200-901 Practice Test 44 — 15 Questions

Question 1

When using OAuth 2.0 client credentials flow with a Cisco API, what is the typical purpose of the access token?

Accepted Answer

To authorize the client application to access resources. Client credentials flow is for server-to-server; the access token authorizes the client application to access resources on its own behalf, not on behalf of a user.

Answer

To identify the user's role

Answer

To authenticate the user

Answer

To encrypt the request payload

Question 2

In a microservices architecture, which communication pattern is typically asynchronous and decoupled?

Accepted Answer

Event-driven architecture. Event-driven architecture (D) is the correct answer because it is inherently asynchronous and decoupled: services communicate by publishing events to a message broker (e.g., Kafka, RabbitMQ) without needing to know about the consumers. This pattern allows the producer to emit an event and continue processing immediately, while consumers react to events at their own pace, achieving loose coupling and high scalability.

Answer

REST over HTTP

Answer

SOAP

Answer

gRPC

Question 3

A developer is creating a YANG data model for a new interface feature. The model must allow the user to choose from a predefined set of values for the 'duplex' leaf. Which YANG statement should be used to restrict the values to 'full', 'half', and 'auto'?

Accepted Answer

type enumeration { enum full; enum half; enum auto; }. The 'type enumeration' statement in YANG defines a leaf that can only take one of the explicitly listed enum values. By specifying 'enum full;', 'enum half;', and 'enum auto;', the developer restricts the 'duplex' leaf to exactly those three predefined strings, which matches the requirement.

Answer

choice duplex-options { case full; case half; case auto; }

Answer

type string;

Answer

type leafref { path '/other:duplex-list'; }

Question 4

A DevOps team manages network infrastructure using Infrastructure as Code (IaC). They store configuration files in a Git repository and use CI/CD to deploy changes. What is the best practice to ensure that only validated configurations are applied to production devices?

Accepted Answer

Require a pull request with at least one approval before merging to the main branch. Requiring a pull request with at least one approval before merging to the main branch enforces peer review and validation of configuration changes. This ensures that only code that has been reviewed for correctness, syntax, and adherence to standards is merged, preventing erroneous or malicious configurations from reaching production via the CI/CD pipeline.

Answer

Allow any team member to push directly to the main branch after testing locally

Answer

Use a manual approval gate in the CI/CD pipeline that requires manager sign-off

Answer

Automate the deployment of every commit directly to production

Question 5

In an SDN architecture, which API is used by the controller to communicate with network devices to install forwarding rules?

Accepted Answer

Southbound API. In SDN, the southbound API is the interface between the controller and the network devices (switches, routers). It allows the controller to install forwarding rules, such as flow entries in OpenFlow switches, enabling centralized control of the data plane.

Answer

REST API

Answer

East-West API

Answer

Northbound API

Question 6

A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?

Accepted Answer

The network exists but has no SSIDs configured.. An HTTP 200 status indicates the request was successfully processed by the Meraki API, meaning the API key, network ID, and request format were all valid. An empty array for SSIDs specifically means the network exists and the API queried it correctly, but no SSIDs have been configured on that network. This is the expected behavior when a network has no wireless profiles defined.

Answer

The network ID is incorrect.

Answer

The API key is invalid.

Answer

The request body is malformed.

Question 7

Based on the NAT translation table, what type of NAT is being used?

Accepted Answer

PAT (overload). The NAT translation table shows multiple internal IP addresses (e.g., 10.1.1.1, 10.1.1.2) being translated to the same public IP address (e.g., 203.0.113.1) but with different source ports. This is the defining characteristic of Port Address Translation (PAT), also known as NAT overload, where a single public IP is shared among many internal hosts by multiplexing on layer-4 port numbers.

Answer

Dynamic NAT

Answer

Static PAT

Answer

Static NAT

Question 8

A developer is using Cisco Meraki API to retrieve a list of networks. What is the correct HTTP method and endpoint path for listing networks in an organization?

