300-435 Question 189
Single answerA network engineer is tasked with automating the deployment of a new network policy in an enterprise environment using Cisco DNA Center Intent APIs. The engineer wants to ensure that the policy is applied to specific devices and includes configurations for QoS. Which step should the engineer take as part of the API workflow to achieve this?
- A
Use the 'GET /network-device' API to retrieve device IDs and then use the 'POST /intent' API to apply the policy.
- B
Use the 'POST /policy' API to create and deploy the policy directly without specifying device details.
- C
Use the 'GET /policy/tag' API to retrieve existing tags and then associate the policy with the tags using the 'POST /policy/tag/association' API.
- D
Use the 'GET /site' API to retrieve site IDs and then use the 'POST /policy/site' API to apply the policy at the site level.
Show answer and explanation
Correct answer: C
Explanation
The correct answer is to use tags for associating policies with devices. Tags provide a flexible and scalable way to group devices logically, enabling consistent application of policies such as QoS across the network. The 'GET /policy/tag' API retrieves the available tags, and the 'POST /policy/tag/association' API is used to associate the policy with the appropriate tags. This ensures the policy is applied to the intended devices without manually specifying each one.
- A. Incorrect.
This option involves retrieving device IDs and applying the policy directly. However, this approach does not align with how Cisco DNA Center Intent APIs are designed, as policies are often associated with tags or sites rather than individual devices.
- B. Incorrect.
This option skips the step of specifying device or tag details, which is necessary for proper policy deployment using Intent APIs. Policies cannot be deployed without associating them with a scope (tags, sites, or devices).
- C. Correct.
This is the correct option. Retrieving tags with 'GET /policy/tag' and associating the policy using 'POST /policy/tag/association' aligns with the best practices of using Cisco DNA Center Intent APIs for policy deployment. Tags help to group devices logically and ensure consistent policy application.
- D. Incorrect.
While site-based policies can be applied, the workflow described in this option is more suitable for location-based configurations rather than targeted QoS policies. Additionally, this does not involve using tags, which is the recommended approach for this scenario.