200-901 Practice Test 2 — 25 Questions

Question 1

A company uses a /24 subnet for its office LAN. The network must accommodate 30 hosts per VLAN. Which subnet mask would be most efficient for each VLAN while minimizing wasted IP addresses?

Accepted Answer

255.255.255.224. A /27 subnet mask (255.255.255.224) provides 32 total addresses per subnet, with 30 usable host addresses (2^5 - 2 = 30). This exactly meets the requirement of 30 hosts per VLAN without wasting IP addresses, as any larger subnet would leave unused addresses.

Answer

255.255.255.240

Answer

255.255.255.0

Answer

255.255.255.128

Answer

255.255.255.192

Question 2

Which two Meraki Dashboard API features are used to paginate through large result sets? (Choose two.)

Accepted Answer

startingAfter and endingBefore parameters. Meraki supports Link header for standard pagination and startingAfter/endingBefore parameters for cursor-based pagination.

Answer

offset and limit parameters

Answer

page and perPage query parameters

Answer

Retry-After header

Question 3

A network engineer is configuring a new switch and needs to ensure that frames from VLAN 10 and VLAN 20 are isolated on the same trunk link to another switch. Which IEEE standard should be configured on the trunk interfaces?

Accepted Answer

802.1Q. C is correct because 802.1Q is the IEEE standard that defines VLAN tagging, allowing multiple VLANs (such as VLAN 10 and VLAN 20) to be carried over a single trunk link while maintaining isolation between them. By inserting a 4-byte VLAN tag into the Ethernet frame, 802.1Q enables the receiving switch to identify which VLAN a frame belongs to, ensuring traffic from different VLANs remains separate.

Answer

802.3

Answer

802.11

Answer

802.1X

Question 4

A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?

Accepted Answer

pyATS allows writing reusable test scripts with built-in test libraries. PyATS is a test automation framework designed for network engineers, providing built-in test libraries (e.g., `pyats.aetest`) that enable writing reusable, modular test scripts. Unlike a simple ping script, pyATS supports structured test cases, data-driven testing, and integration with Cisco devices via libraries like `Genie`, allowing for comprehensive validation beyond basic reachability.

Answer

pyATS requires less code than a ping script

Answer

pyATS can test multiple devices in parallel

Answer

pyATS automatically generates test reports

Question 5

A network automation script uses the Python ncclient library to modify a device configuration. Which NETCONF operation should be used to apply configuration changes?

Accepted Answer

. The operation is used to modify configuration in NETCONF.

Answer

<close-session>

Answer

<get-config>

Answer

<get>

Question 6

Drag and drop the steps to set up a basic DHCP server on a Cisco router into the correct order.

Accepted Answer

First, configure the excluded address range using 'ip dhcp excluded-address'. Then, create the DHCP pool with 'ip dhcp pool'. Next, define the network subnet with 'network'. Finally, set the default gateway with 'default-router'.. DHCP configuration on Cisco routers involves creating a pool, defining the network, and setting options like default gateway.

Answer

First, create the DHCP pool with 'ip dhcp pool'. Then, define the network subnet with 'network'. Next, set the default gateway with 'default-router'. Finally, configure the excluded address range using 'ip dhcp excluded-address'.

Answer

First, define the network subnet with 'network'. Then, create the DHCP pool with 'ip dhcp pool'. Next, set the default gateway with 'default-router'. Finally, configure the excluded address range using 'ip dhcp excluded-address'.

Answer

First, set the default gateway with 'default-router'. Then, create the DHCP pool with 'ip dhcp pool'. Next, define the network subnet with 'network'. Finally, configure the excluded address range using 'ip dhcp excluded-address'.

Question 7

An automation engineer wants to programmatically retrieve the interface configuration of a Cisco Nexus switch using NX-API. Which API call method is most appropriate?

Accepted Answer

GET. The NX-API on Cisco Nexus switches uses HTTP methods that map to CRUD operations. To retrieve (read) interface configuration without modifying any state, the GET method is the correct and most appropriate choice, as it corresponds to the 'show' commands in the CLI. POST, PUT, and DELETE are intended for creating, updating, or deleting resources, not for read-only queries.

