200-901 Practice Test 40 — 15 Questions

Question 1

A developer wants to use Cisco DNA Center to change the network configuration. Which TWO API categories provide capabilities to modify the network? (Choose two.)

Accepted Answer

Run your network. Change your network and Run your network (command runner) can modify the network. Know your network is read-only.

Answer

Platform

Answer

Know your network

Answer

Monitor your network

Question 2

A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)

Accepted Answer

The resource's current state conflicts with the requested change (e.g., trying to delete a resource that is in use).. A 409 Conflict error in RESTCONF indicates that the request cannot be completed due to a conflict with the current state of the resource. For example, attempting to delete a resource that is referenced by other resources (e.g., a VLAN interface that is still active) violates the resource's state constraints, triggering this HTTP status code.

Answer

Authentication token is missing.

Answer

The resource does not exist.

Answer

The request contains invalid data types.

Question 3

Which THREE of the following are valid JSON data types? (Choose three.)

Accepted Answer

String. JSON (JavaScript Object Notation) is a lightweight data-interchange format that supports only a fixed set of data types as defined by RFC 7159. String is a valid JSON type because it must be enclosed in double quotes and can contain Unicode characters. Number is valid as it includes integers and floating-point values without quotes, following the numeric grammar in the JSON specification.

Answer

Function

Answer

Date

Question 4

A developer is using Git for version control. After creating a new feature branch 'feature-login' from 'main', they make several commits. Meanwhile, another developer has merged changes into 'main'. The developer wants to incorporate the latest main changes into 'feature-login' without creating a merge commit. Which Git command should they use?

Accepted Answer

git pull --rebase origin main. `git pull --rebase origin main` fetches the latest changes from the remote `main` branch and then rebases the current `feature-login` branch onto those changes. This incorporates the new commits from `main` without creating a merge commit, resulting in a linear history. The `--rebase` flag ensures that the developer's commits are replayed on top of the updated `main`, avoiding the extra merge commit that `git merge` would create.

Answer

git rebase main

Answer

git merge main

Answer

git checkout main && git pull && git checkout feature-login && git merge main

Question 5

Which data structure in Python would be most appropriate for storing a collection of unique items and performing fast membership tests?

Accepted Answer

Set. A set is the correct choice because it is implemented as a hash table in Python, which provides O(1) average-time complexity for membership tests using the `in` operator. Sets automatically enforce uniqueness, meaning duplicate items are not allowed, making them ideal for storing a collection of distinct elements. This directly matches the requirement for fast membership testing and uniqueness.

Answer

Tuple

Answer

List

Answer

Dictionary

Question 6

A developer writes a Python script using ncclient to retrieve the running configuration from a Cisco IOS XE device. The script fails with an XML parsing error. What is the most likely cause?

Accepted Answer

The script is not filtering the output correctly and receives multiple root elements. The most likely cause is that the script does not filter the NETCONF reply to a specific subtree, so the device returns multiple top-level XML elements (e.g., both and ). An XML parser expects a single root element, and receiving multiple roots triggers a parsing error. ncclient's `get_config` with no filter can return the entire configuration as separate elements, violating XML well-formedness.

Answer

The device does not support NETCONF

Answer

The ncclient library version is too old

Answer

The username and password are incorrect

Question 7

A DevOps team manages a multi-site Cisco Meraki network with 50 MX appliances and 200 MR access points. They use a Python script that calls the Meraki API to collect device utilization data every hour and stores it in a CSV file. Recently, the script started failing intermittently with HTTP 429 status codes. The team suspects rate limiting but notices that the failures occur even when only one script instance runs. The script uses a single API key and makes requests to the /devices/{serial}/uplink endpoint for each MX and the /devices/{serial}/wireless/status endpoint for each MR. The script is scheduled via cron and runs sequentially. The team wants to resolve the rate limiting while minimizing changes to the script. Which course of action should the team take?

Accepted Answer

Introduce a delay between API calls to stay within the rate limit.. The intermittent HTTP 429 errors indicate the script is exceeding the Meraki API rate limit, which applies per API key. Since the script runs sequentially with a single key, introducing a delay between API calls (e.g., using time.sleep()) is the simplest fix that stays within the rate limit without requiring architectural changes. This directly addresses the root cause while minimizing modifications to the existing script.

Answer

Distribute the API requests across multiple API keys.

Answer

Switch to a webhook-based approach to receive data instead of polling.

Answer

Use the bulk API request feature to collect data in fewer calls.

Question 8

A developer is using the Meraki Dashboard API to list all organizations. The base URL is https://api.meraki.com/api/v1/. What is the correct endpoint and authentication method?

Accepted Answer

GET /organizations with X-Cisco-Meraki-API-Key header. The Meraki Dashboard API uses a custom API key for authentication, sent via the `X-Cisco-Meraki-API-Key` header. To list all organizations, the correct HTTP method is GET, and the endpoint is `/organizations` (relative to the base URL `https://api.meraki.com/api/v1/`). This matches option C exactly.

Answer

POST /organizations with Bearer token in Authorization header

Answer

GET /organizations with Basic Auth username and password

Answer

GET /v1/organizations with Cookie authentication

Question 9

Which THREE of the following are valid methods to handle API rate limiting in a Python automation script? (Select exactly 3.)

