200-901 Practice Test 2 — 25 Questions

Question 1

A network administrator wants to use Ansible to automate the configuration of a Cisco IOS-XE device. Which module is designed for this purpose?

Accepted Answer

cisco.ios.ios_config. The cisco.ios.ios_config module is specifically designed for managing Cisco IOS and IOS-XE device configurations via Ansible. It supports idempotent configuration updates using CLI commands, allowing the administrator to push, merge, or replace configuration snippets on the target device. This module is part of the Cisco IOS collection and directly interacts with the device's CLI to apply configuration changes.

Answer

cisco.nxos.nxos_config

Answer

ansible.netcommon.network_config

Answer

cisco.asa.asa_config

Question 2

Drag and drop the steps to configure OSPF on a Cisco router into the correct order.

Accepted Answer

1. Enable OSPF routing process (router ospf [process-id]). 2. Configure Router ID (router-id [id]). 3. Advertise networks (network [network] [wildcard] area [area]).. OSPF configuration requires enabling the OSPF process, setting a router ID, and advertising networks in specific areas.

Answer

1. Configure Router ID (router-id [id]). 2. Enable OSPF routing process (router ospf [process-id]). 3. Advertise networks (network [network] [wildcard] area [area]).

Answer

1. Enable OSPF routing process (router ospf [process-id]). 2. Advertise networks (network [network] [wildcard] area [area]). 3. Configure Router ID (router-id [id]).

Answer

1. Advertise networks (network [network] [wildcard] area [area]). 2. Enable OSPF routing process (router ospf [process-id]). 3. Configure Router ID (router-id [id]).

Question 3

A network engineer needs to automate the configuration of VLANs on a set of Cisco switches using Ansible. Which API should be targeted to ensure idempotent configuration updates?

Accepted Answer

NETCONF/YANG. NETCONF/YANG is the correct choice because NETCONF provides a transactional, lock-based mechanism that ensures idempotent configuration updates—applying the desired state exactly once without side effects from repeated runs. YANG models define the VLAN configuration structure, allowing Ansible to compare the current device state against the desired state and only push changes when necessary, which is the essence of idempotency.

Answer

REST API of Cisco DNA Center

Answer

SNMP

Answer

CLI with SSH

Question 4

A CI/CD pipeline for network automation includes a stage that runs Ansible playbooks against a staging environment. The pipeline is triggered by Git commits. After a commit, the pipeline fails because the Ansible inventory file is missing. What is the most likely reason?

Accepted Answer

The inventory file is listed in .gitignore. The most likely reason the Ansible inventory file is missing is that it is listed in .gitignore, which prevents it from being tracked by Git and thus not present in the repository when the pipeline clones it. Since the pipeline is triggered by Git commits, it only has access to files that are committed and pushed. If the inventory file is ignored, it will not be available for the Ansible playbook execution, causing the pipeline to fail.

Answer

The pipeline script has a typo in the inventory path

Answer

The Ansible version in the pipeline is incompatible

Answer

The staging environment is not reachable

Question 5

A Webex bot needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should the bot implement?

Accepted Answer

Webhooks. Webhooks allow the bot to receive HTTP callbacks for events like message creation.

Answer

Long polling

Answer

Polling the messages API every second

Answer

Server-Sent Events

Question 6

Refer to the exhibit. A developer is writing an Ansible playbook to configure this interface on a Cisco IOS XE device. Which Ansible module should be used to set the IP address?

Accepted Answer

ios_config. The `ios_config` module is the correct choice because it allows you to push raw configuration lines to Cisco IOS XE devices, including interface IP address configuration. It directly sends the `ip address` command under the interface context, which is the standard method for setting an IP address on an IOS XE interface. Other modules either lack the ability to set IP addresses or are designed for different purposes.

Answer

ios_ip_interface

Answer

ios_command

Answer

ios_facts

Question 7

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

Accepted Answer

RESTCONF. RESTCONF is the correct choice because it is a stateless protocol that uses standard HTTP methods (GET, POST, PUT, PATCH, DELETE) to manipulate YANG-defined data stores on a Cisco IOS-XE device. Unlike NETCONF, which is stateful and session-oriented, RESTCONF operates over HTTP without maintaining session state, making it ideal for lightweight, RESTful automation.

Answer

NETCONF

Answer

SNMP

Answer

CLI

Question 8

In the context of REST API design, which HTTP status code should be returned when a client sends a request that exceeds the API rate limit?

Accepted Answer

429 Too Many Requests. (429 Too Many Requests) is correct because RFC 6585 defines this status code specifically for cases where a client has sent too many requests in a given time frame, exceeding the API's rate limit. REST APIs use this response to enforce throttling and inform the client to back off, often including a Retry-After header to indicate when to retry.

