200-901 Practice Test 23 — 15 Questions

Question 1

A developer is using the Cisco DNA Center REST API to retrieve a list of all network devices. The API requires authentication. The developer wants to avoid hardcoding credentials and instead use a token-based authentication mechanism. Which authentication method should the developer use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Token-based authentication using the /dna/system/api/v1/auth/token endpoint. DNA Center's REST API uses a token-based authentication flow. The developer must first call the authentication endpoint with Basic Auth to obtain a token, then include that token in the X-Auth-Token header for all subsequent requests. This approach is more secure than sending credentials with every call and is the standard method for DNA Center automation.

Answer

API key passed in the X-Auth-Token header

Answer

Basic Authentication with base64-encoded username and password

Answer

OAuth 2.0 with client credentials grant

Question 2

Which DNS record type is used to map a domain name to an IPv6 address?

Accepted Answer

AAAA. The AAAA (quad-A) record is the DNS resource record type defined in RFC 3596 to map a fully qualified domain name to a 128-bit IPv6 address. Unlike the A record, which stores a 32-bit IPv4 address, the AAAA record holds the longer IPv6 address, enabling clients to resolve hostnames to IPv6 destinations.

Answer

A

Answer

CNAME

Answer

MX

Question 3

A developer needs to authenticate to a REST API using an API key that must be sent in a custom HTTP header named X-API-Key on every request. The team uses Python requests. Which code snippet correctly attaches the key to a GET request?

Accepted Answer

requests.get(url, headers={"X-API-Key": api_key}). Custom API key headers are attached by passing a dictionary to the requests headers parameter. This places X-API-Key directly on the request, matching the server's expectation. Other transports such as Basic auth, query strings, or cookies use different header names and would not satisfy the API's authentication check, causing 401 responses.

Answer

requests.get(url, auth=(api_key, ""))

Answer

requests.get(url + "?X-API-Key=" + api_key)

Answer

requests.get(url, cookies={"X-API-Key": api_key})

Question 4

A developer is building a Python script that uses the Cisco Meraki Dashboard API. The script needs to retrieve the list of organizations the API key has access to. Which HTTP method and endpoint should the developer use?

Accepted Answer

GET /api/v1/organizations. The Meraki Dashboard API uses GET /api/v1/organizations to list organizations. The API key must be included in the X-Cisco-Meraki-API-Key header. This endpoint returns a JSON array of organizations. Other methods like POST or PUT are for creating or updating resources, and the API version must be v1.

Answer

POST /api/v1/organizations

Answer

GET /api/v0/organizations

Answer

PUT /api/v1/organizations

Question 5

A developer is building a Python application that must authenticate to Cisco Webex APIs on behalf of a service account. The application will run unattended and must not require interactive user login. The developer has already registered an integration in the Webex Developer Portal and obtained the client ID and client secret. Which OAuth 2.0 grant type should the application use?

Accepted Answer

Client Credentials grant. For an unattended service account that must call Webex APIs without any user interaction, the Client Credentials grant is the correct OAuth 2.0 flow. It uses the client ID and client secret directly to obtain an access token, eliminating the need for a browser redirect or user credentials. This is the standard approach for machine-to-machine integrations.

Answer

Implicit grant

Answer

Authorization Code grant

Answer

Resource Owner Password Credentials grant

Question 6

In a Docker Compose file, which key is used to define the dependency order between services?

Accepted Answer

depends_on. The depends_on key in Docker Compose allows specifying that one service depends on another, controlling startup order.

Answer

links

Answer

volumes

Answer

networks

Question 7

A developer is writing a Python script that uses the Cisco Meraki Dashboard API to retrieve a list of organizations. The script sends a GET request to https://api.meraki.com/api/v1/organizations but receives an HTTP 401 Unauthorized response. The developer has confirmed that the API key is correct and active. Which header must be included in the request to authenticate successfully?

Accepted Answer

X-Cisco-Meraki-API-Key: <API_KEY>. The Meraki Dashboard API authenticates requests using the API key supplied in the X-Cisco-Meraki-API-Key header. When this header is missing or incorrectly named, the API returns 401 Unauthorized regardless of the key's validity. Therefore, the developer must include X-Cisco-Meraki-API-Key with the correct key value to successfully retrieve the list of organizations.

Answer

Api-Key: <API_KEY>

Answer

Authorization: Bearer <API_KEY>

Answer

X-Api-Key: <API_KEY>

Question 8

A developer is using the Cisco NX-API on a Cisco Nexus switch to retrieve the running configuration. The developer sends an HTTP POST request to the NX-API endpoint with the JSON payload: {"ins_api": {"version": "1.0", "type": "cli_show", "chassis": "1", "input": "show running-config", "output_format": "json"}}. The switch returns an error indicating that the command is not supported. What is the most likely reason?

Accepted Answer

The 'show running-config' command requires the 'cli_show_ascii' type instead of 'cli_show'.. The NX-API uses different types for commands: 'cli_show' for structured JSON output and 'cli_show_ascii' for ASCII text output. The 'show running-config' command does not support JSON output, so it must be requested with 'cli_show_ascii'. The error occurs because the developer used 'cli_show' with a command that lacks JSON support. Changing the type to 'cli_show_ascii' resolves the issue.

Answer

The NX-API requires the 'input' field to be a list of commands, not a single string.

Answer

The 'output_format' should be set to 'ascii' instead of 'json'.