Answer

POST

Answer

DELETE

Answer

PUT

Question 8

A REST API returns a 500 Internal Server Error when a client sends a malformed JSON payload. What is the most appropriate HTTP response code to indicate a client-side error?

Accepted Answer

400 Bad Request. A 400 Bad Request is the correct response because the client sent a malformed JSON payload, which is a client-side error. HTTP 400 indicates that the server cannot process the request due to something perceived as a client error (e.g., malformed syntax). This aligns with RFC 7231, which defines 400 as appropriate for requests with invalid syntax or structure.

Answer

401 Unauthorized

Answer

403 Forbidden

Answer

422 Unprocessable Entity

Question 9

A team is using Python scripts with netmiko to back up configurations from a large number of network devices. What is the primary advantage of using netmiko over direct paramiko for this task?

Accepted Answer

Netmiko simplifies the handling of device-specific prompts and command output. Netmiko is built on top of Paramiko but adds a higher-level abstraction layer that automatically handles device-specific prompt detection, command output parsing, and SSH session management. This simplifies the backup process across heterogeneous devices by eliminating the need to manually write code for each device's unique prompt patterns and command responses.

Answer

Netmiko supports only Cisco devices

Answer

Netmiko uses REST API instead of SSH

Answer

Netmiko is faster than paramiko

Question 10

A security team is developing an application that collects network alerts from Cisco Firepower Management Center (FMC) API. The API requires OAuth2 authorization code grant flow. After obtaining an authorization code, what must the application do to get an access token?

Accepted Answer

Exchange the authorization code for an access token by calling the token endpoint with the code and client credentials.. In the OAuth2 authorization code grant flow, the authorization code is an intermediate credential that must be exchanged for an access token. The application must call the token endpoint, presenting the authorization code along with its client credentials (client ID and client secret) to receive the access token. This exchange is required by RFC 6749 and is a fundamental security measure to ensure the client is authorized to obtain the token.

Answer

Resend the authorization request with the code included in the redirect URI.

Answer

Decode the authorization code using base64 to extract the access token.

Answer

Use the authorization code directly in subsequent API requests as a bearer token.

Question 11

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

Accepted Answer

To define and manage network infrastructure resources in a declarative state file. The Cisco Catalyst Center Terraform provider allows network automation engineers to define and manage network infrastructure resources in a declarative state file. Terraform uses a desired-state approach where the configuration file describes the intended end state of resources, and the provider communicates with Catalyst Center's REST API to enforce that state, enabling idempotent and version-controlled infrastructure management.

Answer

To execute a series of CLI commands on network devices in sequence

Answer

To write imperative scripts that configure network devices via SSH

Answer

To directly manage routers and switches without using Catalyst Center

Question 12

A large enterprise uses Cisco SD-Access with fabric automation. The network administrator wants to automate the process of adding a new user device to a specific virtual network (VN) based on its MAC address. Which API or tool should they use?

Accepted Answer

Cisco ISE REST API. Cisco ISE REST API is the correct choice because ISE is the policy and authentication engine in SD-Access that manages endpoint identity and virtual network (VN) assignments. When a new user device is added, the administrator can use the ISE REST API to programmatically create an endpoint entry with its MAC address and map it to a specific VN, leveraging ISE's policy sets and authorization profiles. This directly automates the VN assignment without requiring changes to fabric underlay or overlay configurations.

Answer

Ansible playbook with ios_config

Answer

Cisco DNA Center REST API

Answer

Cisco APIC-EM REST API

Question 13

Which TWO Ansible modules are commonly used for automating Cisco IOS devices?

Accepted Answer

ios_config. The `ios_config` module is correct because it is specifically designed to manage Cisco IOS device configurations by sending configuration commands via SSH or Telnet, using the CLI to apply changes to the running or startup configuration. This module is part of Ansible's `cisco.ios` collection and directly supports the IOS operating system, making it the standard choice for automating configuration tasks on Cisco IOS devices.

