Authentic Cisco Certification Exam 350-101 Questions Answers

The correct element is theget() method. In the script, each device object is treated as a Python dictionary created from parsed JSON API output. The lines device.get("macAddress", "N/A") and device.get("ipAddress", "N/A") perform direct key-based lookup against the dictionary and return the associated value when the key exists. Python documentation defines dictionaries as key-value mappings and states that get() is used to avoid a KeyError by returning None or a specified default value when the key is absent.

This behavior is exactly what automation scripts need when consuming controller or wireless inventory APIs, because returned device records may not always contain every field. Cisco API inventory models commonly return structured device objects containing properties such as MAC address, model, network ID, product type, and wireless-related inventory attributes, which are then parsed by automation code. The pop operation would remove a dictionary key, not safely read it. The import function only loads modules such as requests and json. The format expression only builds the printed output string. Reference topics:Automation and AI — Python scripting, REST API consumption, JSON parsing, and wireless inventory automation.

The correct configuration is option C because Cisco IOS XE restricts inbound protocols on VTY lines with thetransport inputcommand. Cisco’s Catalyst 9800 best-practice guidance states that administrators should confirm SSH is enabled and Telnet is disabled for better controller security, and that the Catalyst 9800 follows standard Cisco IOS XE behavior for enabling or disabling Telnet and SSH. Cisco IOS XE SSH documentation explicitly showsline vty line_number [ending_line_number]followed bytransport input ssh, and explains that this prevents non-SSH Telnet connections, limiting access to SSH only.

The existing exhibit already includes the SSH prerequisites: hostname, domain name, RSA key generation, AAA new-model, a default login method using local credentials, and a local privileged user. The missing VTY configuration must therefore apply that default AAA login list to the VTY lines withlogin authentication defaultand restrict inbound transport to SSH. Cisco AAA documentation confirms thatlogin authentication defaultapplies the configured default authentication list to the line or set of lines. Option A is incomplete and does not explicitly permit SSH. Option B uses invalid syntax. Option D omits the requiredinputkeyword. Reference topics:Catalyst 9800 secure management, VTY access control, SSH, Telnet hardening, AAA login authentication, and IOS XE device administration.

The correct configuration approach is to enableApplication Visibility and Controlon thepolicy profile. On the Catalyst 9800, WLANs are not configured as isolated monolithic objects; the WLAN profile is mapped to a policy profile through a policy tag, and many client traffic services are applied from that policy profile. Cisco defines AVC as the wireless feature set that identifies and monitors applications using DPI, creates rules to manage application bandwidth and usage, and integrates with Flexible NetFlow for per-application or per-protocol statistics. Cisco further states that AVC benefits from NBAR running on the AP or controller, and that the NBAR2 engine analyzes and recognizes traffic flows.

Operationally, Cisco’s 9800 AVC guide shows that AVC is enabled by navigating toConfiguration > Services > Application Visibilityand selecting the relevantPolicy Profile. It also shows the CLI form under the policy profile:wireless profile policy AVC_testingfollowed byip nbar protocol-discovery, with verification showingNBAR Protocol Discovery : Enabled. Options A and B are incorrect because the feature is not enabled directly on the WLAN. Option C is generic and incomplete; the Cisco feature construct is AVC. Reference topics:AVC, NBAR2, Flexible NetFlow, Catalyst 9800 policy profiles, and wireless application visibility.