200-901 Practice Test 47 — 15 Questions

Question 1

An organization uses Cisco DNA Center and wants to programmatically deploy a configuration template to multiple devices. Which API category should be used?

Accepted Answer

Change your network. The 'Change your network' API category in Cisco DNA Center is specifically designed for making configuration changes, including deploying templates to devices. It provides endpoints for template deployment, configuration management, and other write operations. This aligns with the goal of programmatically deploying a configuration template to multiple devices.

Answer

Platform

Answer

Run your network

Answer

Know your network

Question 2

Which THREE of the following are benefits of using an SDN (Software-Defined Networking) architecture compared to traditional networking? (Choose three.)

Accepted Answer

Automation of network configuration changes.. Option B is correct because SDN's centralized controller exposes northbound APIs (e.g., REST) that let orchestration tools push configuration programmatically, enabling automation of network configuration changes instead of manual CLI work on each device. Option C is correct because that same programmable control plane allows new services and policies to be provisioned in software via the controller rather than waiting on per-device hardware configuration, so new network services deploy faster. Option D is correct because SDN logically centralizes the control plane in a controller, giving a single, network-wide view and centralized control and visibility over all data-plane devices. Option A is not a benefit—SDN changes the skill set required but does not inherently reduce the need for network engineers. Option E is not a benefit—SDN does not provide built-in encryption for all traffic; encryption is handled by separate mechanisms such as IPsec, TLS, or MACsec.

Answer

Reduced need for network engineers.

Answer

Built-in encryption for all network traffic.

Question 3

A Docker container needs to be started in detached mode with port mapping from host port 8080 to container port 80. Which command accomplishes this?

Accepted Answer

docker run -d -p 8080:80 myapp. The -d flag runs container in detached mode, -p maps host port to container port.

Answer

docker start -d -p 8080:80 myapp

Answer

docker run -it -p 8080:80 myapp

Answer

docker run -d -p 80:8080 myapp

Question 4

An administrator is configuring DNS records for a company's domain. Which three DNS record types are most commonly used to map hostnames to IP addresses or aliases? (Choose three.)

Accepted Answer

AAAA. Option A (AAAA) is correct because an AAAA record maps a hostname to an IPv6 address, directly fulfilling the hostname-to-IP mapping purpose. Option B (CNAME) is correct because a Canonical Name record creates an alias from one hostname to another hostname, which is the alias-mapping function described in the question. Option C (A) is correct because an A record maps a hostname to an IPv4 address, the most fundamental hostname-to-IP mapping. Option D (MX) is not correct here because MX records designate mail exchangers for email delivery, not hostname-to-IP or alias mapping. Option E (PTR) is not correct because PTR records provide reverse DNS lookups, mapping IP addresses back to hostnames rather than hostnames to IP addresses.

Answer

MX

Answer

PTR

Question 5

A script is using the Cisco Meraki API to fetch a list of organizations. The script needs to authenticate with an API key. Where should the API key be included in the request?

Accepted Answer

In the request header as 'X-Cisco-Meraki-API-Key'.. The Cisco Meraki API requires the API key to be sent in a custom HTTP header named 'X-Cisco-Meraki-API-Key'. This is a vendor-specific authentication mechanism, not a standard Bearer token. Including the key in this header ensures the request is authenticated without exposing the key in the URL or body.

Answer

In the HTTP Authorization header using Bearer scheme.

Answer

In the request body as a JSON field.

Answer

In the request URL as a query parameter.

Question 6

Which TWO of the following are valid branching strategies in Git? (Choose two.)

Accepted Answer

Feature branching. Feature branching (C) is a valid Git branching strategy in which each new feature or user story is developed on its own dedicated branch (e.g., feature/login) and later integrated into the mainline via a pull/merge request, isolating work-in-progress from stable code. GitFlow (E) is a well-known branching model defined by Vincent Driessen that uses long-lived branches such as main/master and develop plus supporting branches (feature/*, release/*, hotfix/*) with defined merge rules between them. The other options are not recognized branching strategies: 'Rebase-only' (A) describes a history-rewriting integration technique rather than a branch topology, 'Merge avoidance' (B) is a general practice of minimizing merge commits, and 'Direct commit to main' (D) is the absence of a branching strategy, i.e., committing straight to the mainline.

Answer

Rebase-only

Answer

Merge avoidance

Answer

Direct commit to main

Question 7

Which TWO HTTP methods are considered safe according to HTTP/1.1 specification?

Accepted Answer

GET. According to the HTTP/1.1 specification (RFC 7231), a method is 'safe' if it is defined as not having side effects on the server — essentially, it is intended only for information retrieval. Option B, GET, is safe because it is designed solely to retrieve a representation of a resource without altering server state. Option D, HEAD, is also safe because it is identical to GET except that the server must not return a message body, making it a read-only metadata request. The unmarked options do not belong: PUT (A) and DELETE (C) are unsafe because they create/replace and remove resources respectively, and POST (E) is unsafe because it submits data that often changes server state or triggers processing.

Answer

PUT

Answer

DELETE

Answer

POST

Question 8

Which THREE statements about RESTful APIs are true?