Answer

junos_config

Answer

nxos_command

Answer

eos_config

Question 14

When implementing network automation with Cisco devices, which THREE practices help ensure idempotency? (Select THREE)

Accepted Answer

Performing a full configuration replace using RESTCONF PUT instead of PATCH.. A full configuration replace using RESTCONF PUT ensures idempotency by setting the entire configuration to a known state, regardless of the current state. Unlike PATCH, which applies incremental changes that may behave differently depending on the existing configuration, PUT overwrites the entire resource, guaranteeing the same result every time it is executed.

Answer

Writing scripts that only push incremental configurations.

Answer

Relying on manual rollback procedures after automation failures.

Question 15

A YANG module defines a leaf named 'bandwidth' of type 'uint32'. What does this represent in the context of a network device?

Accepted Answer

A single integer value representing bandwidth in kilobits per second. In YANG, a 'leaf' node defines a single, scalar value of a specific data type. When the leaf is named 'bandwidth' with type 'uint32', it represents a single integer value, typically interpreted as kilobits per second (kbps) in the context of network device configuration (e.g., interface bandwidth). This aligns with the standard YANG data modeling approach where a leaf cannot hold multiple values or complex structures.

Answer

A set of unique bandwidth values

Answer

A grouping of related bandwidth parameters

Answer

An ordered list of bandwidth values

Question 16

Which three of the following are common data formats used with REST APIs on Cisco platforms?

Accepted Answer

JSON. JSON (JavaScript Object Notation) is a lightweight, text-based data interchange format that is natively supported by most programming languages and REST APIs. Cisco platforms, such as Cisco DNA Center and Cisco Meraki, use JSON as the primary data format for API requests and responses because it is easy to parse and has a compact structure. JSON's key-value pair syntax aligns well with RESTful principles, making it the most common choice for modern Cisco REST APIs.

Answer

CSV

Answer

HTML

Question 17

What is the default transport protocol for NETCONF sessions?

Accepted Answer

SSH. NETCONF (Network Configuration Protocol) uses SSH as its default transport protocol, as specified in RFC 6242. SSH provides the required secure, authenticated, and encrypted channel for NETCONF sessions, ensuring confidentiality and integrity of configuration data exchanged between the client and server.

Answer

HTTP

Answer

TLS

Answer

SNMP

Question 18

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

Accepted Answer

network_cli. The ios_config module is designed for Cisco IOS devices and requires a persistent network connection to send configuration commands. The network_cli connection method establishes an SSH session that remains open for the duration of the playbook task, allowing the module to send multiple CLI commands and handle prompts. This is the recommended connection method for ios_config because it supports privilege escalation and command responses needed for configuration changes.

Answer

local

Answer

netconf

Answer

httpapi

Question 19

A developer is using Python requests library to interact with a Cisco IOS XE device's REST API. The call returns a 400 Bad Request status. The payload is correctly formatted JSON. What is the most likely cause?

Accepted Answer

The authentication credentials are missing or incorrect in the request header. A 400 Bad Request status from a Cisco IOS XE REST API indicates a client-side error, typically related to malformed syntax or missing required elements. Since the JSON payload is confirmed as correctly formatted, the most likely cause is missing or incorrect authentication credentials in the request header, as the API requires valid credentials (e.g., Basic Auth with username:password encoded in Base64) to process the request. Without proper authentication, the server rejects the request with a 400 status before even evaluating the payload.

Answer

The device's API service is not enabled

Answer

The requested URL path is incorrect

Answer

The JSON payload contains a syntax error

Question 20

A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?

Accepted Answer

XML or JSON. RESTCONF (RFC 8040) is a REST-like protocol that uses HTTP methods to access structured data defined by YANG models. It natively supports both XML and JSON as data serialization formats, allowing clients to choose the format via the Accept header or URL suffix (e.g., .xml or .json). This makes XML and JSON the correct answer because they are the only formats explicitly defined in the RESTCONF specification for encoding configuration and operational data.

Answer

YAML

Answer

Plain text

Answer

CSV