200-901 Practice Test 19 — 15 Questions

Question 1

A Python script uses the `requests` library to fetch device details from Cisco DNA Center. The API returns a JSON response with nested objects. To extract the management IP address from the response stored in variable `data`, which code snippet is correct? The JSON structure is:
{
  "response": [
    {
      "managementIpAddress": "192.168.1.1",
      "hostname": "router1"
    }
  ]
}

Accepted Answer

data['response'][0]['managementIpAddress']. The response contains a list under key 'response'; correct access is via data['response'][0]['managementIpAddress'].

Answer

data.managementIpAddress

Answer

data['response']['managementIpAddress']

Answer

data.get('response')[0].get('managementIpAddress')

Question 2

An Ansible playbook fails with the error: "mapping values are not allowed here". The relevant YAML snippet is:
---
- name: Configure interface
  ios_config:
    lines:
      - ip address 10.0.0.1 255.255.255.0
    parents: interface GigabitEthernet0/1
  What is the most likely cause of this error?

Accepted Answer

The indentation of `parents:` is incorrect relative to `lines:`. The error "mapping values are not allowed here" in YAML typically indicates an indentation issue. The `parents:` line should be at the same indentation level as `lines:`.

Answer

The `ios_config` module requires a provider statement

Answer

The `lines:` item should be a list of strings

Answer

The `parents:` value must be enclosed in quotes

Question 3

The exhibit shows a JSON response from a Cisco NX-OS API query for interface status. What is the operational state of interface Ethernet1/1?

Accepted Answer

down. The JSON shows "oper-state": "down", so the operational state is down.

Answer

unknown

Answer

admin-down

Answer

up

Question 4

A network engineer runs the Ansible playbook shown in the exhibit, but it fails. The error indicates the module 'cisco.ios.ios_vlan' does not exist. What is the most likely cause?

Accepted Answer

The module name is misspelled; it should be 'ios_vlans'. The correct module name is 'ios_vlans' (plural) for Cisco IOS VLAN configuration. 'ios_vlan' is not a valid module.

Answer

The collection 'cisco.ios' is not installed

Answer

The 'state: present' is invalid for this module

Answer

The playbook lacks 'become: yes'

Question 5

A Python script using ncclient to configure a Cisco IOS XE device fails with an error that the capability 'urn:ietf:params:xml:ns:netconf:base:1.0' is missing. What is the most likely cause?

Accepted Answer

The device does not have NETCONF enabled. The 'hostkey_verify=False' parameter bypasses SSH host key checking, but the error indicates NETCONF capability not supported. The device likely does not have NETCONF enabled, or SSH connectivity fails.

Answer

The username or password is incorrect

Answer

The edit-config operation should be on candidate instead of running

Answer

The host key verification is disabled incorrectly

Question 6

Which TWO of the following are essential steps in a typical Git workflow when collaborating on a feature branch? (Choose two.)

Accepted Answer

Merge the branch into master. Creating a branch isolates work, and merging integrates it back. While rebasing is common, the question asks for essential steps; merge is more fundamental than rebase.

Answer

Rebase onto master

Answer

Delete the remote repository

Answer

Stash changes before switching branches

Question 7

Which THREE of the following are common tools used in a CI/CD pipeline for network automation? (Choose three.)

Accepted Answer

Jenkins. Jenkins automates CI/CD, Git provides version control, and Ansible automates network configuration. Docker and VMware are more about containers and virtualization, not core pipeline tools.

Answer

VMware vSphere

Answer

Docker

Question 8

A network engineer is designing a REST API using Python Flask to allow provisioning of VPN tunnels. The API must support multiple clients and must be secure. Which approach is most appropriate for authenticating and authorizing API requests?

Accepted Answer

Issue API tokens to each client and validate them on each request. API tokens with scopes are a common and secure method for REST APIs, allowing fine-grained access control. Basic auth with dictionary is outdated and insecure. OAuth 2.0 with client credentials is best for machine-to-machine, but given options, API tokens are most appropriate.

