200-901 Practice Test 10 — 10 Questions

Question 1

A developer wants to send a message to a Webex room using the API. The message should contain a simple text body. Which endpoint and parameter are required?

Accepted Answer

POST /v1/messages with body parameter 'roomId' and 'text'. To send a message, a POST request is made to /v1/messages with a JSON body containing roomId and text (or markdown). roomId identifies the target room.

Answer

GET /v1/messages with query parameter 'roomId'

Answer

POST /v1/memberships with body parameter 'message'

Answer

POST /v1/rooms with body parameter 'text'

Question 2

Based on the NAT translation table, what type of NAT is being used?

Accepted Answer

PAT (overload). The NAT translation table shows multiple internal IP addresses (e.g., 10.1.1.1, 10.1.1.2) being translated to the same public IP address (e.g., 203.0.113.1) but with different source ports. This is the defining characteristic of Port Address Translation (PAT), also known as NAT overload, where a single public IP is shared among many internal hosts by multiplexing on layer-4 port numbers.

Answer

Dynamic NAT

Answer

Static PAT

Answer

Static NAT

Question 3

A company is implementing a secure CI/CD pipeline. Which THREE practices are essential for securing the pipeline?

Accepted Answer

Sign and verify all build artifacts.. Option A is correct because signing build artifacts (e.g., with Sigstore/cosign or GPG) and verifying those signatures before deployment ensures integrity and provenance, preventing tampered or unauthorized artifacts from reaching production. Option D is correct because implementing role-based access control (RBAC) on the CI/CD system enforces least privilege, restricting who can modify pipelines, trigger builds, or access secrets and deployment targets. Option E is correct because integrating SAST tools into the build stage catches code-level vulnerabilities (e.g., injection flaws, insecure deserialization) early, before artifacts are promoted through the pipeline. Option B is incorrect because pulling container images from any public registry exposes the pipeline to untrusted or malicious images; images should come from vetted, trusted registries with scanning and signature verification. Option C is incorrect because storing secrets such as API keys and passwords in version control exposes them to anyone with repository access and to history leaks; secrets should be kept in a dedicated secrets manager (e.g., HashiCorp Vault, AWS Secrets Manager) and injected at runtime.

Answer

Allow all container images to be pulled from any public registry.

Answer

Store secrets (API keys, passwords) in version control.

Question 4

A developer uses the Cisco DNA Center API to retrieve device inventory. The JSON response is shown. Which Python code snippet correctly extracts the serial number?

Accepted Answer

data['response'][0]['serialNumber']. The JSON response from the Cisco DNA Center device inventory API returns a list of devices under the 'response' key, and each device is a dictionary. The serial number for the first device is accessed by indexing into the list with [0] and then retrieving the 'serialNumber' key from that dictionary.

Answer

data['serialNumber']

Answer

data['response']['serialNumber']

Answer

data[0]['serialNumber']

Question 5

A network developer is using Cisco NSO to manage multi-vendor devices. Which three are valid approaches to handle device-specific differences? (Choose three.)

Accepted Answer

Write custom Python code in the service model. Cisco NSO allows developers to write custom Python code within the service model to handle device-specific logic, such as translating abstract service parameters into vendor-specific CLI or NETCONF commands. This approach provides flexibility to accommodate non-standard configurations that cannot be expressed purely through YANG models or NEDs.

Answer

Use SNMP MIBs for all configurations

Answer

Configure each device manually through CLI

Question 6

A developer wants to create a new room in Cisco Webex using the API. Which HTTP request is appropriate?

Accepted Answer

POST /v1/rooms. Creating a new Webex room is a resource-creation operation, which maps to HTTP POST against the /v1/rooms collection. POST /v1/rooms with a JSON body containing the title creates the room and returns its details. This follows standard REST semantics.

Answer

GET /v1/rooms

Answer

PUT /v1/rooms

Answer

DELETE /v1/rooms

Question 7

A developer is using Cisco Meraki API to retrieve a list of networks. What is the correct HTTP method and endpoint path for listing networks in an organization?

Accepted Answer

GET /organizations/{orgId}/networks. The HTTP GET method is used to retrieve or list resources, and the endpoint /organizations/{orgId}/networks is the standard Meraki API path for fetching all networks within a specified organization. This follows RESTful conventions where GET requests are idempotent and safe for data retrieval.

Answer

DELETE /organizations/{orgId}/networks

Answer

POST /organizations/{orgId}/networks

Answer

PUT /organizations/{orgId}/networks

Question 8

A developer has created a Webex Teams bot that listens for messages in a specific room and responds with information from an external database. The bot uses the Webex API's 'messages.create' method to post replies. During testing, the bot sometimes fails to respond, but no errors are logged. The developer checks the Webex Developer Portal and sees that the bot's rate limit is set to 10 requests per second. The bot's average load is 5 requests per second, but occasionally spikes to 15 requests per second for a few seconds. The developer wants to ensure the bot functions reliably without exceeding rate limits. Which approach should the developer implement?

Accepted Answer

Implement a request queue that limits outgoing requests to 10 per second and uses exponential backoff on failure.. Implementing a request queue that limits outgoing requests to 10 per second and uses exponential backoff on failure ensures the bot respects the Webex API rate limit of 10 requests per second. The queue smooths out spikes (e.g., 15 req/s) by buffering excess requests, while exponential backoff handles any HTTP 429 responses gracefully by retrying after increasing delays, preventing further rate limit violations. This approach directly addresses the bot's intermittent failure without relying on external support or sacrificing functionality.

Answer

Request a higher rate limit from the Webex API support team.

Answer

Catch HTTP 429 (Too Many Requests) errors and immediately retry the request.

Answer

Reduce the bot's overall request rate to 5 per second to stay well within the limit.

Question 9

A developer is working with the Webex API to receive real-time notifications when a message is posted. Which resource should they create?

Accepted Answer

A webhook with resource 'messages' and event 'created'. Webex webhooks allow you to subscribe to events like message.created.

Answer

A bot that polls the /v1/messages endpoint every second

Answer

A membership to the room to receive notifications

Answer

A webhook with resource 'rooms' and event 'created'

Question 10

In DNA Center, which API category is used to deploy templates to devices?

Accepted Answer

Change your network. The 'Change your network' API category in Cisco DNA Center is specifically designed for network configuration and provisioning tasks, including deploying templates to devices. This category encompasses APIs that push configuration changes, such as applying CLI templates via the Template Programmer (formerly Template Editor) or provisioning new network settings, directly aligning with the action of deploying templates to network devices.

Answer

Platform

Answer

Know your network

Answer

Run your network