200-901 Practice Test 28 — 15 Questions

Question 1

A developer wants to use the Cisco Webex API to send a message to a specific person by email. Which parameter should be used in the POST /v1/messages request?

Accepted Answer

toPersonEmail. To send a message to a person, use the toPersonEmail parameter instead of roomId.

Answer

personId

Answer

recipientEmail

Answer

roomId

Question 2

A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?

Accepted Answer

The network exists but has no SSIDs configured.. An HTTP 200 status indicates the request was successfully processed by the Meraki API, meaning the API key, network ID, and request format were all valid. An empty array for SSIDs specifically means the network exists and the API queried it correctly, but no SSIDs have been configured on that network. This is the expected behavior when a network has no wireless profiles defined.

Answer

The network ID is incorrect.

Answer

The API key is invalid.

Answer

The request body is malformed.

Question 3

A developer is making a GET request to a REST API and needs to specify that the response should be in JSON format. Which HTTP header should be set?

Accepted Answer

Accept. The Accept header is used by the client to tell the server which media types (e.g., application/json) it can understand and prefers for the response. In a GET request, the client does not send a body, so Content-Type is irrelevant for specifying the response format. Setting Accept: application/json ensures the server returns JSON if it supports that format.

Answer

Content-Type

Answer

User-Agent

Answer

Authorization

Question 4

An application needs to retrieve all network clients from a specific Meraki network. The API response may be paginated. Which query parameters can be used to implement cursor-based pagination with the Meraki Dashboard API?

Accepted Answer

startingAfter and endingBefore. Meraki supports cursor-based pagination using startingAfter and endingBefore parameters.

Answer

offset and limit

Answer

page and perPage

Answer

nextToken and previousToken

Question 5

Which THREE of the following are valid NETCONF operations? (Choose three.)

Accepted Answer

. (A) is a valid NETCONF operation defined in RFC 6241; it loads all or part of a configuration into the specified target datastore (running, candidate, or startup) and is one of the core base protocol operations. (C) is also a base NETCONF operation from RFC 6241; it retrieves all or part of a specified configuration datastore and is distinct from , which returns both state and configuration data. (E) is a valid NETCONF session-level operation from RFC 6241 that gracefully terminates the NETCONF session and releases any locks and resources held by the client. (B) is not an operation but the transport-framing wrapper element that carries every NETCONF operation, and (D) is not a standalone NETCONF operation; committing the candidate datastore is performed via the element inside an as part of the candidate capability, not as a base operation itself.

Answer

<rpc>

Answer

Question 6

A developer is implementing secure coding practices to prevent SQL injection. Which approach is most effective when building a SQL query with user input?

Accepted Answer

Using parameterized queries with prepared statements. Parameterized queries with prepared statements separate SQL code from user-supplied data, so the database treats input strictly as data and never as executable SQL. This eliminates the root cause of SQL injection because the query structure is fixed and parsed before parameters are bound. It is the most robust and recommended defense across all major database platforms.

Answer

Validating user input to allow only alphanumeric characters

Answer

Storing user input in a database before using it in a query

Answer

Escaping all user input with a function like mysqli_real_escape_string

Question 7

A DevOps engineer runs a container using 'docker run -d -p 8080:80 nginx'. The host firewall blocks incoming traffic on port 8080 from external networks but allows from the local host. Which command would allow the engineer to test the container's web server from the same machine?

Accepted Answer

curl localhost:8080. Since the host firewall allows local traffic, using curl localhost:8080 will reach the container via the mapped port.

Answer

curl 10.0.0.1:8080

Answer

docker exec -it <container> bash

Answer

docker logs <container>

Question 8

A developer needs to ensure that environment variables containing database credentials are not hardcoded in the application code. Which approach is most secure for managing secrets in a CI/CD pipeline?

Accepted Answer

Use a secrets management tool like Vault to inject secrets during deployment.. Secrets management tools like HashiCorp Vault provide a centralized, encrypted store for sensitive data such as database credentials, and they inject secrets into the CI/CD pipeline at deployment time via secure APIs (e.g., Vault's HTTP API with TLS). This approach avoids storing secrets in version control, eliminates hardcoding, and supports dynamic secrets, rotation, and audit logging, which aligns with security best practices for CI/CD.