Answer

503 Service Unavailable

Answer

400 Bad Request

Answer

401 Unauthorized

Question 9

Which THREE of the following are features of HTTP/2?

Accepted Answer

Header compression (HPACK). HTTP/2 introduces HPACK header compression (option A), which reduces overhead by compressing header fields using a static table, a dynamic table, and Huffman encoding, making it a defining feature of the protocol. It also uses binary framing (option D), splitting communication into binary-encoded frames (HEADERS, DATA, SETTINGS, etc.) instead of HTTP/1.1's textual format, which enables more efficient parsing and processing. Multiplexed streams (option E) allow many concurrent request/response exchanges over a single TCP connection, eliminating HTTP/1.1's head-of-line blocking at the application layer. Option B is incorrect because HTTP/2 headers are binary-encoded, not plain text, and option C is incorrect because persistent connections already existed in HTTP/1.1 and are not a new or distinguishing feature of HTTP/2.

Answer

Plain text headers

Answer

Persistent connections

Question 10

Which three statements about Webex API webhooks are true? (Choose three.)

Accepted Answer

Webhooks deliver event data via HTTP POST to a specified URL.. Option A is correct because Webex webhooks push event notifications as an HTTP POST request containing a JSON payload to the target URL you register. Option C is correct because when creating a webhook you specify the resource (e.g., messages, meetings, memberships) and the event (e.g., created, updated, deleted), so it only fires for those matching events. Option D is correct because webhooks are registered programmatically by sending an authenticated POST request to the Webex REST endpoint https://webexapis.com/v1/webhooks with fields such as name, targetUrl, resource, and event. Option B is not required: webhook creation uses an OAuth 2.0 access token (often from an integration or bot), not specifically the client credentials grant, and webhook delivery itself is secured via a secret/signature rather than that grant. Option E is incorrect because Webex webhooks are push-based HTTP callbacks, not long polling.

Answer

Webhooks require OAuth 2.0 client credentials grant for security.

Answer

Webhooks use long polling to receive events.

Question 11

A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?

Accepted Answer

Southbound interface. NETCONF is a network management protocol used to install, manipulate, and delete the configuration of network devices. In the SDN architecture, the southbound interface is the layer that connects the control plane to the data plane, and NETCONF operates as a southbound protocol by carrying configuration data from a controller or management system down to network devices.

Answer

Northbound interface

Answer

Application layer

Answer

Control layer

Question 12

When making API calls to Cisco DNA Center, a developer receives a 401 Unauthorized error. The token was obtained using the token API endpoint. What is the most likely reason?

Accepted Answer

The token has expired. A 401 Unauthorized error when using a token obtained from the token API endpoint most commonly indicates that the token has expired. Cisco DNA Center tokens have a configurable Time-To-Live (TTL), typically defaulting to 1 hour, after which the token becomes invalid and must be refreshed via the /dna/system/api/v1/auth/token endpoint.

Answer

The request body contains invalid JSON

Answer

The API base URL is incorrect

Answer

The HTTP header for Accept is missing

Question 13

Which NETCONF operation is used to retrieve the entire configuration datastore from a network device?

Accepted Answer

. retrieves configuration datastore. retrieves state and config data. modifies configuration. confirms a candidate configuration.

Answer

<edit-config>

Answer

<get>

Answer

Question 14

A large enterprise uses Cisco DNA Center to manage their campus network. They have deployed fabric technology for SD-Access. The network team wants to use the DNA Center REST API to automate the addition of new wireless users to a specific virtual network (VN) based on their location (building). They have identified the API endpoint for creating a user device in the fabric. However, when they send a POST request with the appropriate JSON body, they receive a 400 Bad Request error. The JSON payload includes the mandatory fields for hostname, MAC address, and VN name. What is the most likely cause of the error?

Accepted Answer

The virtual network name provided does not exist in the fabric.. The 400 Bad Request error indicates that the server cannot process the request due to a client-side issue, such as invalid data in the payload. Since the mandatory fields (hostname, MAC address, VN name) are provided, the most likely cause is that the virtual network (VN) name does not match any existing VN in the fabric. DNA Center validates the VN name against its fabric configuration; if the VN is not defined, the API rejects the request with a 400 error.

Answer

The API call requires an authentication token that is missing or expired.

Answer

The MAC address format is incorrect (e.g., lowercase vs uppercase).

Answer

The user making the API call does not have sufficient privileges.

Question 15

Which THREE of the following are characteristics of IPv6? (Select exactly three.)