Answer

Use OAuth 2.0 with client credentials grant

Answer

Use HTTP Basic Authentication with a dictionary of usernames and passwords

Answer

Embed a shared secret in each client's source code

Question 9

A network engineer is developing a Python application that uses the Cisco Meraki Dashboard API. The API responses are in JSON format. Which Python module is most commonly used to parse JSON responses?

Accepted Answer

json. The json module is the standard Python module for parsing JSON data. csv, xml, and yaml are used for other data formats.

Answer

csv

Answer

yaml

Answer

xml

Question 10

Which THREE of the following are common stages in a continuous integration pipeline? (Select THREE)

Accepted Answer

Build. Build, Test, and Lint are typical CI stages. Deploy is usually part of continuous delivery/deployment, and Monitor is after deployment.

Answer

Monitor

Answer

Deploy

Question 11

A developer is designing a Python script to parse the output of 'show ip interface brief' from a Cisco IOS device. The output is stored in a string variable. The developer wants to extract only the interfaces that are up/up. The current code uses regular expressions but often fails because the interface names contain special characters (e.g., GigabitEthernet1/0/1). Which approach should the developer use to reliably parse the output?

Accepted Answer

Use a structured data format like JSON or YAML if available from the device. The most reliable approach is to use structured output if the device supports JSON or YAML output (e.g., 'show ip interface brief | json' on IOS-XE). This avoids regex pitfalls. Option A (split on whitespace) may break if interface names contain spaces (they don't, but slashes are fine). Option B (CSV parser) is not appropriate for this output. Option D (complex regex) is possible but less maintainable and error-prone.

Answer

Use the 're' module with a more complex pattern that escapes special characters

Answer

Use split on whitespace and check column values

Answer

Use a CSV parser with a custom delimiter

Question 12

A CI/CD pipeline for network automation includes a stage that runs Ansible playbooks against a staging environment. The pipeline is triggered by Git commits. After a commit, the pipeline fails because the Ansible inventory file is missing. What is the most likely reason?

Accepted Answer

The inventory file is listed in .gitignore. Files that are not tracked by Git will not be available in the CI environment. The inventory file must be committed; ignoring it with .gitignore excludes it.

Answer

The pipeline script has a typo in the inventory path

Answer

The Ansible version in the pipeline is incompatible

Answer

The staging environment is not reachable

Question 13

A developer is implementing error handling in a script that makes multiple API calls to Cisco ACI. Which approach is best practice for handling transient network failures?

Accepted Answer

Retry with exponential backoff. Retrying with exponential backoff is best practice to handle transient failures without overwhelming the server. Ignoring errors can cause data inconsistency; immediate retry may cause congestion; logging and terminating defeats automation goals.

Answer

Retry with fixed delay

Answer

Ignore errors and continue

Answer

Always retry immediately

Question 14

Refer to the exhibit. A developer is writing an Ansible playbook to configure this interface on a Cisco IOS XE device. Which Ansible module should be used to set the IP address?

Accepted Answer

ios_config. The ios_config module sends arbitrary configuration commands, which is appropriate for setting the ip address. ios_command runs show commands, ios_ip_interface does not exist, ios_facts gathers facts.

Answer

ios_ip_interface

Answer

ios_command

Answer

ios_facts

Question 15

A Python script uses the requests library to authenticate to Cisco DNA Center. The script receives a 401 Unauthorized error even though the credentials are correct. Which of the following is a likely cause?

Accepted Answer

The token has expired. If using a cached token, the token may have expired, causing a 401. Option B (wrong endpoint) gives 404. Option C (Content-Type) causes a 400. Option D (HTTP) may cause a redirect or error but not necessarily 401 with correct credentials.

Answer

The request is using HTTP instead of HTTPS

Answer

The Content-Type header is not set to application/json

Answer

The API endpoint is incorrect