200-901 Practice Test 13 — 15 Questions

Question 1

A developer is troubleshooting an HTTP API call that returns a 404 status code. Which of the following is the most likely cause?

Accepted Answer

The requested URL endpoint does not exist. HTTP 404 Not Found is a client-side error indicating the server could not find the requested resource at the specified URL. The most likely cause is that the endpoint path is incorrect, misspelled, removed, or not mapped to any route on the server. The server itself is reachable and processed the request, but no matching resource exists, which is precisely what 404 signifies.

Answer

The server is unavailable due to maintenance

Answer

The server encountered an internal error

Answer

The client lacks proper authentication

Question 2

A developer is implementing a Cisco Intersight API solution to manage multiple UCS domains. They receive an HTTP 403 Forbidden response when trying to create an organization. What is the most likely issue?

Accepted Answer

The user account does not have sufficient privileges. An HTTP 403 Forbidden response indicates that the server understood the request but is refusing to authorize it. In the context of Cisco Intersight, this typically means the API key or user account associated with the request lacks the required privileges to perform the action, such as creating an organization. Only accounts with administrative or appropriate role-based access control (RBAC) permissions can create organizations.

Answer

The request body is malformed

Answer

The API key is invalid

Answer

The organization already exists

Question 3

An application needs to retrieve a list of network devices from Cisco DNA Center. Which HTTP method should be used against the /dna/intent/api/v1/network-device endpoint?

Accepted Answer

GET. GET is used to retrieve resources in REST APIs.

Answer

PUT

Answer

DELETE

Answer

POST

Question 4

In DNA Center, which API endpoint is used to retrieve a list of current network issues?

Accepted Answer

GET /dna/intent/api/v1/issues. DNA Center's issues API is at /dna/intent/api/v1/issues.

Answer

GET /dna/intent/api/v1/topology

Answer

POST /dna/system/api/v1/auth/token

Answer

GET /dna/intent/api/v1/network-device

Question 5

An application sends many requests to the Meraki API and receives HTTP 429 errors. The response includes a 'Retry-After' header. What does this status code indicate?

Accepted Answer

The client has exceeded the rate limit. HTTP 429 status code means 'Too Many Requests', indicating that the client has exceeded the rate limit set by the API. The 'Retry-After' header tells the client how long to wait before making another request.

Answer

The requested resource was not found

Answer

The server encountered an internal error

Answer

The API key is invalid

Question 6

Which TWO of the following features are provided by Cisco DNA Center but NOT by Cisco Prime Infrastructure? (Choose two.)

Accepted Answer

Machine learning-based assurance analytics. Machine learning-based assurance analytics is a feature exclusive to Cisco DNA Center, which uses advanced telemetry and ML algorithms to proactively detect anomalies, predict network issues, and provide closed-loop assurance. Cisco Prime Infrastructure relies on traditional polling and threshold-based monitoring, lacking the predictive and adaptive analytics capabilities that DNA Center's Assurance engine offers.

Answer

Configuration compliance auditing

Answer

Software image management

Answer

Network Hierarchy and Site Management

Question 7

A company uses Ansible to automate configuration of its Cisco IOS XE routers. The network team recently upgraded the routers' software from IOS 15.x to IOS XE 17.x. Since the upgrade, the Ansible playbook fails intermittently with the message: 'Failed to connect to the host via ssh: timed out'. However, the team can SSH manually to the routers from the Ansible control node without issues. The playbook uses the 'cisco.ios.ios_config' module with default SSH options. The routers have been configured with SSH version 2 and local authentication. The Ansible control node runs Red Hat Enterprise Linux 8. Which action should the network engineer take to resolve the issue?

Accepted Answer

Increase the SSH timeout in the Ansible configuration file (ansible.cfg) to 60 seconds.. The intermittent SSH timeout after upgrading to IOS XE 17.x is likely due to slower key exchange algorithms (e.g., diffie-hellman-group-exchange-sha256) that increase connection setup time. Increasing the SSH timeout in ansible.cfg (e.g., setting timeout=60) gives the SSH handshake enough time to complete, avoiding the timeout. Forcing SSHv1 is not recommended as it is deprecated and may not be supported. Host key checking (option C) does not affect timeout, and using a different module (option D) does not solve the underlying connectivity issue.

Answer

Configure the routers to use SSH version 1 only.

Answer

Set the 'host_key_checking' option to False in ansible.cfg.

Answer

Use the 'ios_command' module instead of 'ios_config' to perform the tasks.

Question 8

An application uses Cisco DNA Center APIs and needs to receive notifications when a new device is added. Which DNA Center API category should be used to set up event-driven notifications?

Accepted Answer

Platform. The Platform API category in Cisco DNA Center provides the necessary endpoints for subscribing to event notifications, including the ability to create webhook subscriptions for events such as new device additions. This category includes the Event Management and Notification APIs that allow applications to receive real-time updates. The other categories focus on network operations, not event-driven integration.

Answer

Change your network

Answer

Know your network

Answer

Run your network

Question 9

Which tool can be used to explore YANG models locally?

