200-901 Practice Test 2 — 30 Questions

Question 1

Refer to the exhibit. A developer is writing an Ansible playbook to configure this interface on a Cisco IOS XE device. Which Ansible module should be used to set the IP address?

Accepted Answer

ios_config. The `ios_config` module is the correct choice because it allows you to push raw configuration lines to Cisco IOS XE devices, including interface IP address configuration. It directly sends the `ip address` command under the interface context, which is the standard method for setting an IP address on an IOS XE interface. Other modules either lack the ability to set IP addresses or are designed for different purposes.

Answer

ios_ip_interface

Answer

ios_command

Answer

ios_facts

Question 2

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

Accepted Answer

RESTCONF. RESTCONF is the correct choice because it is a stateless protocol that uses standard HTTP methods (GET, POST, PUT, PATCH, DELETE) to manipulate YANG-defined data stores on a Cisco IOS-XE device. Unlike NETCONF, which is stateful and session-oriented, RESTCONF operates over HTTP without maintaining session state, making it ideal for lightweight, RESTful automation.

Answer

NETCONF

Answer

SNMP

Answer

CLI

Question 3

In the context of REST API design, which HTTP status code should be returned when a client sends a request that exceeds the API rate limit?

Accepted Answer

429 Too Many Requests. (429 Too Many Requests) is correct because RFC 6585 defines this status code specifically for cases where a client has sent too many requests in a given time frame, exceeding the API's rate limit. REST APIs use this response to enforce throttling and inform the client to back off, often including a Retry-After header to indicate when to retry.

Answer

503 Service Unavailable

Answer

400 Bad Request

Answer

401 Unauthorized

Question 4

Which THREE of the following are features of HTTP/2?

Accepted Answer

Header compression (HPACK). HTTP/2 introduces HPACK header compression (option A), which reduces overhead by compressing header fields using a static table, a dynamic table, and Huffman encoding, making it a defining feature of the protocol. It also uses binary framing (option D), splitting communication into binary-encoded frames (HEADERS, DATA, SETTINGS, etc.) instead of HTTP/1.1's textual format, which enables more efficient parsing and processing. Multiplexed streams (option E) allow many concurrent request/response exchanges over a single TCP connection, eliminating HTTP/1.1's head-of-line blocking at the application layer. Option B is incorrect because HTTP/2 headers are binary-encoded, not plain text, and option C is incorrect because persistent connections already existed in HTTP/1.1 and are not a new or distinguishing feature of HTTP/2.

Answer

Plain text headers

Answer

Persistent connections

Question 5

Which three statements about Webex API webhooks are true? (Choose three.)

Accepted Answer

Webhooks deliver event data via HTTP POST to a specified URL.. Option A is correct because Webex webhooks push event notifications as an HTTP POST request containing a JSON payload to the target URL you register. Option C is correct because when creating a webhook you specify the resource (e.g., messages, meetings, memberships) and the event (e.g., created, updated, deleted), so it only fires for those matching events. Option D is correct because webhooks are registered programmatically by sending an authenticated POST request to the Webex REST endpoint https://webexapis.com/v1/webhooks with fields such as name, targetUrl, resource, and event. Option B is not required: webhook creation uses an OAuth 2.0 access token (often from an integration or bot), not specifically the client credentials grant, and webhook delivery itself is secured via a secret/signature rather than that grant. Option E is incorrect because Webex webhooks are push-based HTTP callbacks, not long polling.

Answer

Webhooks require OAuth 2.0 client credentials grant for security.

Answer

Webhooks use long polling to receive events.

Question 6

A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?

Accepted Answer

Southbound interface. NETCONF is a network management protocol used to install, manipulate, and delete the configuration of network devices. In the SDN architecture, the southbound interface is the layer that connects the control plane to the data plane, and NETCONF operates as a southbound protocol by carrying configuration data from a controller or management system down to network devices.

Answer

Northbound interface

Answer

Application layer

Answer

Control layer

Question 7

When making API calls to Cisco DNA Center, a developer receives a 401 Unauthorized error. The token was obtained using the token API endpoint. What is the most likely reason?

Accepted Answer

The token has expired. A 401 Unauthorized error when using a token obtained from the token API endpoint most commonly indicates that the token has expired. Cisco DNA Center tokens have a configurable Time-To-Live (TTL), typically defaulting to 1 hour, after which the token becomes invalid and must be refreshed via the /dna/system/api/v1/auth/token endpoint.

Answer

The request body contains invalid JSON

Answer

The API base URL is incorrect

Answer

The HTTP header for Accept is missing

Question 8

Which NETCONF operation is used to retrieve the entire configuration datastore from a network device?