Accepted Answer

Parse the Retry-After header from the response. The Retry-After header is a standard HTTP mechanism (defined in RFC 7231) that explicitly tells the client how long to wait before making the next request. Parsing this header allows your Python script to respect the server's rate limit dynamically, rather than using a fixed or arbitrary delay. This is a common pattern when interacting with REST APIs that enforce rate limiting.

Answer

Sleep for a fixed amount of time between requests

Answer

Ignore the limit and send requests faster

Question 10

Which TWO of the following Python exception handling statements are valid? (Choose two.)

Accepted Answer

try:
    x = 1/0
except ZeroDivisionError as e:
    print(e). Options A and C are valid Python exception handling statements. Option A uses the correct `as` keyword to bind the exception instance. Option C shows proper syntax with multiple except blocks, where a generic `except:` can follow a specific except. Option B is invalid because it uses the obsolete comma syntax (`except ZeroDivisionError, e`), removed in Python 3. Option D is invalid because you cannot catch multiple exception types with a single `as` variable using a tuple; the syntax is not supported. Option E is invalid because a bare `except:` clause is considered poor practice and is not a valid 'exception handling statement' in this context—it catches all exceptions without specificity.

Answer

try:
    x = 1/0
except ZeroDivisionError, e:
    print(e)

Answer

try:
    x = 1/0
except (ZeroDivisionError, TypeError) as e:
    print(e)

Answer

try:
    x = 1/0
except:
    print('error')

Question 11

An application running in a Kubernetes pod needs to access an external database securely. The database credentials are rotated every 24 hours. Which approach ensures that the pod always uses the current credentials without manual intervention?

Accepted Answer

Use a Secrets Store CSI driver to mount secrets from an external vault as a volume.. A Secrets Store CSI driver can dynamically mount secrets from an external vault as a volume, and the application can read the updated secret from the volume without restarting the pod, handling credential rotation seamlessly. Option A is incorrect because embedding a token in code is insecure and not automatically refreshed. Option C is incorrect because restarting the pod daily is disruptive and may cause downtime. Option D is incorrect because a sidecar container that watches a vault and updates config is less integrated and not a native Kubernetes approach compared to the CSI driver.

Answer

Embed a token in the application code that refreshes automatically.

Answer

Store credentials in a Kubernetes Secret and mount as volume; restart pod daily.

Answer

Use a sidecar container that watches a vault and updates the application config.

Question 12

A network engineer uses Ansible to apply a standard ACL to multiple routers. The playbook runs without errors, but the ACL is not applied on some routers. Upon checking, those routers have a different configuration revision due to a previous manual change. What is the best practice to ensure consistent application?

Accepted Answer

Use the 'replace' parameter to overwrite the entire config. The 'replace' parameter in Ansible's ios_config module forces a full configuration replacement on the target device, overwriting the entire running configuration with the intended configuration. This ensures that any prior manual changes or configuration revisions are eliminated, guaranteeing consistent ACL application across all routers regardless of their current state.

Answer

Use the ansible_network_os variable correctly

Answer

Use the 'backup' option in ios_config

Answer

Use the 'ignore_errors' directive

Question 13

A Kubernetes Deployment has replicas: 3. The team updates the container image to a new version. The rollout gets stuck because the new pod fails readiness probes. Which kubectl command will display the rollout status and help diagnose the issue?

Accepted Answer

kubectl rollout status deployment/my-deployment. kubectl rollout status deployment/my-deployment shows the progress. If stuck, it indicates failure. kubectl describe pod can show probe details.

Answer

kubectl get pods -l app=my-deployment

Answer

kubectl logs deployment/my-deployment

Answer

kubectl describe deployment my-deployment

Question 14

A developer is writing a Python script that uses the Cisco Catalyst Center (formerly DNA Center) API to get the list of sites. The API returns a response with a 'response' key containing a list of sites. The developer wants to access the 'response' field from the JSON response. Which code snippet correctly extracts the list?

Accepted Answer

sites = response['response']. Uses direct dictionary indexing `response['response']`, which is the most direct way to access the 'response' key. Option D uses the `.get('response')` method, which also retrieves the value for the key 'response' and is safe in case the key is missing (returns None instead of raising KeyError). Both methods are correct in this context because the API is expected to return a dictionary with a 'response' key. Options A and C are incorrect because they treat the response object as a list or attempt to index it incorrectly.

Answer

sites = list(response)

Answer

sites = response[0]

Question 15

A network administrator is configuring OSPF on a router and wants to ensure that routes from area 0 are propagated to area 1, but area 1 should not see specific inter-area routes. Which OSPF feature should be used?

Accepted Answer

Totally stubby area. A totally stubby area (Option B) blocks both Type 5 (external) and Type 3 (inter-area) LSAs, injecting only a default route into the area. This meets the requirement that area 1 should not see specific inter-area routes, while still allowing connectivity to area 0 via the default route. A stub area (Option D) only blocks Type 5 LSAs, not Type 3, so it would not prevent inter-area routes from being seen.

Answer

NSSA

Answer

Virtual-link

Answer

Stub area