200-901 Practice Test 5 — 25 Questions

Question 1

Match each Git command to its function.

Question 2

Match each CI/CD concept to its definition.

Question 3

Match each JSON data type to its example.

Question 4

A network administrator is deploying a new application that requires high availability and load balancing across multiple servers. The servers are connected to a pair of switches that use StackWise virtual technology. The application team requests that the servers be configured with NIC teaming in active-active mode. Which two requirements must be met for this configuration to work correctly? (Choose two.)

Accepted Answer

The two switches must be part of a single stack or virtual switch fabric.. Option A is correct because StackWise virtual technology logically combines two physical switches into a single control plane, allowing NIC teaming in active-active mode to treat the pair as one logical switch. This ensures that both NIC team members can forward traffic simultaneously without loops, as the stack provides a unified Layer 2 topology and prevents MAC flapping between the two switches.

Answer

Spanning-tree PortFast must be enabled on the switch ports connected to the servers.

Answer

The NIC team must use LACP for load balancing.

Answer

Both NIC team members should connect to the same switch module for consistency.

Question 5

A network engineer is troubleshooting an issue where hosts in VLAN 100 cannot reach a server at 10.1.1.100. The switch interfaces are configured as access ports in VLAN 100, and the default gateway is 10.1.1.1. The engineer checks the switch and finds that the ARP table does not contain the server's MAC address. Which two actions should the engineer take to resolve the issue? (Choose two.)

Accepted Answer

Check the ARP table on the default gateway router.. Option E is correct because if the switch port connected to the server is not in VLAN 100, the server will be in a different broadcast domain and will not receive ARP requests from hosts in VLAN 100. This would cause the ARP table on the switch to lack the server's MAC address, as the switch cannot learn it through normal Layer 2 flooding within the VLAN.

Answer

Ping the server's IP address from the switch management interface.

Answer

Ping the default gateway from a host in VLAN 100.

Answer

Check the MAC address table on the switch for the server's MAC.

Question 6

Which HTTP method is considered both safe and idempotent?

Accepted Answer

GET. GET is both safe and idempotent according to HTTP semantics (RFC 7231). Safe means it must not cause side effects on the server, and idempotent means multiple identical requests produce the same result as a single request. GET is designed solely for retrieval of a resource, so it satisfies both properties.

Answer

POST

Answer

PUT

Answer

PATCH

Answer

DELETE

Question 7

A developer is building an integration with Cisco Meraki and needs to handle rate limiting. Which two responses indicate rate limiting and how should they be handled? (Choose two.)

Accepted Answer

Retry-After header with wait time in seconds. Option B is correct because the Retry-After header explicitly tells the client how long to wait before retrying a request, which is the standard way to handle rate limiting. Option C is correct because HTTP status code 429 (Too Many Requests) is the definitive signal from the server that the client has exceeded the allowed rate limit. Together, these two responses allow a developer to identify and respond to rate limiting by pausing requests for the specified duration.

Answer

X-RateLimit-Remaining header

Answer

Link header with rel="next"

Answer

HTTP status code 503

Question 8

A network administrator is configuring DNS for a corporate domain. An MX record is required to specify the mail server responsible for handling email. Which of the following is a correct example of an MX record?

Accepted Answer

example.com.  MX  10 mail.example.com.. Option B is correct because an MX record specifies the mail server responsible for handling email for a domain, using the format: domain. MX priority mailserver. The priority value (10) indicates preference, with lower values being higher priority. This record directs email delivery to mail.example.com for the example.com domain.

Answer

mail.example.com.  A  192.0.2.1

Answer

example.com.  CNAME  mail.example.com.

Answer

example.com.  TXT  "v=spf1 include:_spf.google.com ~all"

Question 9

A network administrator is troubleshooting BGP path selection for a route received from two different ISPs. The routes have the same local preference and AS-path length, but one route has a shorter MED value. Which route will be preferred?

Accepted Answer

The route with the lower MED. In BGP path selection, when routes have the same local preference and AS-path length, the next tiebreaker is the Multi-Exit Discriminator (MED) value. A lower MED value is preferred because it indicates a more desirable entry point into the neighboring AS. Therefore, the route with the shorter MED will be selected.

Answer

The route with the most specific prefix length

Answer

The route from the ISP with the higher bandwidth

Answer

The route with the higher local preference

Question 10

Which TCP flag is set in the second step of the three-way handshake?

Accepted Answer

SYN and ACK. The TCP three-way handshake begins with the client sending a SYN segment to initiate a connection. In the second step, the server responds with a SYN-ACK segment, which both acknowledges the client's SYN (using the ACK flag) and synchronizes its own sequence number (using the SYN flag). This combined flag is essential for establishing a reliable, bidirectional connection.

Answer

ACK

Answer

SYN

Answer

FIN

Question 11

Refer to the exhibit. A Meraki network has a group policy 'Block Social Media' that references a content filtering rule. The policy is applied to VLAN 1. Users in that VLAN cannot access instagram.com but can access facebook.com. What is the most likely reason?

Accepted Answer

The blocked URL patterns list does not include all social media sites.. Option C is correct because the group policy 'Block Social Media' references a content filtering rule that likely uses a predefined or custom URL category list. If the rule blocks only specific URL patterns (e.g., 'instagram.com') but does not include all social media sites (e.g., 'facebook.com'), then users can still access unblocked sites. Meraki content filtering operates on URL category matching or explicit URL pattern lists; if the list is incomplete, the policy will not block all intended sites.

