200-901 Practice Test 18 — 15 Questions

Question 1

What is the purpose of the 'Authorization' header in a REST API request?

Accepted Answer

To authenticate the client. The Authorization header carries credentials (e.g., Bearer token, Basic auth) to authenticate the client. Content-Type specifies body format. Accept specifies response format.

Answer

To enable caching of the response

Answer

To specify the desired response format

Answer

To specify the format of the request body

Question 2

An application uses OAuth 2.0 client credentials grant to authenticate with a Cisco API. Which of the following best describes this flow?

Accepted Answer

The application sends its client ID and secret to obtain a token directly.. Client credentials grant is used for server-to-server authentication without user involvement.

Answer

The application uses a username and password in the request body.

Answer

The user provides their credentials via a consent screen.

Answer

A device code is displayed for the user to enter on a separate device.

Question 3

In Postman, you want to run a collection of API requests automatically and test responses. Which feature should you use?

Accepted Answer

Collection Runner. The Collection Runner runs all requests in a collection sequentially and allows tests to be evaluated.

Answer

Postman Workspaces

Answer

Postman Monitors

Answer

Postman Interceptor

Question 4

In Cisco DNA Center's intent API, which endpoint would you use to retrieve the list of all network devices?

Accepted Answer

GET /dna/intent/api/v1/network-device. The correct endpoint is GET /dna/intent/api/v1/network-device. Other options are incorrect or refer to other areas like topology or site hierarchy.

Answer

GET /dna/intent/api/v1/topology

Answer

GET /dna/intent/api/v1/site

Answer

GET /dna/intent/api/v1/issues

Question 5

A developer is building a script to retrieve a list of network devices from Cisco DNA Center. The API response includes a 'nextToken' field in the body to indicate more results. What pagination method is being used?

Accepted Answer

Cursor-based pagination. Cursor-based pagination uses a token (e.g., nextToken) to point to the next set of results, unlike offset/limit which uses page numbers.

Answer

Page-based pagination

Answer

Offset/Limit pagination

Answer

Link header pagination

Question 6

A developer is designing a REST API that will be used by multiple client applications. The API must support versioning to ensure backward compatibility. Which approach should the developer use to implement API versioning?

Accepted Answer

Embed the version in the URI, e.g., /v1/resource. Embedding the version in the URI (e.g., /v1/resource) is the most common and straightforward approach for REST API versioning. It makes the version explicit in the URL, allowing clients to directly target a specific version without requiring special header handling or query parameter parsing. This method is widely adopted in industry APIs (e.g., GitHub, Twilio) and ensures backward compatibility by keeping older endpoints accessible under their original URI path.

Answer

Use different HTTP methods for different versions

Answer

Pass the version as a query parameter, e.g., ?version=1

Answer

Use a custom HTTP header to specify the version

Question 7

When using the Cisco Meraki Dashboard API with pagination, the Link header in the response contains <https://api.meraki.com/api/v1/organizations?perPage=10&startingAfter=123>; rel="next". What does this indicate?

Accepted Answer

The API uses cursor-based pagination; the next page can be retrieved using the provided URL.. The Link header with rel="next" provides the URL for the next page of results; cursor-based pagination is used via startingAfter.

Answer

The API uses offset-based pagination and the next offset is 123.

Answer

The request should be retried after 123 seconds.

Answer

The response is limited to 10 items, and 123 items remain.

Question 8

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required?

Accepted Answer

Client Credentials Grant. Client credentials grant is used for server-to-server authentication without user consent.

Answer

Implicit Grant

Answer

Authorization Code Grant

Answer

Password Grant

Question 9

A developer needs to retrieve a list of network devices from Cisco DNA Center. Which API endpoint should be used?

Accepted Answer

GET /dna/intent/api/v1/network-device. The intent API endpoint /dna/intent/api/v1/network-device retrieves network devices.

Answer

GET /dna/intent/api/v1/topology

Answer

POST /dna/intent/api/v1/network-device

Answer

GET /dna/intent/api/v1/site

Question 10

Which NETCONF operation is used to retrieve the entire configuration datastore from a network device?

Accepted Answer

. retrieves configuration datastore. retrieves state and config data. modifies configuration. confirms a candidate configuration.

Answer

<edit-config>

Answer

<get>

Answer

Question 11

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. After a successful request, the response includes a Link header with rel="next" pointing to the next page. What does this indicate about the API's pagination?

Accepted Answer

The API uses Link header pagination and the next page can be retrieved by following the URL in the Link header.. Meraki API uses Link headers for pagination, and a rel="next" link indicates there are additional pages to fetch.

Answer

The API uses page-based pagination with page and perPage parameters.

Answer

The API uses offset-based pagination and the next page can be retrieved by incrementing an offset parameter.

Answer

The API uses cursor-based pagination with startingAfter/endingBefore parameters.

Question 12

An application needs to authenticate to Cisco DNA Center. Which authentication method is used?

Accepted Answer

Basic Auth over HTTPS to obtain a token. DNA Center uses Basic Auth to obtain a token via POST /dna/system/api/v1/auth/token.

Answer

API key in X-Cisco-DNA-Center-API-Key header

Answer

OAuth2 with client credentials grant

Answer

Bearer token in Authorization header with no prior step

Question 13

An engineer is configuring Cisco IOS XE for RESTCONF programmability. Which configuration is necessary to enable the RESTCONF API?

Accepted Answer

netconf-yang and restconf. RESTCONF requires the 'restconf' service to be enabled globally. Additionally, 'netconf-yang' is often enabled together, but 'restconf' is the key for RESTCONF.

Answer

ip scp server enable

Answer

ip http server and ip http secure-server

Answer

feature nxapi

Question 14

A developer is using the Meraki Dashboard API to list the organizations accessible by the API key. They send a GET request to https://api.meraki.com/api/v1/organizations. What is the correct way to pass the API key?

Accepted Answer

In the X-Cisco-Meraki-API-Key header. Meraki Dashboard API uses the X-Cisco-Meraki-API-Key header for authentication.

Answer

In the Authorization header as Bearer token

Answer

In the URL as a query parameter: ?apiKey=...

Answer

In the request body as JSON

Question 15

Which YANG model is commonly used as an open standard for interface configuration and is supported by many vendors?

Accepted Answer

openconfig-interfaces. OpenConfig models are vendor-neutral standard models. oc-interfaces is the OpenConfig interface model.

Answer

ietf-interfaces

Answer

cisco-routing

Answer

Cisco-IOS-XE-native