200-901 Practice Test 25 — 15 Questions

Question 1

Refer to the exhibit. A developer receives this response when making a POST request to the Cisco DNA Center API to create a new device. What is the most likely issue?

Accepted Answer

The request body is missing the required field 'ipAddress'.. The error response includes a field 'missingParameters' with the value 'ipAddress', which explicitly indicates that the request body did not include the required 'ipAddress' field. Cisco DNA Center's API for device creation requires this field to identify the device on the network. Without it, the API cannot proceed with adding the device, resulting in a 400 Bad Request.

Answer

The API endpoint is incorrect.

Answer

The device IP address is already in use.

Answer

The API token has expired.

Question 2

Which TWO of the following are examples of application layer protocols?

Accepted Answer

HTTP. HTTP (Hypertext Transfer Protocol) operates at the application layer (Layer 7) of the OSI model, enabling web browsers and servers to exchange hypertext documents. It defines how requests and responses are formatted and transmitted, relying on lower-layer protocols like TCP for reliable delivery.

Answer

IP

Answer

TCP

Answer

ARP

Question 3

A DevOps engineer is using the Cisco Meraki API to retrieve a list of networks. Which HTTP method should be used?

Accepted Answer

GET. The GET method is the correct HTTP verb for retrieving a list of networks from the Cisco Meraki API because it is a read-only operation that fetches existing resources without modifying server state. The Meraki API follows RESTful conventions where GET requests are used to query collections or individual resources, and the endpoint for listing networks is typically a GET to /organizations/{organizationId}/networks.

Answer

PUT

Answer

POST

Answer

DELETE

Question 4

Which TWO statements about VLAN trunking are true?

Accepted Answer

Trunk links carry traffic for multiple VLANs.. Trunk links carry traffic for multiple VLANs simultaneously by tagging each frame with a VLAN identifier. This allows a single physical link to transport traffic from different VLANs between switches or between a switch and a router. Option C is correct because the primary purpose of a trunk is to multiplex VLAN traffic over one link.

Answer

Trunk links can only carry one VLAN at a time.

Answer

Trunk links use access ports.

Answer

Trunk links are used to connect a switch to a single host.

Question 5

Which two authentication methods are commonly used with Cisco APIs? (Choose two.)

Accepted Answer

Basic Authentication over HTTPS. Basic Authentication over HTTPS is commonly used with Cisco APIs because it sends a base64-encoded username:password pair in the Authorization header, which is a simple and widely supported method for authenticating REST API requests. Cisco's REST APIs, such as those on DNA Center and Meraki, often accept Basic Auth as a fallback or for legacy integration, though it is less secure than token-based methods.

Answer

SNMPv3

Answer

SSH Key

Answer

RADIUS

Question 6

An automation script needs to update the hostname of a Cisco IOS-XE device via RESTCONF. Which HTTP method is appropriate?

Accepted Answer

PUT. To update the hostname of a Cisco IOS-XE device via RESTCONF, the PUT HTTP method is appropriate because it performs a full replacement of the target resource. RESTCONF uses the YANG data model, and the hostname is a leaf node under the Cisco-IOS-XE-native YANG module. A PUT request with the complete updated hostname data replaces the existing configuration, aligning with RESTCONF's semantics for resource replacement.

Answer

PATCH

Answer

GET

Answer

POST

Question 7

A developer is using the Cisco Webex Teams API to create a room and add members. The API returns a 400 error. What is the most likely cause?

Accepted Answer

Missing required fields. A 400 Bad Request error from the Cisco Webex Teams API indicates that the server cannot process the request due to a client-side error, most commonly missing required fields in the request body. When creating a room, the API requires a 'title' field; omitting it or sending an empty value triggers a 400 response. This is distinct from authentication or network issues, which produce different HTTP status codes.

Answer

Invalid access token

Answer

Network connectivity issue

Answer

Room name already exists

Question 8

A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?

Accepted Answer

Implement retry logic with exponential backoff and respect Retry-After header. A 429 status code indicates rate limiting, meaning the client has exceeded the allowed number of requests per time window. The correct response is to implement retry logic with exponential backoff and respect the Retry-After header, which tells the client how long to wait before retrying. This is a standard best practice for REST APIs, including Cisco Meraki's API v1, to handle rate limits gracefully without overwhelming the server.

Answer

Change the API endpoint to a different region

Answer

Check the API token

Answer

Increase the rate limit on the dashboard

Question 9

A network engineer is writing a Python script to interact with Cisco DNA Center. After successfully authenticating and receiving a token, what header must be included in subsequent API requests?

