200-901 Practice Test 41 — 15 Questions

Question 1

Which Cisco product provides end-to-end application visibility and performance monitoring across hybrid cloud environments?

Accepted Answer

Cisco Intersight. Cisco Intersight is the correct answer because it provides unified infrastructure management with end-to-end application visibility and performance monitoring across hybrid cloud environments. It integrates telemetry from compute, storage, and network resources, enabling real-time insights into application behavior regardless of whether workloads run on-premises or in public clouds.

Answer

Cisco DNA Center

Answer

Cisco AppDynamics

Answer

Cisco SecureX

Question 2

A developer wants to deploy a containerized application on a Cisco Container Platform (CCP) cluster. The application requires persistent storage. Which Kubernetes resource should be used to provision storage?

Accepted Answer

PersistentVolumeClaim. PersistentVolumeClaim (PVC) is the correct Kubernetes resource for requesting persistent storage. A PVC binds to a PersistentVolume (PV) that provides storage independent of pod lifecycle. ConfigMap is for configuration data, not persistent storage. Secrets store sensitive data, Services enable network access, and neither provides persistent storage.

Answer

Secret

Answer

Service

Answer

ConfigMap

Question 3

A network automation script uses Git for version control. The developer wants to revert the last two commits on the current branch but keep the changes in the working directory for further modification. Which TWO Git commands can achieve this? (Choose two.)

Accepted Answer

git reset --soft HEAD~2. git reset --soft and git revert can be used; soft reset moves HEAD back but keeps changes staged; revert creates new commits undoing changes.

Answer

git checkout HEAD~2

Answer

git reset --hard HEAD~2

Answer

git remove HEAD~2

Question 4

A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?

Accepted Answer

Implement retry logic with exponential backoff and respect Retry-After header. A 429 status code indicates rate limiting, meaning the client has exceeded the allowed number of requests per time window. The correct response is to implement retry logic with exponential backoff and respect the Retry-After header, which tells the client how long to wait before retrying. This is a standard best practice for REST APIs, including Cisco Meraki's API v1, to handle rate limits gracefully without overwhelming the server.

Answer

Change the API endpoint to a different region

Answer

Check the API token

Answer

Increase the rate limit on the dashboard

Question 5

A security team wants to ensure that only signed Docker images are deployed in production. Which CI/CD pipeline step validates the image signature before deployment?

Accepted Answer

Use Docker Content Trust with Notary to verify signatures.. Docker Content Trust (DCT) integrates with Notary to provide a framework for signing and verifying Docker images. When DCT is enabled in the CI/CD pipeline, the Docker client verifies the image's signature against a trusted signing key before allowing the image to be pulled or deployed, ensuring only images signed by authorized parties are used in production.

Answer

Compare the image SHA with a known good hash.

Answer

Run a vulnerability scan on the image.

Answer

Check the image size on registry.

Question 6

Which TWO of the following features are provided by Cisco DNA Center but NOT by Cisco Prime Infrastructure? (Choose two.)

Accepted Answer

Machine learning-based assurance analytics. Machine learning-based assurance analytics is a feature exclusive to Cisco DNA Center, which uses advanced telemetry and ML algorithms to proactively detect anomalies, predict network issues, and provide closed-loop assurance. Cisco Prime Infrastructure relies on traditional polling and threshold-based monitoring, lacking the predictive and adaptive analytics capabilities that DNA Center's Assurance engine offers.

Answer

Configuration compliance auditing

Answer

Software image management

Answer

Network Hierarchy and Site Management

Question 7

Match each YAML structure to its description.

Accepted Answer

Mapping: An unordered set of key-value pairs, each separated by a colon and space.. In YAML, a mapping (dictionary) uses key: value pairs; a sequence (list) uses '- ' items; a scalar is a single value. The distractors swap definitions or apply collection concepts to scalars.

Answer

Mapping: An ordered list of items, each prefixed with a dash and space.

Answer

Sequence: An unordered set of key-value pairs, each separated by a colon and space.

Answer

Scalar: A collection of key-value pairs or items.

Question 8

Drag and drop the steps to troubleshoot a network connectivity issue using the OSI model from bottom to top.

Accepted Answer

Check physical cables and interfaces, then verify data link layer, then verify network layer, then verify transport layer, then verify application layer.. Troubleshooting follows the OSI model from physical up to application to systematically isolate the problem.

Answer

Check application layer, then transport layer, then network layer, then data link layer, then physical layer.

Answer

Check physical cables and interfaces, then verify network layer, then verify transport layer, then verify application layer, skipping data link layer.

Answer

Check network layer first, then physical cables and interfaces, then data link layer, then transport layer, then application layer.

