200-901 Practice Test 2 — 30 Questions

Question 1

Drag and drop the steps to set up a basic DHCP server on a Cisco router into the correct order.

Accepted Answer

First, configure the excluded address range using 'ip dhcp excluded-address'. Then, create the DHCP pool with 'ip dhcp pool'. Next, define the network subnet with 'network'. Finally, set the default gateway with 'default-router'.. DHCP configuration on Cisco routers involves creating a pool, defining the network, and setting options like default gateway.

Answer

First, create the DHCP pool with 'ip dhcp pool'. Then, define the network subnet with 'network'. Next, set the default gateway with 'default-router'. Finally, configure the excluded address range using 'ip dhcp excluded-address'.

Answer

First, define the network subnet with 'network'. Then, create the DHCP pool with 'ip dhcp pool'. Next, set the default gateway with 'default-router'. Finally, configure the excluded address range using 'ip dhcp excluded-address'.

Answer

First, set the default gateway with 'default-router'. Then, create the DHCP pool with 'ip dhcp pool'. Next, define the network subnet with 'network'. Finally, configure the excluded address range using 'ip dhcp excluded-address'.

Question 2

An automation engineer wants to programmatically retrieve the interface configuration of a Cisco Nexus switch using NX-API. Which API call method is most appropriate?

Accepted Answer

GET. The NX-API on Cisco Nexus switches uses HTTP methods that map to CRUD operations. To retrieve (read) interface configuration without modifying any state, the GET method is the correct and most appropriate choice, as it corresponds to the 'show' commands in the CLI. POST, PUT, and DELETE are intended for creating, updating, or deleting resources, not for read-only queries.

Answer

POST

Answer

DELETE

Answer

PUT

Question 3

A REST API returns a 500 Internal Server Error when a client sends a malformed JSON payload. What is the most appropriate HTTP response code to indicate a client-side error?

Accepted Answer

400 Bad Request. A 400 Bad Request is the correct response because the client sent a malformed JSON payload, which is a client-side error. HTTP 400 indicates that the server cannot process the request due to something perceived as a client error (e.g., malformed syntax). This aligns with RFC 7231, which defines 400 as appropriate for requests with invalid syntax or structure.

Answer

401 Unauthorized

Answer

403 Forbidden

Answer

422 Unprocessable Entity

Question 4

A team is using Python scripts with netmiko to back up configurations from a large number of network devices. What is the primary advantage of using netmiko over direct paramiko for this task?

Accepted Answer

Netmiko simplifies the handling of device-specific prompts and command output. Netmiko is built on top of Paramiko but adds a higher-level abstraction layer that automatically handles device-specific prompt detection, command output parsing, and SSH session management. This simplifies the backup process across heterogeneous devices by eliminating the need to manually write code for each device's unique prompt patterns and command responses.

Answer

Netmiko supports only Cisco devices

Answer

Netmiko uses REST API instead of SSH

Answer

Netmiko is faster than paramiko

Question 5

A security team is developing an application that collects network alerts from Cisco Firepower Management Center (FMC) API. The API requires OAuth2 authorization code grant flow. After obtaining an authorization code, what must the application do to get an access token?

Accepted Answer

Exchange the authorization code for an access token by calling the token endpoint with the code and client credentials.. In the OAuth2 authorization code grant flow, the authorization code is an intermediate credential that must be exchanged for an access token. The application must call the token endpoint, presenting the authorization code along with its client credentials (client ID and client secret) to receive the access token. This exchange is required by RFC 6749 and is a fundamental security measure to ensure the client is authorized to obtain the token.

Answer

Resend the authorization request with the code included in the redirect URI.

Answer

Decode the authorization code using base64 to extract the access token.

Answer

Use the authorization code directly in subsequent API requests as a bearer token.

Question 6

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

Accepted Answer

To define and manage network infrastructure resources in a declarative state file. The Cisco Catalyst Center Terraform provider allows network automation engineers to define and manage network infrastructure resources in a declarative state file. Terraform uses a desired-state approach where the configuration file describes the intended end state of resources, and the provider communicates with Catalyst Center's REST API to enforce that state, enabling idempotent and version-controlled infrastructure management.