Accepted Answer

. retrieves configuration datastore. retrieves state and config data. modifies configuration. confirms a candidate configuration.

Answer

<edit-config>

Answer

<get>

Answer

Question 9

A large enterprise uses Cisco DNA Center to manage their campus network. They have deployed fabric technology for SD-Access. The network team wants to use the DNA Center REST API to automate the addition of new wireless users to a specific virtual network (VN) based on their location (building). They have identified the API endpoint for creating a user device in the fabric. However, when they send a POST request with the appropriate JSON body, they receive a 400 Bad Request error. The JSON payload includes the mandatory fields for hostname, MAC address, and VN name. What is the most likely cause of the error?

Accepted Answer

The virtual network name provided does not exist in the fabric.. The 400 Bad Request error indicates that the server cannot process the request due to a client-side issue, such as invalid data in the payload. Since the mandatory fields (hostname, MAC address, VN name) are provided, the most likely cause is that the virtual network (VN) name does not match any existing VN in the fabric. DNA Center validates the VN name against its fabric configuration; if the VN is not defined, the API rejects the request with a 400 error.

Answer

The API call requires an authentication token that is missing or expired.

Answer

The MAC address format is incorrect (e.g., lowercase vs uppercase).

Answer

The user making the API call does not have sufficient privileges.

Question 10

Which THREE of the following are characteristics of IPv6? (Select exactly three.)

Accepted Answer

IPv6 does not have a built-in NAT requirement.. IPv6 was designed without a built-in requirement for Network Address Translation (NAT) because its vast 128-bit address space allows every device to have a globally unique public IP address. Unlike IPv4, which relies on NAT to conserve limited address space, IPv6 restores end-to-end connectivity by default, eliminating the need for address translation at the network edge.

Answer

IPv6 addresses are 32 bits in length.

Answer

IPv6 uses ARP to resolve MAC addresses.

Question 11

A large enterprise uses Cisco DNA Center to manage over 500 network devices across multiple sites. The network operations team wants to automate the validation of device compliance with a baseline configuration. They have a Python script that uses the Cisco DNA Center REST API to retrieve the device configuration and compare it against a golden configuration stored in a local file. Recently, the script started failing with a 401 HTTP response code when trying to authenticate. The team confirmed the username and password are correct and that the DNA Center server is reachable. The script uses the /api/system/v1/auth/token endpoint to obtain a token. Which of the following is the most likely cause of the 401 error?

Accepted Answer

The authentication token has expired and the script is not refreshing it.. The 401 HTTP response code indicates an authentication failure. Since the username and password are confirmed correct and the server is reachable, the most likely cause is that the script obtained a token earlier but is now using an expired token without refreshing it. Cisco DNA Center tokens have a configurable timeout (default 1 hour), and the script must re-authenticate or refresh the token before it expires.

Answer

The API endpoint requires a different HTTP method (e.g., POST vs GET).

Answer

The script is using an incorrect API version path (e.g., /v2 instead of /v1).

Answer

CORS (Cross-Origin Resource Sharing) is blocking the request.

Question 12

A network administrator needs to assign IP addresses to 50 hosts in a subnet. Which subnet mask provides the minimum required number of usable addresses while minimizing waste?

Accepted Answer

255.255.255.192 (/26). A /26 subnet mask (255.255.255.192) provides 64 total addresses per subnet, of which 62 are usable (2^6 - 2 = 62). This is the smallest power-of-two block that can accommodate 50 hosts, minimizing waste while meeting the requirement.

Answer

255.255.255.224 (/27)

Answer

255.255.255.240 (/28)

Answer

255.255.255.128 (/25)

Question 13

A developer needs to create a Python function that accepts any number of keyword arguments and prints them. Which function definition correctly uses **kwargs?

Accepted Answer

def print_args(**kwargs): print(kwargs). The **kwargs syntax in a Python function definition collects any number of keyword arguments into a dictionary. The function then prints that dictionary, which matches the requirement to accept and print any number of keyword arguments.

Answer

def print_args(*args): print(args)

Answer

def print_args(kwargs): print(kwargs)

Answer

def print_args(*kwargs): print(kwargs)

Question 14

A Python script is interacting with a REST API that returns JSON. The script needs to handle potential errors gracefully. Which TWO practices should be implemented? (Choose two.)

