200-901 Practice Test 16 — 15 Questions

Question 1

Refer to the exhibit. An Ansible playbook is intended to set the description on GigabitEthernet0/1. However, the playbook fails because the device does not have that interface. What is the most likely reason?

Accepted Answer

The specified interface does not exist on the device. Option D is correct because the playbook explicitly targets GigabitEthernet0/1 using the `interface` attribute under `lines`, and the error indicates the device does not have that interface. Ansible's ios_config module will fail if the specified interface does not exist on the device, as it cannot apply configuration to a non-existent logical or physical interface.

Answer

The module requires gather_facts to be yes

Answer

The hosts group is incorrect

Answer

The lines attribute is misconfigured

Question 2

A company uses Ansible to automate network configuration. They have an Ansible control node that must reach all network devices. Which transport protocol does Ansible use by default to connect to Cisco IOS devices?

Accepted Answer

SSH. Ansible uses SSH as its default transport protocol to connect to Cisco IOS devices because SSH provides encrypted, secure remote access and is the standard for network device management in modern environments. Ansible's native architecture relies on SSH for agentless communication, executing modules and playbooks over this secure channel without requiring additional software on the target devices.

Answer

HTTP

Answer

Telnet

Answer

SNMP

Question 3

Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)

Accepted Answer

Enables validation of data constraints before applying changes. Option A is correct because YANG (RFC 6020/7950) allows you to define data constraints such as ranges, mandatory elements, and type restrictions directly in the model. When you attempt to apply configuration via NETCONF or RESTCONF, the server validates the data against these constraints before committing, preventing invalid changes from being applied.

Answer

Allows direct execution of CLI commands on any device

Answer

Supports multiple serialization formats like JSON and XML

Question 4

A developer is using Git to manage automation code. What is the primary advantage of using 'rebase' instead of 'merge' to integrate changes from a feature branch into the main branch?

Accepted Answer

Rebase results in a linear project history. Option D is correct because `git rebase` rewrites the commit history of the feature branch to appear as if it was branched from the latest commit on the main branch, resulting in a linear, clean project history. This avoids the merge commits that `git merge` creates, making the commit log easier to follow and debug. The primary advantage is not speed or conflict resolution, but a streamlined, non-branching history.

Answer

Rebase automatically resolves all conflicts

Answer

Rebase is faster than merge

Answer

Rebase preserves the exact commit timestamps

Question 5

A DevOps team manages network infrastructure using Infrastructure as Code (IaC). They store configuration files in a Git repository and use CI/CD to deploy changes. What is the best practice to ensure that only validated configurations are applied to production devices?

Accepted Answer

Require a pull request with at least one approval before merging to the main branch. Option B is correct because a mandatory code review before merging to production ensures that changes are validated. Option A is a good automation step but does not guarantee validation. Option C bypasses review. Option D would cause delays and is not standard.

Answer

Allow any team member to push directly to the main branch after testing locally

Answer

Use a manual approval gate in the CI/CD pipeline that requires manager sign-off

Answer

Automate the deployment of every commit directly to production

Question 6

A Cisco DevNet engineer is configuring model-driven telemetry on a Cisco IOS-XE device. The telemetry subscription includes the following path: 'Cisco-IOS-XE-native:native/interface/GigabitEthernet[Name='1/0/1']/ip/address'. Which part of this path identifies a specific list instance?

Accepted Answer

[Name='1/0/1']. Option B is correct because the XPath expression `[Name='1/0/1']` is a predicate filter that selects a specific list instance from the `GigabitEthernet` YANG list. In YANG model-driven telemetry, list keys are used to identify individual entries, and the predicate syntax `[key='value']` pinpoints exactly one instance within the list.

Answer

Cisco-IOS-XE-native

Answer

GigabitEthernet

Answer

ip/address

Question 7

Based on the exhibit, what is the frequency of the telemetry subscription?

Accepted Answer

Every 500 milliseconds. The exhibit shows a telemetry subscription with a 'period' of 500, which in Cisco model-driven telemetry (MDT) is expressed in milliseconds. Therefore, the frequency is every 500 milliseconds, making option B correct.

Answer

Every 500 seconds

Answer

When the management connection is re-established

Answer

On-change only

Question 8

Refer to the exhibit. Based on the output, which interface is experiencing a Layer 2 issue?