Accepted Answer

GET /organizations/{orgId}/networks. The HTTP GET method is used to retrieve or list resources, and the endpoint /organizations/{orgId}/networks is the standard Meraki API path for fetching all networks within a specified organization. This follows RESTful conventions where GET requests are idempotent and safe for data retrieval.

Answer

DELETE /organizations/{orgId}/networks

Answer

POST /organizations/{orgId}/networks

Answer

PUT /organizations/{orgId}/networks

Question 9

A developer is building a RESTful API with Python Flask. Which TWO are recommended security best practices for exposing the API over HTTPS?

Accepted Answer

Validate and sanitize all user input.. Validating and sanitizing all user input is a fundamental security practice that prevents injection attacks (e.g., SQL injection, cross-site scripting) against the Flask API. Even over HTTPS, encrypted transport does not protect against malicious payloads; input validation must be applied server-side, often using libraries like marshmallow or Flask-WTF to enforce data types and strip dangerous characters.

Answer

Use HTTP Basic Authentication for simplicity.

Answer

Enable CORS for all origins.

Answer

Store passwords in plaintext in the database.

Question 10

Which THREE of the following are valid event triggers for an EEM applet on Cisco IOS XE? (Choose THREE.)

Accepted Answer

timer. EEM applets support timer-based event triggers, such as absolute time, countdown, or watchdog timers, allowing automation of actions at specified intervals or after a delay. This is a core EEM feature defined in Cisco IOS XE for scheduling tasks without external input.

Answer

snmp trap

Answer

http request

Question 11

An application requires reliable, ordered delivery of data with error checking. Which transport protocol should be used, and what is a key characteristic of this protocol?

Accepted Answer

TCP, because it uses a 3-way handshake to establish a connection. TCP (Transmission Control Protocol) is the correct choice because it provides reliable, ordered delivery of data with error checking. Its key characteristic is the 3-way handshake (SYN, SYN-ACK, ACK) used to establish a connection before data transfer, ensuring both endpoints are synchronized and ready for reliable communication.

Answer

TCP, because it has lower overhead than UDP

Answer

UDP, because it is connectionless and low-overhead

Answer

UDP, because it provides flow control

Question 12

A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?

Accepted Answer

Linting stage. Linting is the stage that validates syntax and style for code or configuration files. In a CI/CD pipeline for network automation, the linting stage uses tools like `ansible-lint` to check Ansible playbooks for syntax errors, best practices, and idempotency issues before any testing or deployment occurs.

Answer

Integration testing stage

Answer

Deployment stage

Answer

Unit testing stage

Question 13

In a Jenkins declarative pipeline, a stage named 'Deploy to Production' should only run after manual approval. Which directive should be used to achieve this?

Accepted Answer

input. The `input` directive in a Jenkins declarative pipeline is specifically designed to pause a stage and wait for human approval before proceeding. When placed inside a stage block, it presents a message and optional parameters (like a 'Proceed' or 'Abort' button) to a user, effectively implementing a manual gate. This is the correct way to enforce manual approval before a 'Deploy to Production' stage runs.

Answer

post

Answer

parallel

Answer

when

Question 14

A DevOps team is using Cisco NSO to manage network devices. They want to ensure that the configuration is compliant with corporate standards. Which NSO feature should they use?

Accepted Answer

Service reconciliation using FastMap. Service reconciliation using FastMap is the correct NSO feature for ensuring configuration compliance with corporate standards because it detects and corrects deviations between the intended service model (defined in YANG) and the actual device configuration. FastMap performs a diff and re-applies the service logic to bring the device back into compliance, making it ideal for continuous compliance enforcement.

Answer

Configuration Snapshots

Answer

NETCONF notifications

Answer

Configuration Database (CDB) rollback

Question 15

Which TWO of the following are examples of application layer protocols?

Accepted Answer

HTTP. HTTP (Hypertext Transfer Protocol) operates at the application layer (Layer 7) of the OSI model, enabling web browsers and servers to exchange hypertext documents. It defines how requests and responses are formatted and transmitted, relying on lower-layer protocols like TCP for reliable delivery.

Answer

IP

Answer

TCP

Answer

ARP