200-901 Practice Test 33 — 15 Questions

Question 1

An engineer needs to automate the backup of configuration files from multiple Cisco IOS devices to a central server. Which protocol is most appropriate for pushing configurations from the devices to the server?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SCP. SCP (Secure Copy Protocol) is the most appropriate choice because it provides encrypted, authenticated file transfers over SSH, ensuring the confidentiality and integrity of Cisco IOS configuration backups. It is natively supported on Cisco IOS devices and allows secure push operations to a central server without requiring additional software.

Answer

TFTP

Answer

FTP

Answer

HTTP

Question 2

An application authenticates to Cisco Webex API using OAuth2 client credentials grant. Which three pieces of information must the application include in the token request?

Accepted Answer

Client ID. The OAuth2 client credentials grant is a machine-to-machine flow in which the application exchanges its own credentials directly for an access token, so it must send its Client ID (B) to identify the registered integration and its Client Secret (D) to authenticate that identity to the Cisco Webex authorization server. It must also include Grant Type (E) set to the literal value "client_credentials" so the token endpoint knows which grant is being requested. An Authorization Code (A) belongs to the authorization code grant, where a user-agent redirect yields a code that is later exchanged, and a Redirect URI (C) is likewise only needed in redirect-based flows such as authorization code; neither is used when the client authenticates on its own behalf.

Answer

Authorization Code

Answer

Redirect URI

Question 3

A developer is using Docker Compose to run a multi-service application. Which THREE keys are valid top-level keys in a docker-compose.yml file? (Choose three.)

Accepted Answer

volumes. Option D, services, is a valid top-level key because it is the mandatory root element of a Compose file that defines each container/service in the application. Option E, networks, is a valid top-level key used to declare custom networks that services can join via their service-level networks attribute. Option A, volumes, is a valid top-level key used to declare named volumes that services can mount via their service-level volumes attribute. Option B, environment, is not a top-level key; it is a service-level key (or an env_file reference) used to set container environment variables. Option C, ports, is also not a top-level key; it is a service-level key that publishes container ports to the host.

Answer

environment

Answer

ports

Question 4

What is the primary benefit of using HTTP/2 over HTTP/1.1?

Accepted Answer

It supports multiplexing. HTTP/2 introduces binary framing with a multiplexing layer that allows many concurrent request/response streams to share a single TCP connection. This eliminates HTTP/1.1's head-of-line blocking at the application layer and reduces the need for multiple parallel connections or domain sharding. Multiplexing is the headline feature that delivers HTTP/2's performance gains over HTTP/1.1.

Answer

It is connectionless

Answer

It uses plain text for headers

Answer

It eliminates the need for TLS

Question 5

A developer is integrating a monitoring application with Cisco Meraki API to retrieve network health data. The application needs to ensure it doesn't exceed the API rate limit of 5 requests per second. What is the best practice for handling this limitation?

Accepted Answer

Implement exponential backoff and retry after receiving a 429 status code.. The Cisco Meraki API returns HTTP 429 (Too Many Requests) when the rate limit of 5 requests per second is exceeded. Implementing exponential backoff—where the application waits progressively longer intervals between retries—is the standard best practice for handling rate limits gracefully, as it reduces server load and increases the chance of successful retries without overwhelming the API.

Answer

Increase the rate limit by contacting Cisco support.

Answer

Use a single API key for all requests to reduce overhead.

Answer

Send all requests in a loop without delay to complete quickly.

Question 6

A developer is working with a REST API that uses HTTP Basic Authentication. The developer needs to send a request with the username 'admin' and password 'secret'. Which HTTP header should be set?

Accepted Answer

Authorization: Basic YWRtaW46c2VjcmV0. HTTP Basic Authentication requires the credentials to be formatted as 'username:password', then Base64-encoded, and sent in the Authorization header with the 'Basic' scheme. Option C correctly includes the 'Basic' scheme followed by the Base64-encoded string 'YWRtaW46c2VjcmV0' (which decodes to 'admin:secret').

Answer

Authorization: Basic admin:secret

Answer

Authorization: YWRtaW46c2VjcmV0

Answer

Authorization: Bearer YWRtaW46c2VjcmV0

Question 7

A developer wants to use Cisco NX-API on a Nexus switch to execute a CLI command via JSON. What must be enabled on the switch first?

Accepted Answer

feature nxapi. The 'feature nxapi' command enables NX-API on NX-OS.

Answer

ip http server

Answer

netconf-yang

Answer

restconf

Question 8

Which authentication method is used by the Cisco Meraki Dashboard API?

