200-901 Practice Test 14 — 15 Questions

Question 1

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

Accepted Answer

To define and manage network infrastructure resources in a declarative state file. The Cisco Catalyst Center Terraform provider allows network automation engineers to define and manage network infrastructure resources in a declarative state file. Terraform uses a desired-state approach where the configuration file describes the intended end state of resources, and the provider communicates with Catalyst Center's REST API to enforce that state, enabling idempotent and version-controlled infrastructure management.

Answer

To execute a series of CLI commands on network devices in sequence

Answer

To write imperative scripts that configure network devices via SSH

Answer

To directly manage routers and switches without using Catalyst Center

Question 2

A developer is working on a Python application that automates the configuration of multiple Cisco IOS-XE devices using RESTCONF. The application uses the requests library. The developer notices that sometimes the PUT request to update the interface description returns a 409 Conflict error. Upon investigation, the developer finds that the issue occurs when two instances of the application are running concurrently and attempt to update the same interface. The developer wants to implement a strategy to avoid conflicts. Which approach is most effective?

Accepted Answer

Use a distributed lock mechanism to ensure exclusive access. A distributed lock mechanism (Option B) is the most effective approach because it ensures exclusive access to the shared resource (the interface configuration) across multiple application instances. In a concurrent environment, retries (Option A) cannot prevent the fundamental race condition—both instances may still attempt conflicting writes. A distributed lock, such as one based on Redis or ZooKeeper, serializes access, guaranteeing that only one instance modifies the interface at a time, which directly resolves the 409 Conflict error from RESTCONF.

Answer

Implement a retry mechanism with exponential backoff and random jitter

Answer

Change the PUT to PATCH and hope for partial updates

Answer

Use a timestamp in the request to force overwrite

Question 3

A developer needs to create a Postman collection that uses a variable for the base URL and a token variable for authentication. The token is obtained from a login request and must be reused across requests. Where should the token variable be defined to persist across all requests in the collection?

Accepted Answer

As a collection variable. Collection variables in Postman are scoped to the entire collection, meaning they persist across all requests within that collection. By storing the token as a collection variable after the login request, it can be reused in subsequent requests without re-authentication. This is the recommended approach for sharing authentication tokens across requests in a Postman collection.

Answer

As a data variable from a CSV file

Answer

As a global variable

Answer

As a local variable in the login request

Question 4

A developer needs to retrieve a list of all networks in a Meraki organization using the Dashboard API. Which API call should be made?

Accepted Answer

GET /organizations/{organizationId}/networks. The correct API call to retrieve a list of all networks in a Meraki organization is GET /organizations/{organizationId}/networks. Option A shows this endpoint. Option B uses the wrong HTTP method (POST is for creating). Option C is missing the organization scope, and option D retrieves a single network.

Answer

POST /organizations/{organizationId}/networks

Answer

GET /networks

Answer

GET /organizations/{organizationId}/networks/{networkId}

Question 5

An engineer wants to trigger an EEM applet when a specific syslog message appears. Which event detector should be used?

Accepted Answer

event syslog pattern. EEM's syslog event detector triggers on syslog messages matching a pattern.

Answer

event timer cron

Answer

event interface

Answer

event cli pattern

Question 6

Which TWO are components of a REST API request? (Choose two.)

Accepted Answer

URI. A REST API request is defined by the combination of a URI (Uniform Resource Identifier) and an HTTP method. The URI identifies the specific resource (e.g., /api/users/123) on the server, while the HTTP method (GET, POST, PUT, DELETE, etc.) specifies the desired action to be performed on that resource. Together, they form the fundamental components that the client sends to the server to initiate a request.

Answer

Status code

Answer

Payload

Answer

Query string

Question 7

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. After a successful request, the response includes a Link header with rel="next" pointing to the next page. What does this indicate about the API's pagination?

Accepted Answer

The API uses Link header pagination and the next page can be retrieved by following the URL in the Link header.. Meraki API uses Link headers for pagination, and a rel="next" link indicates there are additional pages to fetch.

Answer

The API uses page-based pagination with page and perPage parameters.

Answer

The API uses offset-based pagination and the next page can be retrieved by incrementing an offset parameter.

Answer

The API uses cursor-based pagination with startingAfter/endingBefore parameters.

Question 8

A network engineer wants to automate the configuration of multiple Cisco IOS devices using Ansible. What is the minimum requirement on the control node to execute Ansible playbooks against these devices?

