200-901 Practice Exam 3 — 20 Questions

Question 1

Which three of the following are common data formats used with REST APIs on Cisco platforms?

Accepted Answer

JSON. JSON (JavaScript Object Notation) is a lightweight, text-based data interchange format that is natively supported by most programming languages and REST APIs. Cisco platforms, such as Cisco DNA Center and Cisco Meraki, use JSON as the primary data format for API requests and responses because it is easy to parse and has a compact structure. JSON's key-value pair syntax aligns well with RESTful principles, making it the most common choice for modern Cisco REST APIs.

Answer

CSV

Answer

HTML

Question 2

What is the default transport protocol for NETCONF sessions?

Accepted Answer

SSH. NETCONF (Network Configuration Protocol) uses SSH as its default transport protocol, as specified in RFC 6242. SSH provides the required secure, authenticated, and encrypted channel for NETCONF sessions, ensuring confidentiality and integrity of configuration data exchanged between the client and server.

Answer

HTTP

Answer

TLS

Answer

SNMP

Question 3

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

Accepted Answer

network_cli. The ios_config module is designed for Cisco IOS devices and requires a persistent network connection to send configuration commands. The network_cli connection method establishes an SSH session that remains open for the duration of the playbook task, allowing the module to send multiple CLI commands and handle prompts. This is the recommended connection method for ios_config because it supports privilege escalation and command responses needed for configuration changes.

Answer

local

Answer

netconf

Answer

httpapi

Question 4

A developer is using Python requests library to interact with a Cisco IOS XE device's REST API. The call returns a 400 Bad Request status. The payload is correctly formatted JSON. What is the most likely cause?

Accepted Answer

The authentication credentials are missing or incorrect in the request header. A 400 Bad Request status from a Cisco IOS XE REST API indicates a client-side error, typically related to malformed syntax or missing required elements. Since the JSON payload is confirmed as correctly formatted, the most likely cause is missing or incorrect authentication credentials in the request header, as the API requires valid credentials (e.g., Basic Auth with username:password encoded in Base64) to process the request. Without proper authentication, the server rejects the request with a 400 status before even evaluating the payload.

Answer

The device's API service is not enabled

Answer

The requested URL path is incorrect

Answer

The JSON payload contains a syntax error

Question 5

A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?

Accepted Answer

XML or JSON. RESTCONF (RFC 8040) is a REST-like protocol that uses HTTP methods to access structured data defined by YANG models. It natively supports both XML and JSON as data serialization formats, allowing clients to choose the format via the Accept header or URL suffix (e.g., .xml or .json). This makes XML and JSON the correct answer because they are the only formats explicitly defined in the RESTCONF specification for encoding configuration and operational data.

Answer

YAML

Answer

Plain text

Answer

CSV

Question 6

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Accepted Answer

Inventory files can be written in YAML format. Ansible inventory files define the hosts and groups that Ansible manages. They can be written in YAML format, which is a human-readable data serialization language that Ansible supports alongside the traditional INI format. This flexibility allows users to choose the format that best suits their automation needs, with YAML being particularly useful for complex inventories due to its support for structured data.

Answer

Inventory files cannot contain variables for individual hosts

Answer

Inventory files must be in INI format only

Answer

An inventory file can include a [vars] section to define group variables

Question 7

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

Accepted Answer

Include an API key in the X-Cisco-Meraki-API-Key header. The Meraki Dashboard API uses a simple API key for authentication, not OAuth2 or JWT. The key must be included in the `X-Cisco-Meraki-API-Key` header of every request. This is the only supported method for authenticating with the Meraki API, as documented by Cisco Meraki.

Answer

Provide username and password in the Authorization header with Basic auth

Answer

Use OAuth2 client credentials grant and pass a bearer token

Answer

Generate a JSON Web Token (JWT) signed with a shared secret

Question 8

In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?

Accepted Answer

GET /dna/intent/api/v1/site. The site hierarchy can be retrieved via GET /dna/intent/api/v1/site.

Answer

POST /dna/intent/api/v1/site

Answer

GET /dna/intent/api/v1/network-device

Answer

GET /dna/intent/api/v1/topology

Question 9

An engineer is troubleshooting packet loss between two hosts on different subnets. The traceroute shows that packets reach the first hop router but then stop. The router's ARP table shows an incomplete entry for the next-hop IP address. What is the most likely cause?

Accepted Answer

The next-hop device is powered off or has a Layer 1 issue.. An incomplete ARP entry for the next-hop IP address indicates that the router sent an ARP request but received no reply. This typically means the next-hop device is unreachable at Layer 2, often because it is powered off, has a failed interface, or there is a cabling issue. Since traceroute shows packets reaching the first hop but not beyond, the Layer 2 failure at the next hop is the most direct cause.

Answer

The MTU is misconfigured on the outgoing interface.

Answer

The routing protocol has not converged yet.

Answer

An ACL is blocking traffic on the outgoing interface.

Question 10

Match each Python library to its typical use in network automation.

Accepted Answer

Netmiko: Simplifies SSH connections to network devices. Netmiko, NAPALM, Paramiko, and PyEZ are common Python libraries in network automation. Netmiko simplifies SSH, NAPALM provides a vendor-agnostic API, Paramiko is a low-level SSH library, and PyEZ is Juniper-specific. Common confusions include mixing Netmiko with HTTP libraries and NAPALM with vendor-specific tools.

