Cisco 350-401 - Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)

The correct answer is D. print(json_object[ " TABLE_intf " ][ " ROW_intf " ][0] [ " prefix " ]).

Parsing JSON output from Cisco devices

Using Python to extract structured data

Understanding how CLI output is converted into JSON format

The command used:

show ip int brief | json

returns structured JSON data.

The JSON hierarchy shown in the exhibit:

{

" TABLE_intf " : {

" ROW_intf " : [

{ " intf-name " : " Vlan100 " , " prefix " : " 192.168.10.1 " , ... },

{ " intf-name " : " Vlan200 " , " prefix " : " 192.168.20.1 " , ... },

...

]

}

}

Important Observations:

ROW_intf is a list (array) of interface objects.

Each object contains fields like " prefix " (IP address).

VLAN 100 is used for management and appears first in the list.

Python Code Analysis:

json.loads() converts JSON string into a Python dictionary → json_object

To access VLAN100 IP:

json_object[ " TABLE_intf " ][ " ROW_intf " ][0] [ " prefix " ]

Why Option D is Correct:

Uses the correct variable ( json_object )

Correctly navigates dictionary → list → element → key

Index [0] corresponds to Vlan100 (management VLAN)

A & B: Use json.dumps incorrectly (this function converts Python → JSON, not for accessing data)

C: Uses index [1] , which refers to Vlan200, not VLAN100

When working with Cisco JSON output:

Identify list vs dictionary

Use indexing for lists ( [0] )

Use keys for dictionaries ( [ " key " ] )

Correct Pattern:

json_object[ " parent " ][ " child " ][index] [ " field " ]

Blank 1: event manager

Blank 2: applet

Blank 3: event syslog

Blank 4: pattern

Blank 5: mail server

The correct EEM structure begins with event manager applet Enable_Interface_And_Alert. This creates the Embedded Event Manager policy and names the applet. The trigger must detect a syslog message indicating that GigabitEthernet0/1 changed state to administratively down, so the event line must use event syslog pattern " Interface GigabitEthernet0/1, changed state to administratively down " . After the trigger occurs, the configured CLI actions enter enable mode, move into configuration mode, select the interface, issue no shutdown, and exit configuration mode. The final action sends an email alert. Cisco EEM mail syntax uses mail server followed by the SMTP server and mail parameters such as recipient, sender, subject, and body. The snippets must therefore form valid IOS EEM syntax, not just logical statements. This is an automation and operational-notification task: EEM reacts to a device event and performs corrective action while also communicating the incident. References/topics: ENCOR Automation, Embedded Event Manager, syslog event triggers, CLI action applets, operational alerting, SMTP notification.