200-901 Practice Test 30 — 15 Questions

Question 1

Which THREE statements about NETCONF are correct?

Accepted Answer

NETCONF uses SSH as the transport protocol.. Option B is correct because NETCONF (RFC 6241) defines SSH as its mandatory transport protocol, mapping NETCONF sessions to the SSH subsystem 'netconf' on TCP port 830. Option C is correct because the operation is the standard NETCONF RPC for loading configuration changes into a specified datastore (running, candidate, or startup), supporting merge, replace, create, and delete operations. Option E is correct because all NETCONF protocol operations are encoded as XML-based RPCs within and elements, using the NETCONF base namespace. Option A is incorrect because HTTP is not the NETCONF transport; NETCONF over HTTP is not defined in the base specification (RESTCONF is the HTTP-based alternative). Option D is incorrect because retrieves only configuration data from a datastore; state data is retrieved with the separate operation.

Answer

NETCONF uses HTTP as the transport protocol.

Answer

The <get-config> operation retrieves both configuration and state data.

Question 2

A network engineer is subnetting the network 192.168.1.0/24 into subnets that each support at least 50 hosts. What subnet mask should be used?

Accepted Answer

255.255.255.192 (/26). To support at least 50 hosts, you need 6 host bits (2^6 - 2 = 62 usable addresses). A /26 subnet mask (255.255.255.192) provides exactly 6 host bits, meeting the requirement. The original /24 network is borrowed with 2 subnet bits, yielding 4 subnets of 64 addresses each.

Answer

255.255.255.224 (/27)

Answer

255.255.255.240 (/28)

Answer

255.255.255.128 (/25)

Question 3

An engineer is automating the configuration of SNMP on Cisco routers using Ansible. Which two modules are commonly used for this purpose? (Select TWO)

Accepted Answer

cisco.ios.ios_config. The cisco.ios.ios_config module is correct because it allows you to push raw CLI configuration lines to Cisco IOS devices, including SNMP-related commands like 'snmp-server community' or 'snmp-server host'. The cisco.ios.ios_snmp_server module is correct because it is a dedicated Ansible module that provides structured, idempotent management of SNMP server settings (e.g., communities, hosts, traps) without requiring raw CLI lines.

Answer

cisco.ios.ios_interface

Answer

cisco.ios.ios_command

Answer

cisco.ios.ios_banner

Question 4

Refer to the exhibit. What will be the result of running this Ansible playbook against the 'switches' group?

Accepted Answer

VLAN 10 will be created if it does not already exist. The playbook uses the `cisco.ios.ios_vlans` module with `state: merged`. In Ansible's `ios_vlans` module, the `merged` state ensures the VLAN configuration is present on the device. If VLAN 10 does not exist, it will be created with the specified parameters (`vlan_id 10` and `name 'voice'`). The `merged` state does not delete VLANs; it only adds or updates to match the desired state. Therefore, VLAN 10 will be created if it does not already exist.

Answer

VLAN 10 will be deleted

Answer

VLAN 10 will be modified to have the name 'voice'

Answer

The playbook will only show the running configuration of VLAN 10

Question 5

An engineer retrieves the list of devices in a Meraki network via the Dashboard API. The API returns HTTP 200 OK with an empty array. What is the most likely reason?

Accepted Answer

The network exists but has no devices.. An HTTP 200 OK with an empty array indicates the API request was successfully processed and the target resource (the network) exists, but there are no devices associated with it. This is the expected response when the network is valid but has no devices provisioned.

Answer

The organization has no networks.

Answer

The network ID provided is incorrect.

Answer

The API key has expired.

Question 6

Which Docker networking mode provides the most isolation by not connecting the container to any network?

Accepted Answer

none. The `none` networking mode in Docker creates a container with no network interfaces except the loopback device, providing the highest level of network isolation. This means the container cannot send or receive any external traffic, making it ideal for security-sensitive workloads that require complete network disconnection.

Answer

overlay

Answer

bridge

Answer

host

Question 7

A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?

Accepted Answer

GET /organizations/{organizationId}/networks. The Meraki API uses RESTful conventions where retrieving a list of resources is done with a GET request. The endpoint GET /organizations/{organizationId}/networks returns all networks belonging to a specific organization, as documented in the Meraki API reference. This matches the standard pattern for listing child resources under a parent resource.