Accepted Answer

Serial0/0/0. The output shows that Serial0/0/0 is in the 'down/down' state, which indicates a Layer 1 or Layer 2 issue. Since the serial interface is administratively up (not 'administratively down'), the 'down/down' status points to a Layer 2 problem, such as a missing keepalive, encapsulation mismatch, or loss of carrier detect (CD) signal, rather than a Layer 3 addressing or routing issue.

Answer

Loopback0

Answer

GigabitEthernet1

Answer

GigabitEthernet2

Question 9

A DevOps team uses a CI/CD pipeline to deploy network configurations. They want to ensure that only authorized network engineers can trigger changes to production devices. Which integration is most appropriate?

Accepted Answer

Implement Role-Based Access Control (RBAC) on the CI/CD tool. Option B is correct because Role-Based Access Control (RBAC) on the CI/CD tool directly restricts which users or groups can trigger pipeline jobs that modify production network devices. This ensures that only authorized network engineers have the permissions to execute changes, aligning with the principle of least privilege in deployment pipelines.

Answer

Encrypt the Ansible vault password

Answer

Use a separate staging environment

Answer

Use a pre-commit hook in Git to validate YAML syntax

Question 10

Which TWO are valid capabilities advertised during a NETCONF session?

Accepted Answer

urn:ietf:params:netconf:capability:url:1.0. Option A is correct because the URL capability (urn:ietf:params:netconf:capability:url:1.0) is a standard NETCONF capability that allows a client to specify a URL as the source or target of operations like or . Option D is correct because urn:ietf:params:netconf:base:1.0 is the mandatory base capability that every NETCONF session must advertise, as defined in RFC 6241, indicating support for the core NETCONF protocol operations.

Answer

urn:ietf:params:netconf:capability:writable-running:2.0

Answer

urn:ietf:params:netconf:capability:validate:2.0

Answer

urn:ietf:params:netconf:capability:interleave:1.0

Question 11

An engineer is automating the configuration of SNMP on Cisco routers using Ansible. Which two modules are commonly used for this purpose? (Select TWO)

Accepted Answer

cisco.ios.ios_config. The cisco.ios.ios_config module is correct because it allows you to push raw CLI configuration lines to Cisco IOS devices, including SNMP-related commands like 'snmp-server community' or 'snmp-server host'. The cisco.ios.ios_snmp_server module is correct because it is a dedicated Ansible module that provides structured, idempotent management of SNMP server settings (e.g., communities, hosts, traps) without requiring raw CLI lines.

Answer

cisco.ios.ios_interface

Answer

cisco.ios.ios_command

Answer

cisco.ios.ios_banner

Question 12

Which THREE of the following are key principles of Infrastructure as Code (IaC) as applied to network automation?

Accepted Answer

Configuration should be idempotent.. IaC principles include idempotency (repeatable results), version control (track changes), and continuous testing (validate configurations). Option A (manual configuration) is opposite. Option D (temporary scripts) is not a principle.

Answer

Manual configuration is preferred for critical devices.

Answer

Temporary scripts should be used for one-time changes.

Question 13

A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?

Accepted Answer

GET /organizations/{organizationId}/networks. The Meraki API uses RESTful conventions where retrieving a list of resources is done with a GET request. The endpoint GET /organizations/{organizationId}/networks returns all networks belonging to a specific organization, as documented in the Meraki API reference. This matches the standard pattern for listing child resources under a parent resource.

Answer

POST /organizations/{organizationId}/networks

Answer

GET /networks

Answer

PUT /organizations/{organizationId}/networks

Question 14

A developer is writing an application that needs to send a large amount of data reliably over a network. Which transport layer protocol should the developer use?

Accepted Answer

TCP. TCP (Transmission Control Protocol) is the correct choice because it provides reliable, connection-oriented data delivery with acknowledgments, retransmission, and sequencing. This ensures that large amounts of data are transmitted without loss or corruption, which is critical for applications requiring data integrity.

Answer

ICMP

Answer

HTTP

Answer

UDP

Question 15

An engineer needs to transfer a router configuration file to a server in the same network using a simple protocol that does not require authentication. Which protocol is best?

Accepted Answer

TFTP. TFTP (Trivial File Transfer Protocol) is the best choice because it is a lightweight, connectionless protocol that operates over UDP (port 69) and does not require any authentication or user credentials. It is commonly used for transferring router configuration files and IOS images in local network environments where simplicity and speed are prioritized over security.

Answer

SCP

Answer

FTP

Answer

HTTP

200-901 Practice Test 16 — 15 Questions

Exhibit

200-901 Practice Test 16 — 15 Questions

Exhibit