Answer

To execute a series of CLI commands on network devices in sequence

Answer

To write imperative scripts that configure network devices via SSH

Answer

To directly manage routers and switches without using Catalyst Center

Question 7

A large enterprise uses Cisco SD-Access with fabric automation. The network administrator wants to automate the process of adding a new user device to a specific virtual network (VN) based on its MAC address. Which API or tool should they use?

Accepted Answer

Cisco ISE REST API. Cisco ISE REST API is the correct choice because ISE is the policy and authentication engine in SD-Access that manages endpoint identity and virtual network (VN) assignments. When a new user device is added, the administrator can use the ISE REST API to programmatically create an endpoint entry with its MAC address and map it to a specific VN, leveraging ISE's policy sets and authorization profiles. This directly automates the VN assignment without requiring changes to fabric underlay or overlay configurations.

Answer

Ansible playbook with ios_config

Answer

Cisco DNA Center REST API

Answer

Cisco APIC-EM REST API

Question 8

Which TWO Ansible modules are commonly used for automating Cisco IOS devices?

Accepted Answer

ios_config. The `ios_config` module is correct because it is specifically designed to manage Cisco IOS device configurations by sending configuration commands via SSH or Telnet, using the CLI to apply changes to the running or startup configuration. This module is part of Ansible's `cisco.ios` collection and directly supports the IOS operating system, making it the standard choice for automating configuration tasks on Cisco IOS devices.

Answer

junos_config

Answer

nxos_command

Answer

eos_config

Question 9

When implementing network automation with Cisco devices, which THREE practices help ensure idempotency? (Select THREE)

Accepted Answer

Performing a full configuration replace using RESTCONF PUT instead of PATCH.. A full configuration replace using RESTCONF PUT ensures idempotency by setting the entire configuration to a known state, regardless of the current state. Unlike PATCH, which applies incremental changes that may behave differently depending on the existing configuration, PUT overwrites the entire resource, guaranteeing the same result every time it is executed.

Answer

Writing scripts that only push incremental configurations.

Answer

Relying on manual rollback procedures after automation failures.

Question 10

A YANG module defines a leaf named 'bandwidth' of type 'uint32'. What does this represent in the context of a network device?

Accepted Answer

A single integer value representing bandwidth in kilobits per second. In YANG, a 'leaf' node defines a single, scalar value of a specific data type. When the leaf is named 'bandwidth' with type 'uint32', it represents a single integer value, typically interpreted as kilobits per second (kbps) in the context of network device configuration (e.g., interface bandwidth). This aligns with the standard YANG data modeling approach where a leaf cannot hold multiple values or complex structures.

Answer

A set of unique bandwidth values

Answer

A grouping of related bandwidth parameters

Answer

An ordered list of bandwidth values

Question 11

Which three of the following are common data formats used with REST APIs on Cisco platforms?

Accepted Answer

JSON. JSON (JavaScript Object Notation) is a lightweight, text-based data interchange format that is natively supported by most programming languages and REST APIs. Cisco platforms, such as Cisco DNA Center and Cisco Meraki, use JSON as the primary data format for API requests and responses because it is easy to parse and has a compact structure. JSON's key-value pair syntax aligns well with RESTful principles, making it the most common choice for modern Cisco REST APIs.

Answer

CSV

Answer

HTML

Question 12

What is the default transport protocol for NETCONF sessions?

Accepted Answer

SSH. NETCONF (Network Configuration Protocol) uses SSH as its default transport protocol, as specified in RFC 6242. SSH provides the required secure, authenticated, and encrypted channel for NETCONF sessions, ensuring confidentiality and integrity of configuration data exchanged between the client and server.

Answer

HTTP

Answer

TLS

Answer

SNMP

Question 13

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

Accepted Answer

network_cli. The ios_config module is designed for Cisco IOS devices and requires a persistent network connection to send configuration commands. The network_cli connection method establishes an SSH session that remains open for the duration of the playbook task, allowing the module to send multiple CLI commands and handle prompts. This is the recommended connection method for ios_config because it supports privilege escalation and command responses needed for configuration changes.

