday, and reverting it restores the previous desired state in Git, and the pipeline then pushes it, keeping history and review intact. A destroys the change history and turns the faulty device state into the new source of truth. C creates drift, because the repository still holds the bad state and the pipeline would reapply it. D targets the wrong commit; removing the baseline would undo the whole building configuration.

AI, Network Operations and Management

CCNA v2.0 sample question 9

An engineer runs an IaC pipeline twice in a row against the same switches, with no change to the files between runs. The second run reports:

SW1: ok=6    changed=0    failed=0
SW2: ok=6    changed=0    failed=0
SW3: ok=6    changed=0    failed=0

What property of the tool does this demonstrate?

  1. Rollback, because the second run removed every change that the first run had applied
  2. Idempotence, because applying the same desired state again makes no further changes
  3. Drift detection, because each switch reported that its configuration differs from the file
  4. Failover, because the pipeline moved the work to a standby controller after the first run
Show correct answer and explanation

Correct answer: B. Idempotence, because applying the same desired state again makes no further changes

B is correct because the devices already match the desired state after the first run, so the second run changes nothing, which is idempotent behavior. A would show changed counts, and nothing in the files asked the tool to undo anything. C is the opposite reading; changed=0 shows the switches already match the desired state. D describes high availability, which has nothing to do with the repeated run results.

AI, Network Operations and Management

CCNA v2.0 sample question 10

During an audit, the SNMP section of the running configuration on R1 shows:

snmp-server community FGread RO
snmp-server community FGwrite RW
snmp-server location DC1-Row4

The NMS uses SNMPv2c. Which risk should the auditor report?

  1. R1 encrypts the strings, but the location line exposes the rack
  2. Anyone who captures FGwrite can send Set requests that change R1
  3. R1 cannot answer polls until an SNMPv3 group is configured
  4. The RO community lets the NMS change R1 interface settings
Show correct answer and explanation

Correct answer: B. Anyone who captures FGwrite can send Set requests that change R1

B is correct because SNMPv2c sends community strings in clear text, and the RW community allows Set operations that modify the device. A is wrong because SNMPv2c never encrypts community strings, and a location string is not the main risk. C is false because community strings alone are enough for an SNMPv1 or v2c manager to poll the agent. D reverses the meaning; an RO community permits only Get, GetNext and GetBulk requests.

Keep practicing CCNA v2.0

CCNA v2.0 quick start · CCNA v2.0 overview · CCNA v1.1 practice tests · CCNA cheat sheet

FlashGenius is an independent practice resource, not Cisco. These are original practice questions written against the official CCNA 200-301 v2.0 exam topics, not exam dumps. Your result is practice accuracy, not an official score.