Answer

Encrypt the .env file and commit it.

Answer

Store the credentials in a .env file committed to the repository.

Question 9

A developer wants to perform a rolling update of a Kubernetes Deployment. Which command will update the image and initiate the rollout?

Accepted Answer

kubectl set image deployment/myapp myapp=myapp:v2. kubectl set image deployment updates the container image and triggers a rolling update if the deployment strategy is RollingUpdate (default).

Answer

kubectl update deployment myapp --image=myapp:v2

Answer

kubectl edit deployment myapp --image=myapp:v2

Answer

kubectl apply -f deployment.yaml --image=myapp:v2

Question 10

Which YANG model is an OpenConfig model used for interface configuration?

Accepted Answer

openconfig-interfaces. OpenConfig is a vendor-neutral, community-driven data model standard for network configuration and state. The 'openconfig-interfaces' YANG model is the OpenConfig model specifically designed for interface configuration, providing a consistent, model-driven approach across different network operating systems. Option D is correct because it directly names the OpenConfig model for interfaces.

Answer

oc-yang-interfaces

Answer

ietf-interfaces

Answer

Cisco-IOS-XE-interfaces

Question 11

A Kubernetes Service must expose a pod running a database to other pods in the same cluster, but not externally. Which Service type should be used?

Accepted Answer

ClusterIP. ClusterIP exposes the service on a cluster-internal IP, making it accessible only within the cluster.

Answer

LoadBalancer

Answer

ExternalName

Answer

NodePort

Question 12

A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?

Accepted Answer

Linting stage. Linting is the stage that validates syntax and style for code or configuration files. In a CI/CD pipeline for network automation, the linting stage uses tools like `ansible-lint` to check Ansible playbooks for syntax errors, best practices, and idempotency issues before any testing or deployment occurs.

Answer

Integration testing stage

Answer

Deployment stage

Answer

Unit testing stage

Question 13

An organization uses Ansible for configuration management and wants to secure the automation secrets (e.g., SSH keys, API tokens). The secrets are currently stored in plaintext in inventory files. The security team requires that secrets be encrypted at rest and decrypted only at runtime by authorized users. Which solution should be implemented?

Accepted Answer

Use Ansible Vault to encrypt sensitive variables in the inventory files. Ansible Vault is the built-in tool for encrypting sensitive data such as passwords, API tokens, and SSH keys at rest. It encrypts variables or entire files using AES-256, and decryption occurs only at runtime when the correct vault password is provided, meeting the requirement that secrets are decrypted only by authorized users.

Answer

Store secrets in an encrypted SSH key file and use it for authentication

Answer

Set strict file permissions (0600) on the inventory files to limit access

Answer

Use environment variables to pass secrets at runtime

Question 14

Which THREE of the following are valid JSON data types? (Choose three.)

Accepted Answer

String. JSON (JavaScript Object Notation) is a lightweight data-interchange format that supports only a fixed set of data types as defined by RFC 7159. String is a valid JSON type because it must be enclosed in double quotes and can contain Unicode characters. Number is valid as it includes integers and floating-point values without quotes, following the numeric grammar in the JSON specification.

Answer

Function

Answer

Date

Question 15

A network administrator is configuring SNMPv3 on a router for secure monitoring. Which combination of parameters is required to ensure authentication and encryption?

Accepted Answer

SNMPv3 with authPriv. SNMPv3 with authPriv is the correct combination because it enables both authentication (via HMAC-MD5 or HMAC-SHA) and encryption (via DES or AES) to ensure secure monitoring. The authPriv security level provides message integrity, origin authentication, and data confidentiality, meeting the requirement for both authentication and encryption.

Answer

SNMPv3 with noAuthNoPriv

Answer

SNMPv3 with authNoPriv

Answer

SNMPv2c with a complex community string