CCNA v2.0 AI Domain, Objective by Objective: Agentic AI, Prompts, Ansible, SNMP and Syslog

The part of CCNA v2.0 that worries people most is the new domain 5.0, AI, and Network Operations and Management. It is only 10% of the exam, but it has words in it that have never been on a CCNA before: agentic AI, prompts, persona.

Read the six objectives carefully and you will see that most of it is old CCNA material in a new home, plus two genuinely new skills you can learn in a weekend. This guide goes through all six, in the order Cisco lists them.

Quick context: v2.0 is the only CCNA 200-301 you can book from February 3, 2027. If you test before that you are on v1.1, and this domain is not on your exam in this form. See CCNA v1.1 ends February 2, 2027 if you are deciding which one to take.

The six objectives at a glance

Two verbs matter: select and use. Everything else is describe or interpret, which means understanding, not doing.

5.1 Agentic AI in network operations

A chatbot answers a question. An agent is given a goal and works toward it in a loop: it plans a step, uses a tool (for example runs show commands through an API), looks at the result, and decides the next step, until the goal is met or it hands back to a person.

For the exam, know the difference and know the guardrails:

• Chat assistant: you ask, it answers, you act.
• Agentic AI: it can gather data and propose or take actions on its own, inside limits you set.
• Human in the loop: changes that affect production should need approval. Read only actions (collecting show output, checking logs) are the safe place to let an agent work alone.
• Your job does not disappear. The official v2.0 exam description says you may be asked to “evaluate output and recommendations from agentic AI and digital network assistants”. Cisco is testing whether you can tell when the AI is wrong. That is only possible if you know the networking.

5.2 Selecting a prompt (the new skill)

Notice the objective says select a prompt, not write one. Expect a question that shows several prompts and asks which is best. Cisco names the four components to judge them on:

Practice question 1. An engineer wants help finding why OSPF neighbors on a branch router are stuck in EXSTART. Which prompt is best?

• A. “Why is OSPF broken?”
• B. “Here is the full running config of our HQ router including the enable secret and TACACS key. Fix OSPF.”
• C. “Act as a senior network engineer. Two IOS XE routers on the same Ethernet segment are stuck in EXSTART. Interface MTU is 1500 on one side and 1400 on the other. List the three most likely causes in order, and give the verification command for each as a table.”
• D. “Act as a senior network engineer and write a detailed essay on OSPF.”

Answer: C. It has a persona, a specific task, the platform, the relevant facts (the MTU mismatch, which is the classic EXSTART cause), a clear output format, and it shares no secrets. B fails data classification. A has no context. D has a persona but no task or format.

Practice question 2. Which prompt component is violated by pasting a config that contains snmp-server community Pr1vate RW?

Answer: data classification. Community strings are credentials. We wrote a whole post on this: don’t paste configs into ChatGPT.

5.3 Network management approaches

Know one line about each of the five approaches Cisco lists:

If a question describes “the configuration lives in a Git repository and every change is reviewed before it is applied”, the answer is infrastructure as code.

5.4 SNMP

Same SNMP you already know, now filed under operations:

• Manager (the monitoring system) polls agents (the devices). The agent answers from its MIB, where every value has an OID.
• Polling uses UDP 161. Traps and informs (the device reporting an event on its own) go to UDP 162. Informs are acknowledged; traps are not.
• SNMPv2c uses community strings in clear text. SNMPv3 adds authentication and encryption, and is the one to recommend.

More detail and commands: SNMP topic page.

5.5 Using Ansible to execute commands

In v1.1 you only had to recognize what Ansible does. In v2.0 you have to use it to run commands, so be able to read and complete a small playbook like this one. Ansible is agentless: it connects over SSH, and for Cisco IOS it uses the network_cli connection.

Inventory file inventory.ini:

[switches]
sw1 ansible_host=10.10.10.11
sw2 ansible_host=10.10.10.12

[switches:vars]
ansible_connection=ansible.netcommon.network_cli
ansible_network_os=cisco.ios.ios
ansible_user=netops

Playbook show.yml:

- name: Collect interface and VLAN status
  hosts: switches
  gather_facts: false
  tasks:
    - name: Run show commands
      cisco.ios.ios_command:
        commands:
          - show ip interface brief
          - show vlan brief
      register: result

    - name: Print the output
      ansible.builtin.debug:
        var: result.stdout_lines

Run it with ansible-playbook -i inventory.ini show.yml --ask-pass.

What to take from it for the exam: the inventory lists the devices, the playbook lists tasks, each task calls a module (ios_command runs exec commands; ios_config pushes configuration), and register saves the output. Keep passwords out of the files; use --ask-pass or Ansible Vault. The Ansible topic page goes further.

5.6 Interpreting syslog

Every IOS syslog message follows %FACILITY-SEVERITY-MNEMONIC: text. Take this one:

%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down

Facility LINEPROTO, severity 5 (notifications), mnemonic UPDOWN.

The eight severity levels, lowest number is most serious:

A memory line students like: Every Awesome Cisco Engineer Will Need Ice cream Daily. And remember that logging trap 4 sends levels 0 through 4, not only level 4. Full breakdown on the syslog topic page.

What left the automation domain

If you studied with v1.1 material, these are no longer in v2.0: REST API characteristics and CRUD, JSON components, Terraform, and the separate objective on controller-based architecture (it survives only as one row in 5.3). Do not skip them if your exam date is on or before February 2, 2027. They are still on v1.1.

The #1 mistake

Treating this domain as “AI theory I can skim”. Two objectives are practical. You will be asked to pick the right prompt, which is really a test of whether you can spot leaked credentials and missing context, and to use Ansible, which means reading inventory and playbook files without panicking. Both take a weekend to learn and are easy marks once you have done them once.

Frequently asked questions

Q: Do I need to know Python for the CCNA v2.0 AI domain? A: No. Python does not appear anywhere in the CCNA v2.0 exam topics. The hands-on part is Ansible, which uses YAML files, not Python code.

Q: Will I have to write prompts on the exam? A: The objective says select, so expect to choose the best prompt from options, judged on data classification, output format, persona and instructions.

Q: How much of the exam is this domain? A: 10%, the same weight the automation domain had in v1.1.

Q: Is SNMP and syslog content new? A: No. Both were in v1.1 under IP Services. v2.0 moves them into the AI, and Network Operations and Management domain.

Q: Can I practice the Ansible part without buying equipment? A: Yes. Ansible runs on any Linux machine or WSL on Windows, and you can point it at virtual IOS XE devices in Cisco Modeling Labs Free or a lab environment you already use.

Where to go from here

• Confused by the name “CCNA Automation”? Read CCNA Automation vs the automation domain on the CCNA.
• The big picture of everything that changed: CCNA v2.0 (2027): what’s changing.
• Want someone to walk you through prompts and your first playbook live? Book a free first session.

Sources: Cisco 200-301 CCNA v2.0 and v1.1 exam topics (official PDFs), Cisco Learning blog announcing the CCNA v2.0 refresh (May 2026).