Accepted Answer

A Linux or macOS control node with Python installed. Ansible uses a push-based architecture where the control node must be a Linux or macOS system with Python installed to execute playbooks. Python is required because Ansible itself is written in Python and relies on it for modules, SSH connections, and Jinja2 templating. No additional database, license, or dedicated management server is needed for basic network automation against Cisco IOS devices.

Answer

Ansible Tower license for automated network configuration

Answer

A PostgreSQL database to store inventory and credentials

Answer

A dedicated management server with Ansible Tower installed

Question 9

Which TWO of the following are benefits of using UDP over TCP for real-time applications?

Accepted Answer

Lower latency due to no connection setup. Option A is correct because UDP is connectionless: it performs no three-way handshake (SYN/SYN-ACK/ACK) before sending data, so there is no round-trip setup delay, which directly reduces latency for real-time traffic such as VoIP or live video. Option C is correct because the UDP header is only 8 bytes (source port, destination port, length, checksum) versus TCP's minimum 20-byte header, so UDP imposes less per-packet overhead and leaves more bandwidth for payload. Option B is incorrect because guaranteed delivery is a TCP feature provided by sequence numbers and acknowledgments with retransmission; UDP offers best-effort delivery with no retransmission. Option D is incorrect because in-order delivery is also a TCP function achieved via sequence numbers and reassembly, whereas UDP datagrams may arrive out of order. Option E is incorrect because congestion control (slow start, congestion avoidance, etc.) is implemented by TCP, while UDP has no built-in congestion control and relies on the application or protocols like RTP/QUIC to manage it.

Answer

Guaranteed delivery of all packets

Answer

In-order packet delivery

Answer

Congestion control to avoid network overload

Question 10

Which two statements about the Cisco DevNet Sandbox are true?

Accepted Answer

Sandboxes can be reserved for a fixed time period. Cisco DevNet Sandboxes allow users to reserve a sandbox for a fixed time period, typically ranging from 2 to 4 hours, providing exclusive access to a pre-configured lab environment. This reservation model ensures that users have dedicated resources without contention, which is essential for testing APIs, automation scripts, or network configurations. The fixed-time reservation is a core feature of the DevNet Sandbox service, distinguishing it from always-on sandboxes.

Answer

Sandboxes cannot be used for learning APIs

Answer

Sandboxes require a paid subscription for basic access

Answer

Sandboxes only support Cisco IOS XE devices

Question 11

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required?

Accepted Answer

Client Credentials Grant. Client credentials grant is used for server-to-server authentication without user consent.

Answer

Implicit Grant

Answer

Authorization Code Grant

Answer

Password Grant

Question 12

A developer is using the ncclient library in Python to connect to a network device via NETCONF. Which operation should be used to modify the running configuration and commit the changes?

Accepted Answer

edit_config() followed by commit(). In NETCONF, the `edit-config()` operation is used to modify the running configuration, and the `commit()` operation is required to make those changes permanent when the device operates in candidate configuration mode. The ncclient library provides these methods to align with the NETCONF protocol's standard operations.

Answer

validate() followed by get_config()

Answer

get_config() followed by copy_config()

Answer

discard_changes() followed by edit_config()

Question 13

Which transport layer protocol is used by HTTP and guarantees reliable delivery?

Accepted Answer

TCP. HTTP relies on TCP (Transmission Control Protocol) as its transport layer protocol because TCP provides reliable, connection-oriented data delivery. TCP ensures that all HTTP requests and responses are delivered in order, without loss or duplication, by using acknowledgments, retransmissions, and sequence numbers. This reliability is essential for HTTP, which expects complete and correct data transfer for web pages and resources.

Answer

ICMP

Answer

IP

Answer

UDP

Question 14

An engineer sees that a DNS query for 'www.example.com' returns a CNAME record. What does this mean?

Accepted Answer

The domain is an alias for another domain. A CNAME (Canonical Name) record maps an alias domain name to another canonical domain name. When a DNS query for 'www.example.com' returns a CNAME record, it means 'www.example.com' is an alias for another domain (e.g., 'example.com'), and the resolver must perform a second query to obtain the actual A or AAAA record. This is defined in RFC 1035 and is used to simplify domain management.

Answer

The domain has multiple IP addresses

Answer

The domain uses IPv6

Answer

The IP address is directly provided

Question 15

Which THREE are valid Kubernetes Service types? (Select three.)

Accepted Answer

NodePort. A is correct because NodePort is a standard Kubernetes Service type that exposes a service on a static port (30000-32767) on each node's IP address, allowing external traffic to reach the service by targeting :. It builds on top of ClusterIP and is commonly used for development or direct access scenarios.

Answer

Deployment

Answer

Ingress