Answer

Netmiko: Used for HTTP REST API calls

Answer

NAPALM: Juniper-specific library for automation

Question 11

Drag and drop the steps to configure OSPF on a Cisco router into the correct order.

Accepted Answer

1. Enable OSPF routing process (router ospf [process-id]). 2. Configure Router ID (router-id [id]). 3. Advertise networks (network [network] [wildcard] area [area]).. OSPF configuration requires enabling the OSPF process, setting a router ID, and advertising networks in specific areas.

Answer

1. Configure Router ID (router-id [id]). 2. Enable OSPF routing process (router ospf [process-id]). 3. Advertise networks (network [network] [wildcard] area [area]).

Answer

1. Enable OSPF routing process (router ospf [process-id]). 2. Advertise networks (network [network] [wildcard] area [area]). 3. Configure Router ID (router-id [id]).

Answer

1. Advertise networks (network [network] [wildcard] area [area]). 2. Enable OSPF routing process (router ospf [process-id]). 3. Configure Router ID (router-id [id]).

Question 12

A developer is using the Meraki Dashboard API to list all organizations. Which TWO of the following are true regarding pagination in the Meraki API? (Choose TWO.)

Accepted Answer

The Link header contains URLs for the next and previous pages.. Meraki API pagination uses Link header or startingAfter/endingBefore query parameters.

Answer

Page size is fixed at 1000 items per page.

Answer

Pagination is optional and disabled by default.

Answer

Pagination requires the use of OAuth tokens.

Question 13

An HTTP/2 connection uses multiple concurrent streams over a single TCP connection. Which feature of HTTP/2 enables this?

Accepted Answer

Multiplexing. Multiplexing is the HTTP/2 feature that allows multiple concurrent streams to share a single TCP connection. This eliminates head-of-line blocking at the application layer by enabling the interleaving of frames from different streams, so a slow response on one stream does not block others.

Answer

Binary framing layer

Answer

Server push

Answer

Header compression (HPACK)

Question 14

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

Accepted Answer

RESTCONF. RESTCONF is the correct choice because it is a stateless protocol that uses standard HTTP methods (GET, POST, PUT, PATCH, DELETE) to manipulate YANG-defined data stores on a Cisco IOS-XE device. Unlike NETCONF, which is stateful and session-oriented, RESTCONF operates over HTTP without maintaining session state, making it ideal for lightweight, RESTful automation.

Answer

NETCONF

Answer

SNMP

Answer

CLI

Question 15

A Cisco Catalyst Center API uses OAuth 2.0 with the client credentials grant for server-to-server communication. Which token endpoint parameter should the client include to identify itself?

Accepted Answer

grant_type=client_credentials. In client credentials, the client sends client_id and client_secret (often as Basic auth or form parameters) to authenticate.

Answer

scope=admin

Answer

response_type=token

Answer

grant_type=authorization_code

Question 16

When using Cisco Intersight API to manage UCS servers, a script must invoke an API that triggers a firmware upgrade. Which HTTP method and endpoint pattern should be used?

Accepted Answer

POST to /api/v1/upgrade. Triggering a firmware upgrade in Cisco Intersight requires creating a new operation, which aligns with the POST HTTP method. The endpoint /api/v1/upgrade is a typical RESTful pattern for initiating an upgrade action, as POST is used to submit data to a resource to create or trigger a process. In Intersight's API, firmware upgrades are managed via POST requests to specific endpoints like /api/v1/upgrade, not through retrieval, modification, or deletion of existing resources.

Answer

PUT to /api/v1/version

Answer

DELETE to /api/v1/firmware

Answer

GET to /api/v1/status

Question 17

An EEM applet is triggered when a specific syslog message pattern appears. Which action should be used to send a custom syslog message?

Accepted Answer

action 1.0 syslog msg "Custom event occurred". EEM applets use 'action syslog msg ' to generate a syslog message.

Answer

action 1.0 cli command "show logging"

Answer

action 1.0 info type routername

Answer

action 1.0 set 1.0 _syslog_msg "Custom event"

Question 18

An organization uses Cisco DNA Center and wants to programmatically deploy a configuration template to multiple devices. Which API category should be used?

Accepted Answer

Change your network. The 'change your network' category includes template deployment, plug and play, etc.

Answer

Platform

Answer

Run your network

Answer

Know your network

Question 19

A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?

Accepted Answer

Southbound interface. NETCONF is a network management protocol used to install, manipulate, and delete the configuration of network devices. In the SDN architecture, the southbound interface is the layer that connects the control plane to the data plane, and NETCONF operates as a southbound protocol by carrying configuration data from a controller or management system down to network devices.

Answer

Northbound interface

Answer

Application layer

Answer

Control layer

Question 20

Refer to the exhibit. A developer from subnet 10.10.10.0/24 cannot reach the RESTCONF API on the IOS-XE device. What is the most likely cause?

Accepted Answer

The 10.10.10.0/24 subnet is not permitted by the access-class.. The access-class configured under the RESTCONF API restricts incoming connections to specific subnets. Since the developer is on subnet 10.10.10.0/24, which is not listed in the permit statement, all HTTPS requests from that subnet are dropped before reaching the API. This is the most direct cause of the connectivity failure.

Answer

HTTPS is not enabled on the device.

Answer

The HTTP server is not enabled.

Answer

Authentication is not configured as local.