Accepted Answer

IPv6 does not have a built-in NAT requirement.. IPv6 was designed without a built-in requirement for Network Address Translation (NAT) because its vast 128-bit address space allows every device to have a globally unique public IP address. Unlike IPv4, which relies on NAT to conserve limited address space, IPv6 restores end-to-end connectivity by default, eliminating the need for address translation at the network edge.

Answer

IPv6 addresses are 32 bits in length.

Answer

IPv6 uses ARP to resolve MAC addresses.

Question 16

A large enterprise uses Cisco DNA Center to manage over 500 network devices across multiple sites. The network operations team wants to automate the validation of device compliance with a baseline configuration. They have a Python script that uses the Cisco DNA Center REST API to retrieve the device configuration and compare it against a golden configuration stored in a local file. Recently, the script started failing with a 401 HTTP response code when trying to authenticate. The team confirmed the username and password are correct and that the DNA Center server is reachable. The script uses the /api/system/v1/auth/token endpoint to obtain a token. Which of the following is the most likely cause of the 401 error?

Accepted Answer

The authentication token has expired and the script is not refreshing it.. The 401 HTTP response code indicates an authentication failure. Since the username and password are confirmed correct and the server is reachable, the most likely cause is that the script obtained a token earlier but is now using an expired token without refreshing it. Cisco DNA Center tokens have a configurable timeout (default 1 hour), and the script must re-authenticate or refresh the token before it expires.

Answer

The API endpoint requires a different HTTP method (e.g., POST vs GET).

Answer

The script is using an incorrect API version path (e.g., /v2 instead of /v1).

Answer

CORS (Cross-Origin Resource Sharing) is blocking the request.

Question 17

A network administrator needs to assign IP addresses to 50 hosts in a subnet. Which subnet mask provides the minimum required number of usable addresses while minimizing waste?

Accepted Answer

255.255.255.192 (/26). A /26 subnet mask (255.255.255.192) provides 64 total addresses per subnet, of which 62 are usable (2^6 - 2 = 62). This is the smallest power-of-two block that can accommodate 50 hosts, minimizing waste while meeting the requirement.

Answer

255.255.255.224 (/27)

Answer

255.255.255.240 (/28)

Answer

255.255.255.128 (/25)

Question 18

A developer needs to create a Python function that accepts any number of keyword arguments and prints them. Which function definition correctly uses **kwargs?

Accepted Answer

def print_args(**kwargs): print(kwargs). The **kwargs syntax in a Python function definition collects any number of keyword arguments into a dictionary. The function then prints that dictionary, which matches the requirement to accept and print any number of keyword arguments.

Answer

def print_args(*args): print(args)

Answer

def print_args(kwargs): print(kwargs)

Answer

def print_args(*kwargs): print(kwargs)

Question 19

A Python script is interacting with a REST API that returns JSON. The script needs to handle potential errors gracefully. Which TWO practices should be implemented? (Choose two.)

Accepted Answer

Use response.raise_for_status() to raise exceptions for HTTP errors.. Option A is correct because response.raise_for_status() from the requests library inspects the HTTP status code and raises an HTTPError for 4xx and 5xx responses, letting the script handle failures via try/except instead of silently processing bad data. Option C is correct because explicitly checking response.status_code (e.g., comparing against 200 or using 200 <= status_code < 300) lets the script branch on success or failure and decide whether to parse JSON or handle the error, which is essential for graceful error handling. Option B is not appropriate because a single undifferentiated try/except hides the specific cause of failures and prevents tailored handling of HTTP errors, JSON decode errors, or connection issues. Option D is wrong because assuming requests always succeed ignores network failures, timeouts, and 4xx/5xx responses, which defeats graceful error handling. Option E is wrong because calling json.loads() unconditionally can raise JSONDecodeError on non-JSON bodies (e.g., HTML error pages), so parsing should occur only after confirming a successful, JSON content-type response.

Answer

Use a single try/except block to catch all exceptions without differentiation.

Answer

Assume the request always succeeds; errors are rare.

Answer

Always parse the response body with json.loads() regardless of content type.

Question 20

Which of the following best describes the purpose of a unit test in software development?

Accepted Answer

To test individual functions or methods in isolation. Unit tests focus on verifying the correctness of the smallest testable parts of an application, such as individual functions or methods, in complete isolation from dependencies (e.g., using mocks or stubs). This ensures that each unit of code behaves as expected under controlled conditions, which is a foundational practice in test-driven development (TDD) and continuous integration pipelines. In the context of the 200-901 exam, understanding unit testing is critical for validating code quality in Cisco platforms like Cisco DNA Center or Meraki API integrations.

Answer

To check the performance of the application under load

Answer

To verify that different modules work together correctly

Answer

To test the entire system from end to end