200-901 Practice Test 33 — 15 Questions

Question 1

A Python script uses the Cisco Meraki API to create a new network and then immediately attempts to configure an SSID on that network. The SSID creation fails with a 400 error indicating 'network is not ready'. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The network is not fully provisioned yet; a delay is needed.. The Meraki API returns a 400 error with 'network is not ready' because creating a network is an asynchronous operation. The network's underlying infrastructure (e.g., virtual LANs, DHCP scopes, firewall rules) must be fully provisioned before it can accept SSID configurations. Attempting to configure an SSID immediately after creation fails because the network is still in a 'pending' or 'provisioning' state, requiring a polling delay or retry logic.

Answer

The API rate limit has been exceeded.

Answer

The API key does not have write access to networks.

Answer

The SSID name contains invalid characters.

Question 2

Refer to the exhibit. A developer sends a PUT request to the RESTCONF endpoint with the above JSON payload. The device already has interface GigabitEthernet1/0/1 configured with IP address 10.10.10.1/24. What is the expected outcome?

Accepted Answer

The request succeeds and the interface configuration remains unchanged.. D is correct because the PUT request to the RESTCONF endpoint with the provided JSON payload is an idempotent operation. Since the interface GigabitEthernet1/0/1 already exists with the exact same configuration (IP address 10.10.10.1/24), the PUT request effectively replaces the resource with the same data, resulting in no change. RESTCONF uses the HTTP PUT method to create or replace a resource, and if the resource already exists and the payload matches, the operation succeeds without modification.

Answer

The request fails because the interface already exists.

Answer

The request creates a new interface with the same configuration.

Answer

The request fails because the JSON is malformed.

Question 3

A Meraki dashboard API request to list networks returns a paginated response. The engineer notices a Link header in the response. What does this header typically contain?

Accepted Answer

A URL to the next page of results. Meraki uses Link headers for pagination, providing URLs for the next and previous pages.

Answer

The rate limit remaining

Answer

The total number of resources

Answer

An error message

Question 4

Drag and drop the steps to configure a new VLAN on a Cisco switch into the correct order.

Accepted Answer

1. Enter global configuration mode, 2. Create the VLAN using the 'vlan' command, 3. Assign switch ports to the VLAN using 'switchport access vlan', 4. Exit and verify with 'show vlan brief'.. VLAN creation requires global config mode; ports are assigned after the VLAN exists.

Answer

1. Enter global configuration mode, 2. Assign switch ports to the VLAN using 'switchport access vlan', 3. Create the VLAN using the 'vlan' command, 4. Exit and verify.

Answer

1. Enter global configuration mode, 2. Create the VLAN using the 'vlan' command, 3. Exit and verify, 4. Assign switch ports to the VLAN.

Answer

1. Create the VLAN using the 'vlan' command, 2. Enter global configuration mode, 3. Assign switch ports to the VLAN, 4. Exit and verify.

Question 5

A company uses a CI/CD pipeline to deploy network configurations. The pipeline includes a stage that runs automated tests against a simulated network environment. Which testing strategy does this represent?

Accepted Answer

Integration testing. Running automated tests against a simulated network environment validates how multiple network components (e.g., routers, switches, firewalls) interact as a whole. This is integration testing, which focuses on detecting interface and communication failures between integrated units, not on individual components or end-to-end system behavior. In a CI/CD pipeline for network configurations, this stage ensures that the combined changes work together before deployment to production.

Answer

Regression testing

Answer

Unit testing

Answer

Smoke testing

Question 6

A security policy requires that all container images in a registry are scanned for vulnerabilities before deployment. Which approach best integrates this into a CI/CD pipeline without slowing down the pipeline?

Accepted Answer

Build the image, scan it locally, and if it passes, push it to the registry; run scans in parallel with the build if possible.. It shifts the vulnerability scan left in the pipeline: the image is built and scanned locally before being pushed to the registry. If the scan passes, the image is pushed; if it fails, the pipeline stops early, avoiding the overhead of pushing a vulnerable image and then rebuilding. This approach minimizes pipeline latency by running scans in parallel with the build where possible, ensuring security without blocking the deployment flow.

Answer

Build the image, push it, then scan it, and if vulnerabilities are found, rebuild and repush.

Answer

Run the vulnerability scan on the image after pushing to the registry and block deployment if critical vulnerabilities are found.

Answer

Scan the source code dependencies before building the image, and skip image scanning.

Question 7

A network engineer is designing a REST API using Python Flask to allow provisioning of VPN tunnels. The API must support multiple clients and must be secure. Which approach is most appropriate for authenticating and authorizing API requests?

Accepted Answer

Issue API tokens to each client and validate them on each request. Issuing API tokens (e.g., using Flask's built-in session management or a library like Flask-JWT-Extended) allows the server to validate each request statelessly without storing client credentials on every call. This approach scales well for multiple clients, supports token revocation, and avoids exposing long-lived secrets in transit or at rest, aligning with RESTful statelessness and security best practices.

Answer

Use OAuth 2.0 with client credentials grant

Answer

Use HTTP Basic Authentication with a dictionary of usernames and passwords

Answer

Embed a shared secret in each client's source code

Question 8

A network engineer attempts to modify the IP address of GigabitEthernet1/0/1 using the Cisco IOS-XE RESTCONF API. They send a PUT request with a modified JSON body but receive a 400 Bad Request error. What is the most likely cause?