Answer

The content filtering rule blocks only a specific set of URLs, but not all social media sites.

Answer

The group policy is not applied to the VLAN.

Answer

The content filtering is not enabled on the MX appliance.

Question 12

Which TWO of the following are commonly used protocols for network automation?

Accepted Answer

RESTCONF. NETCONF and RESTCONF are standardized protocols used for network automation based on YANG models. SNMP is primarily for monitoring, HTTP is a transport protocol, and SSH is used for CLI access but not as an automation protocol.

Answer

HTTP

Answer

SNMP

Answer

SSH

Question 13

A network engineer configures an HTTP/2 server. Which feature of HTTP/2 reduces overhead by compressing headers using HPACK?

Accepted Answer

HPACK. HPACK is the header compression mechanism specified for HTTP/2 (RFC 7541). It reduces overhead by encoding HTTP headers into a compact binary format using static and dynamic tables, eliminating redundant header data across requests. This directly addresses the question's focus on reducing overhead through header compression.

Answer

Server push

Answer

Binary framing layer

Answer

Multiplexed streams

Question 14

Which of the following is a private IPv4 address range as defined by RFC 1918?

Accepted Answer

10.0.0.0/8. Option C (10.0.0.0/8) is correct because RFC 1918 reserves this range, along with 172.16.0.0/12 and 192.168.0.0/16, for private IPv4 addressing. These addresses are not routable on the public internet and are intended for use within private networks, such as corporate LANs or home networks.

Answer

169.254.0.0/16

Answer

192.167.0.0/16

Answer

172.32.0.0/16

Question 15

A network engineer needs to automate the deployment of QoS policies across multiple campus switches using Cisco DNA Center. The engineer decides to use the Cisco DNA Center Intent API to create a policy tag and bind it to a group of devices. After sending the PUT request to /dna/intent/api/v1/policy-tag, the API returns a 202 Accepted status. However, the engineer notices that the policy is not being applied consistently across all devices. What is the most likely reason?

Accepted Answer

The request was asynchronous, and the engineer did not check the task status for completion.. The 202 Accepted status indicates that the request was accepted for asynchronous processing, not that it has completed. Cisco DNA Center Intent API uses asynchronous tasks for operations like policy tag binding, and the engineer must poll the task status endpoint to verify completion and success. Without checking the task status, the engineer cannot know if the policy was applied consistently across all devices, as some tasks may have failed or are still in progress.

Answer

The payload was not in JSON format, causing a silent failure.

Answer

The API token expired before the request was processed.

Answer

The engineer used an incorrect API endpoint for policy tags.

Question 16

An automation tool uses RESTCONF to configure a Cisco device. The device returns a 404 error for a PUT request. What does this indicate?

Accepted Answer

The resource does not exist. A 404 (Not Found) response to a RESTCONF PUT request indicates that the target resource (e.g., a specific YANG data node or URI) does not exist on the device. RESTCONF uses HTTP methods to manipulate resources identified by URIs; a PUT request is intended to create or replace a resource at that URI, but if the resource path is invalid or the data model node is not present, the server returns 404. This is consistent with RFC 8040, which defines the RESTCONF protocol.

Answer

The server is overloaded

Answer

The request body is malformed

Answer

Authentication failed

Question 17

A team is designing a CI/CD pipeline that uses the Cisco ACI REST API to deploy tenant policies. Which best practice should be followed for secure credential management?

Accepted Answer

Use a secrets management service and reference it in the pipeline. Storing credentials in a secrets management service and referencing them in the pipeline is a security best practice. Hardcoding or storing in plain text is insecure.

Answer

Store credentials in plain text in the pipeline configuration

Answer

Hardcode credentials in the source code

Answer

Use a shared user account with no MFA

Question 18

An engineer is using the Cisco Intersight API to manage UCS servers. The API response returns a paginated list. What is the proper way to retrieve all items?

Accepted Answer

Loop through pages using the 'next' link in the response. The Cisco Intersight API uses cursor-based pagination, where each page response includes a 'next' link pointing to the next page of results. To retrieve all items, you must follow that link in a loop until the 'next' field is null or absent, ensuring you get every page without assuming a fixed offset or page size.

Answer

Increase the page size limit to maximum

Answer

Send multiple requests with different offsets manually

Answer

Use a single request with a filter to get all

Question 19

Refer to the exhibit. A DevOps engineer is using NETCONF to retrieve the OSPF configuration. The <get> response is missing the network statements. What is the most likely cause?

Accepted Answer

The filter used in the NETCONF request did not include the correct path for network commands.. The most likely cause is that the NETCONF <get> request used an incorrect or incomplete XML filter that did not specify the correct XPath for the OSPF network statements. NETCONF relies on YANG-defined data paths; if the filter omits the subtree for network commands, the device will not return those configuration elements, even though they exist in the running configuration.

Answer

The YANG model for OSPF does not include the network statement.

Answer

The device does not support NETCONF for OSPF.

Answer

The NETCONF username does not have sufficient privileges.

Question 20

When designing a REST API for managing network devices, which two principles should be followed to ensure statelessness?

Accepted Answer

All state information is stored on the client.. Option A is correct because statelessness in REST requires that all session state be stored on the client, not the server. Each request must be self-contained, meaning the server does not retain any client context between requests. This aligns with the REST architectural constraint defined by Roy Fielding, where the server treats each request independently.

Answer

The server maintains session data and identifies clients via cookies.

Answer

API endpoints include version numbers to support backward compatibility.

Answer

Responses are idempotent for all POST requests.