200-901 Practice Test 26 — 15 Questions

Question 1

A network engineer is using the Cisco DNA Center API to get site health. The API endpoint returns a large dataset with pagination. The response includes the header 'X-Page-Total-Count'. To retrieve all pages efficiently, what should the engineer implement?

Accepted Answer

A loop that increments the page parameter until the response is empty, using the total count header.. Option B is correct because the Cisco DNA Center API uses pagination with a page parameter and returns a 'X-Page-Total-Count' header indicating the total number of pages. By implementing a loop that increments the page parameter until all pages are retrieved, the engineer can efficiently fetch all data without overwhelming the API or missing records, using the total count to know when to stop.

Answer

A single request with a high limit parameter to fetch all data at once.

Answer

A recursive function that follows 'next' links in the response body.

Answer

Polling the endpoint at regular intervals to gather data over time.

Question 2

A Python script uses the Cisco Webex API to list all rooms. The response includes pagination via the 'Link' header with 'rel="next"'. What is the correct way to retrieve the next page of rooms?

Accepted Answer

Parse the 'Link' header for the URL with 'rel="next"' and send a GET request to that URL.. Option A is correct because the Webex API uses HTTP Link headers for pagination, as specified in RFC 5988. The 'Link' header contains a URL with 'rel="next"' that points directly to the next page of results. To retrieve the next page, you must parse this header, extract the URL, and send a GET request to that URL. This is the standard approach for cursor-based or token-based pagination, which is common in RESTful APIs that avoid offset-based pagination for consistency.

Answer

Increment a page counter and append '?page=2' to the original URL.

Answer

Use the total count returned in the response to calculate the offset.

Answer

Send a POST request to the same endpoint with the 'cursor' parameter.

Question 3

Refer to the exhibit. A developer sent a POST request to https://apic-ip/api/mo/uni/tn-testtenant.json with a JSON body missing the name attribute. What should the correct JSON body include?

Accepted Answer

{"fvTenant": {"attributes": {"name": "testtenant"}}}. Option D is correct because the Cisco APIC REST API requires the JSON body for creating a tenant to follow the object model structure: the top-level key is the managed object class (fvTenant), which contains an 'attributes' object with the 'name' property. The name must match the tenant name in the URL (testtenant), and the API expects lowercase for the name value unless the object model specifies otherwise.

Answer

{"fvTenant": {"name": "testtenant"}}

Answer

{"attributes": {"name": "testtenant"}}

Answer

{"fvTenant": {"attributes": {"name": "TestTenant"}}}

Question 4

A script is using the Cisco Meraki API to fetch a list of organizations. The script needs to authenticate with an API key. Where should the API key be included in the request?

Accepted Answer

In the request header as 'X-Cisco-Meraki-API-Key'.. The Cisco Meraki API requires the API key to be sent in a custom HTTP header named 'X-Cisco-Meraki-API-Key'. This is a vendor-specific authentication mechanism, not a standard Bearer token. Including the key in this header ensures the request is authenticated without exposing the key in the URL or body.

Answer

In the HTTP Authorization header using Bearer scheme.

Answer

In the request body as a JSON field.

Answer

In the request URL as a query parameter.

Question 5

A developer is troubleshooting an API call to Cisco SD-WAN vManage. The request fails with HTTP 400 status and the response body: '{"error": "Bad Request", "details": "Invalid JSON: unexpected token at position 42"}'. Which tool or technique should the developer use to quickly identify the syntax error?

Accepted Answer

Use a JSON validator to check the request body.. The HTTP 400 status code indicates a client-side error, and the response body explicitly states 'Invalid JSON: unexpected token at position 42'. This means the request body contains malformed JSON. A JSON validator (e.g., jsonlint.com, jq, or a library like `json.loads()` in Python) will parse the JSON and pinpoint the exact syntax error (e.g., a missing comma, extra brace, or unescaped quote) at the specified position, allowing the developer to fix the request body quickly.

Answer

Increase the timeout value for the HTTP request.

Answer

Check the API key validity in the header.

Answer

Review the API documentation for required fields.

Question 6

A Kubernetes cluster is configured with a NetworkPolicy that allows ingress traffic only from pods with label 'app: frontend'. A new backend service needs to communicate with the database pod. What must be done to allow this?

Accepted Answer

Delete the existing NetworkPolicy. Option A is correct because the existing NetworkPolicy explicitly restricts ingress traffic to only pods with the label 'app: frontend'. Since the new backend service does not have this label, its traffic will be blocked by the policy. Deleting the NetworkPolicy removes all ingress restrictions, allowing the backend service to communicate with the database pod. In Kubernetes, NetworkPolicies are additive and default-deny if any policy selects the pod, so removing the policy is the simplest way to permit all ingress traffic.

Answer

Add label 'app: backend' to the database pod

Answer

Modify the NetworkPolicy to include an additional rule allowing from pods with label 'app: backend'

Answer

Create a new NetworkPolicy for the database

Question 7

A developer wants to deploy a containerized application on a Cisco Container Platform (CCP) cluster. The application requires persistent storage. Which Kubernetes resource should be used to provision storage?

Accepted Answer

ConfigMap. PersistentVolumeClaim (PVC) is the correct Kubernetes resource for requesting persistent storage in a CCP cluster. A PVC binds to a PersistentVolume (PV) that has been provisioned by the cluster administrator or dynamically via a StorageClass, making it the standard abstraction for storage consumption in containerized applications.