Accepted Answer

They use HTTP methods to perform CRUD operations.. Option B is correct because RESTful APIs map CRUD operations to standard HTTP methods: POST for create, GET for read, PUT/PATCH for update, and DELETE for delete. Option D is correct because REST enforces stateless communication, meaning each request from client to server must contain all information needed to understand and process it, with no client session state stored on the server between requests. Option E is correct because REST exposes resources as identifiable URIs/URLs, and clients interact with those resources using the uniform HTTP interface. Option A is not correct because REST does not require WebSockets; it typically uses HTTP request/response, and WebSockets are a separate full-duplex protocol used for different scenarios. Option C is not correct because REST is an architectural style that commonly uses JSON or XML over HTTP, not SOAP, which is a separate messaging protocol with its own envelope and WS-* standards.

Answer

They require WebSockets for communication.

Answer

They use SOAP as the message format.

Question 9

An engineer is developing an EEM applet on a Cisco IOS XE device to run a CLI command when a specific syslog message appears. Which event trigger should be used?

Accepted Answer

event syslog pattern. The syslog pattern event trigger allows matching a specific syslog message pattern.

Answer

event interface

Answer

event timer

Answer

event cli match

Question 10

A network administrator is troubleshooting BGP path selection for a route received from two different ISPs. The routes have the same local preference and AS-path length, but one route has a shorter MED value. Which route will be preferred?

Accepted Answer

The route with the lower MED. In BGP path selection, when routes have the same local preference and AS-path length, the next tiebreaker is the Multi-Exit Discriminator (MED) value. A lower MED value is preferred because it indicates a more desirable entry point into the neighboring AS. Therefore, the route with the shorter MED will be selected.

Answer

The route with the most specific prefix length

Answer

The route from the ISP with the higher bandwidth

Answer

The route with the higher local preference

Question 11

A developer is using the Meraki Dashboard API and receives an HTTP 429 status code with a Retry-After header. What is the correct interpretation?

Accepted Answer

The rate limit has been exceeded; the client should wait the number of seconds specified in Retry-After before retrying.. HTTP 429 status code indicates 'Too Many Requests', meaning the client has exceeded the rate limit imposed by the Meraki Dashboard API. The Retry-After header specifies the number of seconds the client must wait before sending a new request to avoid further throttling. This is a standard rate-limiting mechanism defined in RFC 6585.

Answer

The API key is invalid and the request should be re-authenticated.

Answer

The server is temporarily unavailable; the client should retry immediately.

Answer

The request was successful but the response is too large.

Question 12

A company is designing a new branch network. They want to segment traffic into separate broadcast domains to improve security and reduce broadcast traffic. Which technology should be used to achieve this?

Accepted Answer

VLANs. VLANs (Virtual Local Area Networks) segment a physical network into multiple logical broadcast domains at Layer 2. By assigning different VLANs to different groups of devices, broadcast traffic is confined to the VLAN, reducing unnecessary propagation and improving security by isolating traffic between segments.

Answer

Spanning Tree Protocol

Answer

Subnetting

Answer

EtherChannel

Question 13

An automation engineer is using the Cisco DNA Center REST API to retrieve a list of network devices. The API call returns HTTP status code 200. What does this indicate?

Accepted Answer

The request was successful and data is returned.. HTTP status code 200 indicates a successful GET request where the server has processed the request and is returning the requested data in the response body. In the context of the Cisco DNA Center REST API, a 200 response to a GET /network-device call means the list of network devices was successfully retrieved and is included in the response payload.

Answer

The request succeeded but no content is returned.

Answer

The request was created successfully.

Answer

The request failed due to a client error.

Question 14

A Kubernetes environment has multiple teams sharing the same cluster. One team wants to deploy applications without interfering with other teams' resources. Which Kubernetes resource should be used to isolate the team's resources?

Accepted Answer

Namespace. A Kubernetes Namespace provides a logical isolation boundary within a cluster, allowing multiple teams to share the same cluster while keeping their resources (pods, services, etc.) separate. It is the standard resource for multi-tenancy isolation. The other options serve different purposes.

Answer

ServiceAccount

Answer

NodePort

Answer

ConfigMap

Question 15

Which TWO of the following protocols use UDP as the transport layer protocol? (Choose two.)

Accepted Answer

DNS. DNS (A) is correct because standard DNS queries and responses use UDP on port 53, since the small request/response exchange benefits from UDP's low overhead and the application handles retransmission itself. DHCP (C) is correct because DHCP operates over UDP, using ports 67 (server) and 68 (client) for its broadcast-based DORA (Discover, Offer, Request, Acknowledge) message exchange. HTTP (B) is not correct because HTTP uses TCP, typically on port 80 or 443, to guarantee ordered and reliable delivery of web content. SMTP (D) is not correct because SMTP uses TCP on port 25 (or 587/465) to reliably transfer mail between servers. SSH (E) is not correct because SSH uses TCP on port 22 to provide a reliable, encrypted interactive session.

Answer

HTTP

Answer

SMTP

Answer

SSH