Answer

POST /organizations/{organizationId}/networks

Answer

GET /networks

Answer

PUT /organizations/{organizationId}/networks

Question 8

A developer is designing a REST API for a network automation tool. Which HTTP method should be used to retrieve the current configuration of a network device?

Accepted Answer

GET. GET is the HTTP method defined for retrieving a representation of a resource without side effects, making it the correct choice for reading a network device's current configuration. It is safe and idempotent, so repeated calls return the same result and do not alter state. In a REST API for network automation, GET /devices/{id}/config would be the idiomatic design.

Answer

DELETE

Answer

PUT

Answer

POST

Question 9

A developer uses Cisco Intersight API to manage UCS servers. Which authentication method is required for Intersight API calls?

Accepted Answer

API key with HMAC signature. Cisco Intersight API requires API key authentication with HMAC (Hash-Based Message Authentication Code) signing for all REST API calls. The developer generates an API key pair (private and public) in the Intersight GUI, then uses the private key to create an HMAC-SHA256 signature over the request headers and payload. This signature is included in the Authorization header, ensuring request integrity and non-repudiation without transmitting the secret key over the network.

Answer

OAuth2 token from Webex

Answer

Session cookie

Answer

Basic authentication with username/password

Question 10

A developer needs to run a temporary container that executes a command and then exits. Which Docker command should be used?

Accepted Answer

docker run --rm. The `docker run --rm` command creates a container, runs the specified command, and automatically removes the container filesystem after it exits. This is the correct approach for a temporary, disposable container that should not persist after execution. The `--rm` flag ensures cleanup without manual intervention.

Answer

docker exec

Answer

docker run -d

Answer

docker start

Question 11

A Python script uses a try/except block to handle API errors. If the API returns a 429 status code, which mechanism should the script implement to handle the error appropriately?

Accepted Answer

Wait for the time specified in the Retry-After header and then retry. A 429 status code indicates the client has sent too many requests in a given amount of time (rate limiting). The HTTP specification (RFC 6585) recommends including a Retry-After header in the response, which tells the client how long to wait before retrying. Implementing a wait based on this header and then retrying is the correct and respectful way to handle rate limiting, allowing the script to eventually succeed without overwhelming the server.

Answer

Switch to a different API endpoint

Answer

Log the error and continue without retrying

Answer

Immediately retry the same request without delay

Question 12

A network automation engineer is writing a Python script to interact with the Cisco Meraki Dashboard API. The script currently makes GET requests to retrieve a list of networks and then makes subsequent requests for each network to get device details. However, the script is slow due to network latency. The engineer wants to improve performance without changing the API's functionality. Which approach best addresses the performance issue?

Accepted Answer

Use parallel requests with asyncio for concurrent API calls.. Using asyncio with an async HTTP library (like aiohttp) allows the script to send multiple GET requests concurrently rather than sequentially, reducing the total wall-clock time dominated by network latency. This approach improves performance without altering the API's functionality or the data being retrieved.

Answer

Wrap all API calls in a single transaction.

Answer

Increase the timeout value in each request.

Answer

Use a POST request instead of GET to combine both operations.

Question 13

In the OSI model, which layer is responsible for session management, including establishing, maintaining, and terminating connections between applications?

Accepted Answer

Layer 5 (Session). The Session layer (Layer 5) manages sessions between applications. The Transport layer handles end-to-end communication.

Answer

Layer 4 (Transport)

Answer

Layer 7 (Application)

Answer

Layer 6 (Presentation)

Question 14

A Python function needs to accept a variable number of keyword arguments. Which parameter syntax should be used?

Accepted Answer

**kwargs. In Python, the **kwargs syntax allows a function to accept a variable number of keyword arguments by collecting them into a dictionary. This is the correct parameter syntax for handling arbitrary keyword arguments, as specified in Python's function definition rules.

Answer

*kwargs

Answer

*args

Answer

&kwargs

Question 15

Which TWO of the following are best practices for securely managing API tokens in a CI/CD pipeline?

Accepted Answer

Use environment variables injected by the CI/CD system (e.g., Jenkins secrets).. CI/CD systems like Jenkins provide built-in secret management features (e.g., Jenkins Credentials Binding plugin) that inject API tokens as environment variables at runtime, keeping them out of source code and build artifacts. This approach ensures tokens are never stored in plain text or committed to version control, aligning with the principle of least privilege and secure pipeline design.

Answer

Store tokens as plain text in the source code repository for easy access.

Answer

Hardcode tokens into the Docker image during build.

Answer

Encrypt tokens with a static key stored in the repository.