200-901 Practice Test 10 — 10 Questions

Question 1

In the TCP three-way handshake, which sequence of flags is exchanged to establish a connection?

Accepted Answer

SYN, SYN-ACK, ACK. The TCP three-way handshake consists of SYN, SYN-ACK, ACK.

Answer

SYN, ACK, SYN-ACK

Answer

ACK, SYN, SYN-ACK

Answer

SYN-ACK, SYN, ACK

Question 2

Refer to the exhibit. A Python script uses the YANG model to configure the interface. After applying this JSON payload via a PATCH request, what is the expected operational state of the interface?

Accepted Answer

Administratively down. The PATCH request applies the provided JSON payload, which sets the interface's 'enabled' leaf to 'false' (or equivalent YANG leaf for administrative state). In YANG models for interfaces (e.g., RFC 8343 or Cisco native models), setting 'enabled' to false places the interface in an administratively down state. The PATCH operation is valid for modifying interface configuration, and the payload explicitly changes the administrative state to down, overriding any previous configuration.

Answer

Error because PATCH is not allowed on interfaces

Answer

No change, remains as previously configured

Answer

Administratively up and protocol up

Question 3

Which authentication flow is most appropriate for a native mobile app that needs to access the Webex API on behalf of a user?

Accepted Answer

Authorization code grant. The authorization code grant is designed for apps that can securely store a client secret, but for native apps, PKCE (Proof Key for Code Exchange) is recommended. However, among standard grants, authorization code is the correct choice for user delegation.

Answer

Client credentials grant

Answer

Resource owner password grant

Answer

Implicit grant

Question 4

Refer to the exhibit. A developer is parsing the output of 'show ip route' using Python. Which regular expression would extract the prefix '10.0.1.0/24'?

Accepted Answer

r'^S\s+(\d+\.\d+\.\d+\.\d+/\d+)'. The regex `^S\s+(\d+\.\d+\.\d+\.\d+/\d+)` matches lines starting with 'S' (static route) followed by whitespace, then captures the entire prefix including both the IP address and subnet mask in CIDR notation (e.g., 10.0.1.0/24). This ensures the extracted string is exactly the prefix as it appears in the 'show ip route' output.

Answer

r'^S\s+(\d+\/\d+)'

Answer

r'^S.*(\d+\.\d+\.\d+\.\d+)'

Answer

r'S\s+(\S+)'

Question 5

Which HTTP method is used to partially update a resource in a RESTful API?

Accepted Answer

PATCH. PATCH is used for partial updates, while PUT replaces the entire resource.

Answer

POST

Answer

PUT

Answer

UPDATE

Question 6

Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)

Accepted Answer

Enables validation of data constraints before applying changes. YANG (RFC 6020/7950) allows you to define data constraints such as ranges, mandatory elements, and type restrictions directly in the model. When you attempt to apply configuration via NETCONF or RESTCONF, the server validates the data against these constraints before committing, preventing invalid changes from being applied.

Answer

Allows direct execution of CLI commands on any device

Answer

Supports multiple serialization formats like JSON and XML

Question 7

Refer to the exhibit. A developer sent a POST request to https://apic-ip/api/mo/uni/tn-testtenant.json with a JSON body missing the name attribute. What should the correct JSON body include?

Accepted Answer

{"fvTenant": {"attributes": {"name": "testtenant"}}}. The Cisco APIC REST API requires the JSON body for creating a tenant to follow the object model structure: the top-level key is the managed object class (fvTenant), which contains an 'attributes' object with the 'name' property. The name must match the tenant name in the URL (testtenant), and the API expects lowercase for the name value unless the object model specifies otherwise.

Answer

{"fvTenant": {"name": "testtenant"}}

Answer

{"attributes": {"name": "testtenant"}}

Answer

{"fvTenant": {"attributes": {"name": "TestTenant"}}}

Question 8

A team uses Git for source control. They want to ensure that all code committed to the main branch passes unit tests and linting. Which Git workflow practice best ensures this?

Accepted Answer

Using pre-commit hooks and CI pipeline to block failing commits. Pre-commit hooks run unit tests and linting locally before a commit is created, preventing failing code from entering the repository. A CI pipeline then verifies the same checks on the remote branch before allowing a merge to main, ensuring only passing code is integrated. This combination enforces quality gates at both the developer workstation and the server side, directly addressing the requirement to block failing commits.

Answer

Trunk-based development with feature toggles

Answer

Feature branching with manual merge

Answer

GitFlow with hotfix branches

Question 9

Which DNS record type is used to verify domain ownership for email security protocols like SPF and DKIM?

Accepted Answer

TXT. SPF and DKIM records are stored as TXT records in DNS. SPF records specify which mail servers are authorized to send email for a domain, while DKIM records contain a public key used to verify email signatures. Both are implemented via TXT records, not other record types.

Answer

CNAME

Answer

MX

Answer

NS

Question 10

An administrator is configuring DNS records for a company's domain. Which three DNS record types are most commonly used to map hostnames to IP addresses or aliases? (Choose three.)

Accepted Answer

AAAA. The A record maps a hostname to an IPv4 address, the AAAA record maps a hostname to an IPv6 address, and the CNAME record maps an alias hostname to the canonical (true) hostname. These three are the most common DNS record types used for hostname-to-IP or alias resolution in both IPv4 and IPv6 networks.

Answer

MX

Answer

PTR