200-901 Practice Test 1 — 10 Questions

Question 1

Refer to the exhibit. A developer is building a Docker image for a Node.js application. The Dockerfile contains:
```
FROM node:14
WORKDIR /usr/src/app
COPY package*.json ./
RUN npm install
COPY . .
CMD ["node", "app.js"]
```
When building, the error shown occurs. What is the most likely cause?

Accepted Answer

The application is running as a non-root user (e.g., node) that lacks write permission to the working directory.. The error occurs because the official Node.js Docker image (node:14) runs as a non-root user named 'node' by default. The WORKDIR /usr/src/app is owned by root, so the 'node' user lacks write permission to that directory. When npm install tries to create node_modules or write package-lock.json, it fails with a permission error. Option D correctly identifies this user-permission mismatch.

Answer

The Dockerfile should use the root user for running npm install.

Answer

The npm install command should be run with the --unsafe-perm flag.

Answer

The base image node:14 is outdated and contains a bug.

Question 2

A network engineer is configuring EtherChannel between two switches. The switches are connected via four links. The engineer wants to load balance traffic based on source and destination IP addresses. Which configuration command should be used on Cisco IOS?

Accepted Answer

port-channel load-balance src-dst-ip. The command 'port-channel load-balance src-dst-ip' configures EtherChannel to use both the source and destination IP addresses in the hash algorithm, which is exactly what the engineer needs for load balancing based on source and destination IP addresses. This ensures traffic distribution across the four links by computing a hash on the combination of source and destination IPs, providing a balanced distribution for IP traffic.

Answer

port-channel load-balance src-ip

Answer

port-channel load-balance dst-ip

Answer

port-channel load-balance src-dst-mac

Question 3

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. The API returns a 429 error. What should the developer do to handle this correctly?

Accepted Answer

Wait for the number of seconds specified in the Retry-After header before retrying.. A 429 HTTP status code indicates 'Too Many Requests,' meaning the client has exceeded the rate limit imposed by the Meraki Dashboard API. The correct handling is to respect the Retry-After header, which specifies the number of seconds the client must wait before retrying the request, as per RFC 7231 Section 7.1.3. This ensures compliance with API rate limits and prevents further throttling or temporary blocking.

Answer

Ignore the error and continue, as 429 is a temporary issue.

Answer

Switch to a different base URL to bypass the limit.

Answer

Increase the request rate by using multiple API keys in parallel.

Question 4

Which two authentication methods are commonly used with Cisco APIs? (Choose two.)

Accepted Answer

Basic Authentication over HTTPS. Basic Authentication over HTTPS is commonly used with Cisco APIs because it sends a base64-encoded username:password pair in the Authorization header, which is a simple and widely supported method for authenticating REST API requests. Cisco's REST APIs, such as those on DNA Center and Meraki, often accept Basic Auth as a fallback or for legacy integration, though it is less secure than token-based methods.

Answer

SNMPv3

Answer

SSH Key

Answer

RADIUS

Question 5

Which THREE are valid ways to expose ConfigMap data to a pod in Kubernetes?

Accepted Answer

As environment variables. Kubernetes allows ConfigMap data to be exposed as environment variables inside a pod using the `env` or `envFrom` field in the pod spec. This is a common method for injecting configuration into containers without modifying the container image.

Answer

As a Kubernetes Secret

Answer

As a container image label

Question 6

A company uses a blue/green deployment strategy for their web application. The current live version is blue, and a new version green is ready. The load balancer currently routes all traffic to blue. What is the correct next step to switch traffic to green with minimal downtime?

Accepted Answer

Update the load balancer to route all traffic to green. In a blue/green deployment, the entire new version (green) is deployed alongside the current live version (blue). The correct next step to switch traffic with minimal downtime is to update the load balancer to route all traffic to green. This instant switch avoids the incremental risk of rolling updates and ensures a clean cutover that can be quickly reverted if issues arise.

Answer

Scale down blue pods and scale up green

Answer

Perform a rolling update from blue to green

Answer

Delete the blue deployment and create green

Question 7

A developer is working with the Cisco SD-WAN vManage API to monitor overlay tunnels. They need to retrieve a list of all devices with their site IDs and IP addresses. Which API endpoint is most appropriate?

Accepted Answer

GET /dataservice/device. The GET /dataservice/device endpoint returns a list of all devices managed by the Cisco SD-WAN vManage, including their site IDs and IP addresses. This is the correct endpoint for retrieving device inventory details, as it provides the necessary fields like 'deviceId', 'system-ip', and 'site-id' in the response.

Answer

GET /dataservice/device/monitor

Answer

GET /dataservice/device/device

Answer

GET /dataservice/device/overlay

Question 8

An engineer is exploring YANG models for network interfaces. They need a vendor-neutral model that can be used across multiple device types. Which YANG model should they use?

Accepted Answer

OpenConfig interfaces. OpenConfig models are vendor-neutral, while Cisco native models are vendor-specific.

Answer

ietf-interfaces

Answer

Cisco-NX-OS-device

Answer

Cisco-IOS-XE-native

Question 9

A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?

Accepted Answer

GET /organizations/{organizationId}/networks. The Meraki API uses RESTful conventions where retrieving a list of resources is done with a GET request. The endpoint GET /organizations/{organizationId}/networks returns all networks belonging to a specific organization, as documented in the Meraki API reference. This matches the standard pattern for listing child resources under a parent resource.

Answer

POST /organizations/{organizationId}/networks

Answer

GET /networks

Answer

PUT /organizations/{organizationId}/networks

Question 10

A developer notices that after a new deployment, the application is not receiving traffic. The Service selector does not match the pod labels. Which kubectl command can be used to inspect the Service's selector?

Accepted Answer

kubectl describe service my-service. The `kubectl describe service my-service` command displays detailed information about the Service, including its selector field, which defines the label key-value pairs used to match pods. This allows the developer to directly compare the selector against the pod labels to identify the mismatch. It is the most straightforward way to inspect the selector without needing to parse raw YAML or execute commands inside the service.

Answer

kubectl exec service/my-service -- cat /etc/hosts

Answer

kubectl get service my-service -o yaml

Answer

kubectl logs service/my-service