Accepted Answer

Use response.raise_for_status() to raise exceptions for HTTP errors.. Option A is correct because response.raise_for_status() from the requests library inspects the HTTP status code and raises an HTTPError for 4xx and 5xx responses, letting the script handle failures via try/except instead of silently processing bad data. Option C is correct because explicitly checking response.status_code (e.g., comparing against 200 or using 200 <= status_code < 300) lets the script branch on success or failure and decide whether to parse JSON or handle the error, which is essential for graceful error handling. Option B is not appropriate because a single undifferentiated try/except hides the specific cause of failures and prevents tailored handling of HTTP errors, JSON decode errors, or connection issues. Option D is wrong because assuming requests always succeed ignores network failures, timeouts, and 4xx/5xx responses, which defeats graceful error handling. Option E is wrong because calling json.loads() unconditionally can raise JSONDecodeError on non-JSON bodies (e.g., HTML error pages), so parsing should occur only after confirming a successful, JSON content-type response.

Answer

Use a single try/except block to catch all exceptions without differentiation.

Answer

Assume the request always succeeds; errors are rare.

Answer

Always parse the response body with json.loads() regardless of content type.

Question 15

Which of the following best describes the purpose of a unit test in software development?

Accepted Answer

To test individual functions or methods in isolation. Unit tests focus on verifying the correctness of the smallest testable parts of an application, such as individual functions or methods, in complete isolation from dependencies (e.g., using mocks or stubs). This ensures that each unit of code behaves as expected under controlled conditions, which is a foundational practice in test-driven development (TDD) and continuous integration pipelines. In the context of the 200-901 exam, understanding unit testing is critical for validating code quality in Cisco platforms like Cisco DNA Center or Meraki API integrations.

Answer

To check the performance of the application under load

Answer

To verify that different modules work together correctly

Answer

To test the entire system from end to end

Question 16

A network engineer is designing a data center network with leaf-spine topology. The requirement is to minimize latency and maximize bandwidth for east-west traffic. Which type of links should be used between leaf and spine switches?

Accepted Answer

Multiple parallel links with ECMP routing. In a leaf-spine topology, east-west traffic (server-to-server) must traverse the spine switches. Using multiple parallel links with Equal-Cost Multi-Path (ECMP) routing allows all links to be active simultaneously, maximizing bandwidth and minimizing latency by load-balancing traffic across all available paths. ECMP leverages Layer 3 routing (e.g., OSPF or BGP) to forward packets over multiple equal-cost paths, which is ideal for the non-blocking, high-throughput design of leaf-spine architectures.

Answer

Multiple links with VSS

Answer

Single link with LACP

Answer

Single link with STP

Question 17

A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?

Accepted Answer

Implement retry logic with exponential backoff and respect Retry-After header. A 429 status code indicates rate limiting, meaning the client has exceeded the allowed number of requests per time window. The correct response is to implement retry logic with exponential backoff and respect the Retry-After header, which tells the client how long to wait before retrying. This is a standard best practice for REST APIs, including Cisco Meraki's API v1, to handle rate limits gracefully without overwhelming the server.

Answer

Change the API endpoint to a different region

Answer

Check the API token

Answer

Increase the rate limit on the dashboard

Question 18

A developer is working with the Cisco SD-WAN vManage API to monitor overlay tunnels. They need to retrieve a list of all devices with their site IDs and IP addresses. Which API endpoint is most appropriate?

Accepted Answer

GET /dataservice/device. The GET /dataservice/device endpoint returns a list of all devices managed by the Cisco SD-WAN vManage, including their site IDs and IP addresses. This is the correct endpoint for retrieving device inventory details, as it provides the necessary fields like 'deviceId', 'system-ip', and 'site-id' in the response.

Answer

GET /dataservice/device/monitor

Answer

GET /dataservice/device/device

Answer

GET /dataservice/device/overlay

Question 19

A developer wants to send a message to a Webex room using the API. Which HTTP method and endpoint should they use?

Accepted Answer

POST /v1/messages. To send a message, use POST to /v1/messages with roomId or toPersonEmail.

Answer

POST /v1/rooms

Answer

PUT /v1/messages

Answer

GET /v1/messages

Question 20

A network team uses an Ansible playbook to automate the configuration of multiple Cisco IOS XE devices. The playbook includes the 'ios_config' module. Which of the following best describes the purpose of the 'provider' parameter in the ios_config module?

Accepted Answer

It defines the connection details for the device.. The 'provider' parameter in the ios_config module is a dictionary that encapsulates the connection details required to access the network device, such as hostname, username, password, port, and transport protocol (e.g., SSH). This allows the module to establish a session with the Cisco IOS XE device before applying configuration changes. Without the provider, the module would not know how to reach or authenticate to the target device.

Answer

It identifies the name of the playbook being used.

Answer

It specifies the configuration lines to be applied.

Answer

It sets the timeout for the module execution.