Answer

Secret

Answer

Service

Answer

PersistentVolumeClaim

Question 8

An application authenticates to Cisco Webex API using OAuth2 client credentials grant. Which three pieces of information must the application include in the token request?

Accepted Answer

Client ID. In the OAuth2 client credentials grant flow, the application authenticates directly as itself (not on behalf of a user) to obtain an access token. The token request must include the client ID (B) to identify the application, the client secret (D) to prove its identity, and the grant type (E) set to 'client_credentials' to indicate the flow being used. These three fields are mandatory per RFC 6749 Section 4.4.2.

Answer

Authorization Code

Answer

Redirect URI

Question 9

An administrator is using the Cisco Intersight API to manage server profiles. The API returns the following error: '{"error": "Forbidden", "message": "Insufficient privileges"}'. What is the most likely cause?

Accepted Answer

The OAuth2 token has insufficient scopes.. The error 'Forbidden' with message 'Insufficient privileges' directly indicates that the authenticated user or API client does not have the required permissions to perform the requested operation. In Cisco Intersight, access control is managed via OAuth2 scopes assigned to API keys; if the token lacks the specific scope (e.g., 'server-profile-write') needed for the API call, the server returns this 403 Forbidden error. Option C correctly identifies that the OAuth2 token has insufficient scopes.

Answer

The server profile ID is incorrect.

Answer

The request body is malformed.

Answer

The API key has expired.

Question 10

A DevOps team is using Cisco AppDynamics to monitor a microservices application. They notice that a specific service's response time spikes under load. Which AppDynamics feature should be used to drill down into the transaction trace?

Accepted Answer

Business Transactions. Business Transactions in AppDynamics represent the logical business operations (e.g., checkout, login) that span across multiple tiers. When a response time spike occurs, selecting the specific Business Transaction allows you to drill into its Transaction Snapshots, which capture the full distributed trace including call chains, method timings, and database queries. This is the correct entry point for root-cause analysis of performance degradation.

Answer

Health Rules

Answer

Transaction Snapshots

Answer

Service Endpoints

Question 11

A DevOps engineer is designing a REST API for a custom network automation tool. Which principle is essential for a RESTful design?

Accepted Answer

Use HTTP methods to perform CRUD operations on resources.. RESTful APIs are designed around resources, and HTTP methods (GET, POST, PUT, DELETE, PATCH) directly map to CRUD operations (Create, Read, Update, Delete). This stateless, resource-oriented approach is a core principle of REST as defined by Roy Fielding's dissertation, enabling uniform interfaces and predictable interactions.

Answer

Maintain session state on the server between requests.

Answer

Use a single URI for all operations with different method names.

Answer

Return XML responses by default for compatibility.

Question 12

An application running on Kubernetes is experiencing intermittent 503 errors. The logs show 'upstream timed out'. The application is behind a Cisco Application Policy Infrastructure Controller (APIC) load balancer. What is the most likely cause?

Accepted Answer

The Readiness probe is not defined. The 'upstream timed out' error in a Kubernetes environment behind a Cisco APIC load balancer indicates that the load balancer is attempting to forward traffic to a pod that is not ready to accept connections. Without a Readiness probe, Kubernetes assumes the pod is ready as soon as it starts, but the application may still be initializing or unable to handle requests. The APIC load balancer then sends traffic to an unready pod, causing timeouts and 503 errors.

Answer

The service port is misconfigured

Answer

The Liveness probe timeout is too low

Answer

The pod is not ready

Question 13

A company is implementing a secure CI/CD pipeline. Which THREE practices are essential for securing the pipeline?

Accepted Answer

Sign and verify all build artifacts.. Signing and verifying build artifacts ensures integrity and authenticity, preventing tampered artifacts from being deployed. This is a core supply chain security practice, often implemented using tools like GPG or Sigstore (Cosign) to generate and validate cryptographic signatures. Without verification, an attacker could inject malicious code into the pipeline by replacing a signed artifact with a compromised one.

Answer

Allow all container images to be pulled from any public registry.

Answer

Store secrets (API keys, passwords) in version control.

Question 14

A developer is building a RESTful API with Python Flask. Which TWO are recommended security best practices for exposing the API over HTTPS?

Accepted Answer

Validate and sanitize all user input.. Option B is correct because validating and sanitizing all user input is a fundamental security practice that prevents injection attacks (e.g., SQL injection, cross-site scripting) against the Flask API. Even over HTTPS, encrypted transport does not protect against malicious payloads; input validation must be applied server-side, often using libraries like marshmallow or Flask-WTF to enforce data types and strip dangerous characters.

Answer

Use HTTP Basic Authentication for simplicity.

Answer

Enable CORS for all origins.

Answer

Store passwords in plaintext in the database.

Question 15

Which THREE are valid ways to expose ConfigMap data to a pod in Kubernetes?

Accepted Answer

As environment variables. Option B is correct because Kubernetes allows ConfigMap data to be exposed as environment variables inside a pod using the `env` or `envFrom` field in the pod spec. This is a common method for injecting configuration into containers without modifying the container image.

Answer

As a Kubernetes Secret

Answer

As a container image label