Answer

local

Answer

netconf

Answer

httpapi

Question 14

A developer is using Python requests library to interact with a Cisco IOS XE device's REST API. The call returns a 400 Bad Request status. The payload is correctly formatted JSON. What is the most likely cause?

Accepted Answer

The authentication credentials are missing or incorrect in the request header. A 400 Bad Request status from a Cisco IOS XE REST API indicates a client-side error, typically related to malformed syntax or missing required elements. Since the JSON payload is confirmed as correctly formatted, the most likely cause is missing or incorrect authentication credentials in the request header, as the API requires valid credentials (e.g., Basic Auth with username:password encoded in Base64) to process the request. Without proper authentication, the server rejects the request with a 400 status before even evaluating the payload.

Answer

The device's API service is not enabled

Answer

The requested URL path is incorrect

Answer

The JSON payload contains a syntax error

Question 15

A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?

Accepted Answer

XML or JSON. RESTCONF (RFC 8040) is a REST-like protocol that uses HTTP methods to access structured data defined by YANG models. It natively supports both XML and JSON as data serialization formats, allowing clients to choose the format via the Accept header or URL suffix (e.g., .xml or .json). This makes XML and JSON the correct answer because they are the only formats explicitly defined in the RESTCONF specification for encoding configuration and operational data.

Answer

YAML

Answer

Plain text

Answer

CSV

Question 16

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Accepted Answer

Inventory files can be written in YAML format. Ansible inventory files define the hosts and groups that Ansible manages. They can be written in YAML format, which is a human-readable data serialization language that Ansible supports alongside the traditional INI format. This flexibility allows users to choose the format that best suits their automation needs, with YAML being particularly useful for complex inventories due to its support for structured data.

Answer

Inventory files cannot contain variables for individual hosts

Answer

Inventory files must be in INI format only

Answer

An inventory file can include a [vars] section to define group variables

Question 17

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

Accepted Answer

Include an API key in the X-Cisco-Meraki-API-Key header. The Meraki Dashboard API uses a simple API key for authentication, not OAuth2 or JWT. The key must be included in the `X-Cisco-Meraki-API-Key` header of every request. This is the only supported method for authenticating with the Meraki API, as documented by Cisco Meraki.

Answer

Provide username and password in the Authorization header with Basic auth

Answer

Use OAuth2 client credentials grant and pass a bearer token

Answer

Generate a JSON Web Token (JWT) signed with a shared secret

Question 18

In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?

Accepted Answer

GET /dna/intent/api/v1/site. The site hierarchy can be retrieved via GET /dna/intent/api/v1/site.

Answer

POST /dna/intent/api/v1/site

Answer

GET /dna/intent/api/v1/network-device

Answer

GET /dna/intent/api/v1/topology

Question 19

An engineer is troubleshooting packet loss between two hosts on different subnets. The traceroute shows that packets reach the first hop router but then stop. The router's ARP table shows an incomplete entry for the next-hop IP address. What is the most likely cause?

Accepted Answer

The next-hop device is powered off or has a Layer 1 issue.. An incomplete ARP entry for the next-hop IP address indicates that the router sent an ARP request but received no reply. This typically means the next-hop device is unreachable at Layer 2, often because it is powered off, has a failed interface, or there is a cabling issue. Since traceroute shows packets reaching the first hop but not beyond, the Layer 2 failure at the next hop is the most direct cause.

Answer

The MTU is misconfigured on the outgoing interface.

Answer

The routing protocol has not converged yet.

Answer

An ACL is blocking traffic on the outgoing interface.

Question 20

Match each Python library to its typical use in network automation.

Accepted Answer

Netmiko: Simplifies SSH connections to network devices. Netmiko, NAPALM, Paramiko, and PyEZ are common Python libraries in network automation. Netmiko simplifies SSH, NAPALM provides a vendor-agnostic API, Paramiko is a low-level SSH library, and PyEZ is Juniper-specific. Common confusions include mixing Netmiko with HTTP libraries and NAPALM with vendor-specific tools.

Answer

Netmiko: Used for HTTP REST API calls

Answer

NAPALM: Juniper-specific library for automation