Answer

The 'chassis' field must be omitted for commands that are not chassis-specific.

Question 9

A network engineer is using Cisco DNA Center's Intent API to retrieve a list of all devices in the inventory. The engineer wants to filter the results to only include devices that are reachable and managed. Which HTTP method and endpoint should be used?

Accepted Answer

GET /dna/intent/api/v1/network-device. To retrieve the device inventory from Cisco DNA Center, the engineer must use the GET method on the /dna/intent/api/v1/network-device endpoint. This endpoint returns a JSON list of devices and supports query parameters like reachabilityStatus and managementState to filter results. The other methods either modify resources or target incorrect paths, making them unsuitable.

Answer

POST /dna/intent/api/v1/network-device

Answer

PUT /dna/intent/api/v1/network-device

Answer

GET /dna/intent/api/v1/device

Question 10

A developer is building a Python application that uses the Cisco Webex Teams REST API to manage memberships. The application must add a person to a space and later list the members of that space. Which two HTTP methods and endpoints should the application use? (Choose two.)

Accepted Answer

POST https://webexapis.com/v1/memberships with a JSON body containing roomId and personEmail. Webex Teams exposes membership management through the memberships resource. Creating a membership uses POST with roomId and personEmail in the body, while listing members uses GET with the roomId query parameter. The rooms resource is for space metadata, and PUT is for updating an existing membership, so neither fits the required add-and-list workflow.

Answer

POST https://webexapis.com/v1/rooms with a JSON body containing title and personEmail

Answer

PUT https://webexapis.com/v1/memberships with a JSON body containing roomId and personEmail

Answer

GET https://webexapis.com/v1/rooms?roomId={roomId}

Question 11

A developer runs a Python script that calls a REST API on a remote server. The script hangs indefinitely with no response. The developer opens a terminal and runs `curl -v https://api.example.com/status`. The output shows that the TCP three-way handshake completes, but the TLS handshake never starts. Which of the following is the most likely cause?

Accepted Answer

A network device is intercepting the connection and terminating it before TLS negotiation.. The key symptom is that the TCP three-way handshake succeeds but the TLS handshake never initiates. This indicates that something between the client and server is completing the TCP connection and then preventing the TLS negotiation from starting. A transparent proxy or firewall that terminates TCP connections without forwarding them can cause this exact behavior. The other options either contradict the observed TCP success or describe failures that would occur after TLS begins.

Answer

The server is not listening on port 443, so the TCP handshake should have failed.

Answer

A firewall is blocking outbound TCP port 80.

Answer

The client is using an outdated version of TLS that the server does not support.

Question 12

A developer is writing a script to interact with the Cisco DNA Center Intent API. The script needs to retrieve a list of all devices in the inventory. Which HTTP method and endpoint should the developer use?

Accepted Answer

GET /dna/intent/api/v1/network-device. The Cisco DNA Center Intent API uses the /dna/intent/api/v1/network-device endpoint with a GET method to retrieve the device inventory. This is the documented and standard way to list all devices. Other paths or methods do not correspond to the actual API and would fail.

Answer

POST /dna/intent/api/v1/network-device

Answer

GET /dna/intent/api/v1/inventory

Answer

GET /dna/intent/api/v1/device

Question 13

A developer is writing a Python script to interact with a Cisco DNA Center controller. The script needs to authenticate and obtain a token to make subsequent API calls. Which authentication method should the developer use?

Accepted Answer

POST to /dna/system/api/v1/auth/token with Basic Auth credentials to obtain a token.. Cisco DNA Center API authentication requires a POST request to the '/dna/system/api/v1/auth/token' endpoint with Basic Auth credentials. The response includes a token that must be used in the 'X-Auth-Token' header for subsequent calls. This token-based approach ensures secure and session-managed access.

Answer

Generate an API key in the DNA Center GUI and include it in the X-API-Key header.

Answer

HTTP Basic Authentication with username and password in the Authorization header.

Answer

Use OAuth 2.0 with a client ID and client secret to obtain an access token.

Question 14

A network administrator is configuring a new subnet on a Cisco switch. The subnet uses the address 192.168.10.0/24. The administrator needs to assign an IP address to the switch's management interface so it can be reached from a remote management station on the same subnet. Which of the following IP addresses should be assigned to the switch?

Accepted Answer

192.168.10.1. For a device to be reachable on the same subnet as a management station, it must be assigned a valid host address within that subnet. In 192.168.10.0/24, the addresses 192.168.10.0 and 192.168.10.255 are reserved as the network and broadcast addresses, respectively. Any other address, such as 192.168.10.1, is a usable host address. 192.168.11.1 is in a different subnet and would require routing.

Answer

192.168.11.1

Answer

192.168.10.255

Answer

192.168.10.0

Question 15

A developer is using the Cisco Meraki Dashboard API to manage networks. The developer needs to perform operations that require identifying a specific network. Which two identifiers are required when making a request to retrieve or modify a network? (Choose two.)

Accepted Answer

organizationId. To target a specific network in the Meraki Dashboard API, both organizationId and networkId are required. The organizationId scopes the request to the correct organization, and the networkId identifies the particular network within that organization. Other identifiers like deviceSerial, clientId, or configTemplateId are used for different resources and are not part of the network identification path.

Answer

clientId

Answer

deviceSerial

Answer

configTemplateId