Accepted Answer

pyang. pyang is a tool for validating and converting YANG models.

Answer

yangcatalog.org

Answer

Cisco DevNet sandbox

Answer

Postman

Question 10

What is the correct URL path for retrieving the configuration of a network interface using RESTCONF on a Cisco device?

Accepted Answer

/restconf/data/ietf-interfaces:interfaces. RESTCONF uses /restconf/data/ followed by the YANG module path. The standard path for interfaces is /restconf/data/ietf-interfaces:interfaces.

Answer

/restconf/data/interfaces

Answer

/api/restconf/data/interfaces

Answer

/restconf/operations/get-config

Question 11

A network engineer needs to automate the deployment of QoS policies across multiple campus switches using Cisco DNA Center. The engineer decides to use the Cisco DNA Center Intent API to create a policy tag and bind it to a group of devices. After sending the PUT request to /dna/intent/api/v1/policy-tag, the API returns a 202 Accepted status. However, the engineer notices that the policy is not being applied consistently across all devices. What is the most likely reason?

Accepted Answer

The request was asynchronous, and the engineer did not check the task status for completion.. The 202 Accepted status indicates that the request was accepted for asynchronous processing, not that it has completed. Cisco DNA Center Intent API uses asynchronous tasks for operations like policy tag binding, and the engineer must poll the task status endpoint to verify completion and success. Without checking the task status, the engineer cannot know if the policy was applied consistently across all devices, as some tasks may have failed or are still in progress.

Answer

The payload was not in JSON format, causing a silent failure.

Answer

The API token expired before the request was processed.

Answer

The engineer used an incorrect API endpoint for policy tags.

Question 12

In a CI/CD pipeline for network automation, a change is rolled back using a Git revert commit that triggers a new pipeline. The rollback playbook fails because the 'previous' configuration snapshot is missing. What should be implemented to prevent this?

Accepted Answer

Store configuration backups in a version-controlled repository before each change. Storing configuration backups in a version-controlled repository before each change ensures that a known-good 'previous' snapshot is always available for rollback, even if the Git revert commit only reverts the playbook code and not the device configuration. In CI/CD for network automation, the pipeline must have access to the exact prior state to restore it; version-controlled backups provide an immutable, auditable history that can be checked out by commit hash. This directly prevents the failure described, where the rollback playbook cannot find the previous configuration snapshot.

Answer

Use a single source of truth like NetBox

Answer

Use the 'check mode' only

Answer

Disable rollback pipelines

Question 13

A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?

Accepted Answer

pyATS allows writing reusable test scripts with built-in test libraries. PyATS is a test automation framework designed for network engineers, providing built-in test libraries (e.g., `pyats.aetest`) that enable writing reusable, modular test scripts. Unlike a simple ping script, pyATS supports structured test cases, data-driven testing, and integration with Cisco devices via libraries like `Genie`, allowing for comprehensive validation beyond basic reachability.

Answer

pyATS requires less code than a ping script

Answer

pyATS can test multiple devices in parallel

Answer

pyATS automatically generates test reports

Question 14

A network engineer is using the Cisco Meraki Dashboard API to retrieve a list of organizations. The API returns a JSON array. Which HTTP method should be used to fetch this list?

Accepted Answer

GET. The GET method is designed for retrieving data from a specified resource. In the context of the Meraki Dashboard API, listing organizations is a read-only operation, so GET is the correct choice. GET requests should not have side effects, ensuring that repeated calls do not alter the state of the server. This aligns with REST principles and the Meraki API documentation, which specifies GET for all retrieval endpoints.

Answer

POST

Answer

PUT

Answer

DELETE

Question 15

You are a junior network developer tasked with automating device inventory retrieval using the Cisco Meraki Dashboard API. You have already generated an API key with the appropriate scopes and have tested it successfully with simple GET requests. However, when you attempt to retrieve the list of all devices in your organization via the 'GET /organizations/{organizationId}/devices' endpoint, you receive a 403 Forbidden error. You verify that the API key is correctly included in the request header as 'X-Cisco-Meraki-API-Key'. You also confirm that the organization ID is correct. You are able to reach the Meraki Dashboard API server from your environment, as other endpoints (e.g., 'GET /organizations') work fine. What is the most likely cause of the 403 error, and what should you do to resolve it?

Accepted Answer

The API key lacks the required permissions; regenerate the API key with full read access for devices.. A 403 Forbidden error specifically indicates that the server understood the request but refuses to authorize it. Since other endpoints like 'GET /organizations' work, network connectivity and API key validity are confirmed. The most likely cause is that the API key lacks the required scope or permission to access the 'GET /organizations/{organizationId}/devices' endpoint. Regenerating the API key with full read access (including device inventory) resolves this, as Meraki API keys are scoped at creation time and cannot be modified after generation.

Answer

The network firewall is blocking the request; check firewall logs and allow outbound traffic to the Meraki API.

Answer

The request should use POST instead of GET; change the HTTP method to POST to retrieve device data.

Answer

The API endpoint URL is incorrect; verify the exact path and version in the API documentation.