Accepted Answer

The request body does not include the full resource hierarchy.. D is correct because RESTCONF requires the request body to contain the full resource hierarchy (e.g., the entire YANG data tree for the interface) when using PUT, as PUT is a full replacement operation. A 400 Bad Request error typically indicates a malformed request, and omitting mandatory parent or sibling nodes in the JSON body violates the YANG schema, causing the server to reject the request.

Answer

The Accept header should be application/json.

Answer

The Content-Type header is missing or set incorrectly.

Answer

The API is not enabled on the device.

Question 9

A network engineer needs to automate the deployment of QoS policies across multiple campus switches using Cisco DNA Center. The engineer decides to use the Cisco DNA Center Intent API to create a policy tag and bind it to a group of devices. After sending the PUT request to /dna/intent/api/v1/policy-tag, the API returns a 202 Accepted status. However, the engineer notices that the policy is not being applied consistently across all devices. What is the most likely reason?

Accepted Answer

The request was asynchronous, and the engineer did not check the task status for completion.. The 202 Accepted status indicates that the request was accepted for asynchronous processing, not that it has completed. Cisco DNA Center Intent API uses asynchronous tasks for operations like policy tag binding, and the engineer must poll the task status endpoint to verify completion and success. Without checking the task status, the engineer cannot know if the policy was applied consistently across all devices, as some tasks may have failed or are still in progress.

Answer

The payload was not in JSON format, causing a silent failure.

Answer

The API token expired before the request was processed.

Answer

The engineer used an incorrect API endpoint for policy tags.

Question 10

A development team is implementing a microservices architecture. They need to ensure that services can discover each other dynamically without hardcoding IP addresses. Which technology should they use?

Accepted Answer

A service registry like Consul. A service registry like Consul provides a centralized directory where microservices register their network locations (IP and port) and health status. Other services query the registry to discover available instances dynamically, eliminating the need for hardcoded addresses. Consul supports health checks, multi-datacenter replication, and integrates with tools like Envoy for service mesh functionality.

Answer

A centralized load balancer

Answer

An API gateway

Answer

DNS-based service discovery

Question 11

A Python script using the Cisco Meraki API must update the SSID settings for a network. Which HTTP method should be used to modify an existing SSID?

Accepted Answer

PUT. To modify an existing SSID in the Cisco Meraki API, the HTTP PUT method is used because it performs an idempotent update of the resource at the specified URI. The Meraki API follows RESTful conventions where PUT replaces the entire representation of the SSID object, making it the correct choice for updating an existing SSID's settings (e.g., name, encryption, or splash page).

Answer

POST

Answer

DELETE

Answer

GET

Question 12

Which of the following is a best practice for version controlling large binary files (e.g., network device firmware images) in a Git repository?

Accepted Answer

Avoid storing binary files; use a separate artifact repository and reference the version in metadata. Git is designed for text-based source code with frequent diffs, not large binary files. Storing firmware images directly bloats the repository, slows clones and fetches, and defeats Git's delta compression. Best practice is to use a dedicated artifact repository (e.g., Nexus, Artifactory, or an S3 bucket) and store only a metadata reference (e.g., URL + checksum) in Git, keeping the repository lean and the binary lifecycle managed separately.

Answer

Use Git submodules to reference external storage

Answer

Compress them and commit as usual

Answer

Store them directly in the repository with LFS (Large File Storage)

Question 13

A company uses Cisco DNA Center to manage their network. A developer wants to retrieve the overall health score of a specific site using the DNA Center REST API. Which API path should be used?

Accepted Answer

/dna/intent/api/v1/site-health. The correct API path to retrieve the overall health score of a specific site is /dna/intent/api/v1/site-health. This endpoint is part of the Cisco DNA Center Intent API and returns site-level health metrics, including overall health scores for network devices, clients, and applications at a given site. It is specifically designed to aggregate health data per site, unlike broader network-wide endpoints.

Answer

/dna/intent/api/v1/network-health

Answer

/dna/intent/api/v1/assurance/site

Answer

/dna/intent/api/v1/health-score

Question 14

A script is using the Cisco Meraki API to fetch a list of organizations. The script needs to authenticate with an API key. Where should the API key be included in the request?

Accepted Answer

In the request header as 'X-Cisco-Meraki-API-Key'.. The Cisco Meraki API requires the API key to be sent in a custom HTTP header named 'X-Cisco-Meraki-API-Key'. This is a vendor-specific authentication mechanism, not a standard Bearer token. Including the key in this header ensures the request is authenticated without exposing the key in the URL or body.

Answer

In the HTTP Authorization header using Bearer scheme.

Answer

In the request body as a JSON field.

Answer

In the request URL as a query parameter.

Question 15

Which TWO statements about Dockerfile best practices are correct? (Choose two.)

Accepted Answer

Use a .dockerignore file to exclude unnecessary files from the build context.. A .dockerignore file prevents unnecessary files (e.g., node_modules, .git, logs) from being sent to the Docker daemon as part of the build context. This reduces build time, minimizes the risk of including sensitive data, and ensures a cleaner, more efficient image build.

Answer

Use the ADD instruction instead of COPY to copy local files into the image.

Answer

Combine multiple RUN commands into a single RUN statement to reduce image layers.

Answer

Use the EXPOSE instruction to secure the container by limiting exposed ports.