Accepted Answer

In the Authorization header as Bearer. Option D is correct because Cisco DNA Center uses token-based authentication following the OAuth 2.0 framework. After obtaining a token via the /dna/system/api/v1/auth/token endpoint, the token must be included in the Authorization header using the Bearer scheme (e.g., 'Authorization: Bearer <token>') for all subsequent API requests to prove the client's identity and authorization.

Answer

In a custom header

Answer

In the URL query string

Answer

In the request body

Question 10

A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)

Accepted Answer

The resource's current state conflicts with the requested change (e.g., trying to delete a resource that is in use).. Option B is correct because a 409 Conflict error in RESTCONF indicates that the request cannot be completed due to a conflict with the current state of the resource. For example, attempting to delete a resource that is referenced by other resources (e.g., a VLAN interface that is still active) violates the resource's state constraints, triggering this HTTP status code.

Answer

Authentication token is missing.

Answer

The resource does not exist.

Answer

The request contains invalid data types.

Question 11

Refer to the exhibit. A Python script parses this JSON response to check if NetFlow is enabled on the network. Which code snippet correctly checks the NetFlow status?

Accepted Answer

if response['netflow'].get('enabled', False):. Option A is correct because it uses the `.get()` method with a default value of `False` to safely access the `enabled` key within the `netflow` dictionary. This handles cases where the key might be missing or the value is `False`, avoiding a `KeyError` and correctly evaluating the boolean condition. In JSON, the `enabled` field is typically a boolean, so checking truthiness directly is the proper approach.

Answer

if response['netflow']['enabled'] == 'true':

Answer

if response.netflow.enabled:

Answer

if response['netflow']['enabled']:

Question 12

A network engineer attempts to modify the IP address of GigabitEthernet1/0/1 using the Cisco IOS-XE RESTCONF API. They send a PUT request with a modified JSON body but receive a 400 Bad Request error. What is the most likely cause?

Accepted Answer

The request body does not include the full resource hierarchy.. D is correct because RESTCONF requires the request body to contain the full resource hierarchy (e.g., the entire YANG data tree for the interface) when using PUT, as PUT is a full replacement operation. A 400 Bad Request error typically indicates a malformed request, and omitting mandatory parent or sibling nodes in the JSON body violates the YANG schema, causing the server to reject the request.

Answer

The Accept header should be application/json.

Answer

The Content-Type header is missing or set incorrectly.

Answer

The API is not enabled on the device.

Question 13

A security team is developing an application that collects network alerts from Cisco Firepower Management Center (FMC) API. The API requires OAuth2 authorization code grant flow. After obtaining an authorization code, what must the application do to get an access token?

Accepted Answer

Exchange the authorization code for an access token by calling the token endpoint with the code and client credentials.. In the OAuth2 authorization code grant flow, the authorization code is an intermediate credential that must be exchanged for an access token. The application must call the token endpoint, presenting the authorization code along with its client credentials (client ID and client secret) to receive the access token. This exchange is required by RFC 6749 and is a fundamental security measure to ensure the client is authorized to obtain the token.

Answer

Resend the authorization request with the code included in the redirect URI.

Answer

Decode the authorization code using base64 to extract the access token.

Answer

Use the authorization code directly in subsequent API requests as a bearer token.

Question 14

A developer is using Cisco DNA Center API to add a new device to the inventory. Which HTTP method should be used for this operation?

Accepted Answer

POST. The POST HTTP method is used to create a new resource on the server. When adding a new device to the Cisco DNA Center inventory, you are creating a new device entry, which aligns with the POST method as defined by RESTful API conventions. Cisco DNA Center's device onboarding API endpoint (e.g., /dna/intent/api/v1/network-device) specifically requires a POST request to add a device.

Answer

PATCH

Answer

GET

Answer

DELETE

Question 15

A developer receives HTTP 409 Conflict when updating a network configuration via Cisco NX-OS API. Which two scenarios could cause this error?

Accepted Answer

The resource was recently modified by another client.. HTTP 409 Conflict indicates a request conflicts with the current state of the resource. In the context of Cisco NX-OS API, this error occurs when the resource was recently modified by another client (option A) or when the update conflicts with a lock held by another transaction (option B). Both scenarios involve a state mismatch that the server cannot resolve without client intervention, often requiring the client to re-fetch the resource and retry.

Answer

The request body contains malformed JSON.

Answer

The request includes unsupported parameters.

Answer

The API key used is invalid.

200-901 Practice Test 25 — 15 Questions

Exhibit

200-901 Practice Test 25 — 15 Questions

Exhibit