Accepted Answer

API key in the X-Cisco-Meraki-API-Key header. Meraki Dashboard API uses an API key passed in the X-Cisco-Meraki-API-Key header.

Answer

JWT token in the Authorization header

Answer

OAuth 2.0 token in the Authorization header

Answer

HTTP Basic authentication with username and password

Question 9

A network automation solution uses YANG data models to describe network configurations. Which THREE statements about YANG are true? (Select THREE)

Accepted Answer

YANG can be used in conjunction with NETCONF and RESTCONF.. YANG is a data modeling language that defines the structure and constraints of configuration and state data, and it is designed to be used with NETCONF (RFC 6241) and RESTCONF (RFC 8040) as the transport protocols. This makes option A correct because YANG models are encoded in XML or JSON and exchanged via these protocols.

Answer

YANG models are always written in XML syntax.

Answer

YANG is a replacement for SNMP.

Question 10

A network engineer is analyzing traffic and needs to identify which applications use UDP. Which three applications commonly use UDP as their transport protocol? (Choose three.)

Accepted Answer

DHCP. DHCP (A) is correct because it uses UDP ports 67 (server) and 68 (client) for its broadcast-based DORA process, since UDP's connectionless nature suits the initial address assignment before a client has an IP. DNS (D) is correct because standard DNS queries and responses use UDP port 53 for lightweight, fast lookups, falling back to TCP only for large responses or zone transfers. NTP (E) is correct because it uses UDP port 123 for time synchronization, where occasional packet loss is acceptable and the low overhead of UDP is preferred. SSH (B) is not correct because it relies on TCP port 22 for reliable, ordered, connection-oriented sessions. SMTP (C) is not correct because it uses TCP port 25 (and 587/465) to guarantee reliable delivery of mail messages.

Answer

SSH

Answer

SMTP

Question 11

Which three capabilities are offered by the Cisco DNA Center REST API?

Accepted Answer

Intent-based API for business intent deployment. Cisco DNA Center's REST API offers an intent-based API that allows you to express business intent (e.g., 'deploy QoS for voice traffic') rather than configuring individual device commands. This abstraction layer translates high-level policies into device-specific configurations, enabling network automation and assurance. It is a core capability of the Cisco Platform Abstraction Layer (PAL).

Answer

Real-time packet capture

Answer

Direct command-line execution on managed devices

Question 12

Which THREE are characteristics of OSPF? (Choose three.)

Accepted Answer

It uses cost as the metric. OSPF uses cost as its metric, which is derived from the bandwidth of the interface (calculated as 10^8 / bandwidth in bps by default). This allows OSPF to select the most efficient path based on link speed rather than a simple hop count, making it suitable for larger, more complex networks.

Answer

It is a distance-vector routing protocol

Answer

It uses hop count as the metric

Question 13

In a Docker Compose file, you want to ensure that the 'web' service starts only after the 'db' service is healthy. Which key should you use under the 'web' service?

Accepted Answer

depends_on. In Docker Compose, the `depends_on` key with the `condition: service_healthy` option ensures that the `web` service starts only after the `db` service has passed its health check. This is defined in the `db` service using a `healthcheck` directive, and Compose waits for the healthy state before starting dependent services.

Answer

networks

Answer

links

Question 14

A Meraki dashboard API request to list networks returns a paginated response. The engineer notices a Link header in the response. What does this header typically contain?

Accepted Answer

A URL to the next page of results. Meraki uses Link headers for pagination, providing URLs for the next and previous pages.

Answer

The rate limit remaining

Answer

The total number of resources

Answer

An error message

Question 15

Which TWO practices help prevent hardcoded credentials in application code? (Choose TWO.)

Accepted Answer

Use a secrets management tool like HashiCorp Vault to retrieve credentials at runtime. Option A is correct because a secrets management tool such as HashiCorp Vault stores credentials outside the codebase and injects them at runtime via API calls or dynamic secrets, so no credential value ever appears in source files or version control. Option C is correct because keeping secrets in environment variables loaded from a .env file that is excluded from version control (e.g., listed in .gitignore) removes the credential from the code itself while still making it available to the running process. Option B is wrong because emailing secrets and pasting them into code during deployment is exactly the hardcoding anti-pattern and exposes credentials in mail systems and source history. Option D is wrong because committing even a placeholder .env file to the repository normalizes storing secrets in version control and risks real values being committed later. Option E is wrong because embedding secrets directly in source code with comments is the definition of hardcoded credentials and leaks them to anyone with repository access.

Answer

Share secrets via email and paste them into the code during deployment

Answer

Commit a .env file with placeholder values to the repository

Answer

Embed secrets directly in the source code with comments