Question 9

Which TWO of the following are HTTP methods used for creating or updating resources in REST APIs? (Select TWO)

Accepted Answer

PUT. In REST APIs, POST is used to create a new resource, and PUT is used to update or replace an existing resource (and can also create it if it doesn't exist). While PATCH can also update resources, it is not one of the two most fundamental methods for creating or updating, and the question specifically asks for only two.

Answer

DELETE

Answer

GET

Answer

PATCH

Question 10

A team uses Chef to manage network device configurations. Which component of Chef is responsible for storing configuration policy and distributing it to nodes?

Accepted Answer

Chef Server. The Chef Server is the central hub that stores configuration policies (cookbooks, roles, environments, data bags) and distributes them to nodes via a REST API. When a Chef Client runs on a node, it authenticates with the Chef Server and downloads the relevant policy to converge the node to the desired state. This makes the Chef Server the authoritative source of configuration policy in a Chef architecture.

Answer

Knife

Answer

Chef Client

Answer

Supermarket

Question 11

Refer to the exhibit. Which statement correctly describes this subscription configuration?

Accepted Answer

It subscribes to YANG-push notifications for interface state data.. The subscription configuration uses YANG-push notifications to stream interface state data. The presence of a subscription ID, a YANG-push filter (e.g., 'ietf-interfaces:interfaces-state'), and a destination group (e.g., '10.1.1.1:2000') indicates that the device is configured to push telemetry data for interface operational state changes to a receiver using the YANG-push model, which is a standard mechanism for streaming data from network devices.

Answer

It pushes interface operational status changes to a receiver using UDP.

Answer

It uses XML encoding for the telemetry data.

Answer

The receiver is configured to listen on port 2000 using TCP.

Question 12

At which layer of the OSI model do MAC addresses operate?

Accepted Answer

Layer 2 – Data Link. MAC addresses operate at Layer 2 (Data Link) of the OSI model because they are used for local network addressing and frame delivery between directly connected devices. The Data Link layer encapsulates packets into frames and uses MAC addresses to identify source and destination interfaces on the same network segment, as defined by IEEE 802 standards.

Answer

Layer 1 – Physical

Answer

Layer 4 – Transport

Answer

Layer 3 – Network

Question 13

Refer to the exhibit. Which Cisco DNA Center Intent API request produced this response?

Accepted Answer

GET /dna/intent/api/v1/network-device/{id}. The response shows detailed information for a single network device, including its management IP address, platform ID, and serial number. The GET /dna/intent/api/v1/network-device/{id} request retrieves details for a specific device identified by its unique ID, which matches the granular, single-device data in the exhibit. This is the correct Intent API endpoint for fetching a device by ID.

Answer

GET /dna/intent/api/v1/network-device

Answer

POST /dna/intent/api/v1/network-device

Answer

PUT /dna/intent/api/v1/network-device/{id}

Question 14

A CI/CD pipeline uses GitLab CI. The pipeline must build a Docker image and then run security scans on the image before pushing. Which GitLab CI keyword allows defining a sequence of jobs that must run in order?

Accepted Answer

stages. The 'stages' keyword defines the order of jobs. Jobs are grouped by stage, and stages run sequentially.

Answer

before_script

Answer

only

Answer

image

Question 15

You are a network engineer at a financial services company. The network uses OSPF as the IGP, and all routers are in area 0. The core network consists of four routers (R1, R2, R3, R4) connected in a full mesh with GigabitEthernet links. The OSPF cost is set to 1 on all interfaces. Recently, a new application was deployed that requires low jitter and deterministic paths between two servers: Server A connected to R1 and Server B connected to R4. During peak hours, you notice that traffic between the servers is using the path R1->R3->R4 instead of R1->R2->R4, causing higher latency due to congestion on R3. OSPF metrics reflect equal cost to both paths (cost 2 each). You need to enforce that traffic from Server A to Server B always uses the path through R2 without changing the topology or adding additional hardware. Which action should you take?

Accepted Answer

Increase the OSPF cost on the interface between R1 and R3 to a value higher than the cost of the path through R2.. Increasing the OSPF cost on the R1-R3 interface makes the path through R3 less preferred (cost >2), while the R1-R2-R4 path retains a total cost of 2. OSPF uses cost as its metric, and the lowest-cost path is installed in the routing table. By raising the cost on the R1-R3 link, you force traffic from Server A to Server B to take the deterministic path through R2 without changing the topology or adding hardware.

Answer

Change the routing protocol from OSPF to EIGRP to have better metric control.

Answer

Use the 'default-information originate' command on R2 to attract traffic.

Answer

Configure policy-based routing (PBR) on R1 to send traffic destined to Server B's subnet to the next-hop R2.