200-901 Practice Questions 2 — 50 Questions

Question 1

Drag and drop the steps to configure OSPF on a Cisco router into the correct order.

Accepted Answer

1. Enable OSPF routing process (router ospf [process-id]). 2. Configure Router ID (router-id [id]). 3. Advertise networks (network [network] [wildcard] area [area]).. OSPF configuration requires enabling the OSPF process, setting a router ID, and advertising networks in specific areas.

Answer

1. Configure Router ID (router-id [id]). 2. Enable OSPF routing process (router ospf [process-id]). 3. Advertise networks (network [network] [wildcard] area [area]).

Answer

1. Enable OSPF routing process (router ospf [process-id]). 2. Advertise networks (network [network] [wildcard] area [area]). 3. Configure Router ID (router-id [id]).

Answer

1. Advertise networks (network [network] [wildcard] area [area]). 2. Enable OSPF routing process (router ospf [process-id]). 3. Configure Router ID (router-id [id]).

Question 2

A developer is using the Meraki Dashboard API to list all organizations. Which TWO of the following are true regarding pagination in the Meraki API? (Choose TWO.)

Accepted Answer

The Link header contains URLs for the next and previous pages.. Meraki API pagination uses Link header or startingAfter/endingBefore query parameters.

Answer

Page size is fixed at 1000 items per page.

Answer

Pagination is optional and disabled by default.

Answer

Pagination requires the use of OAuth tokens.

Question 3

An HTTP/2 connection uses multiple concurrent streams over a single TCP connection. Which feature of HTTP/2 enables this?

Accepted Answer

Multiplexing. Multiplexing is the HTTP/2 feature that allows multiple concurrent streams to share a single TCP connection. This eliminates head-of-line blocking at the application layer by enabling the interleaving of frames from different streams, so a slow response on one stream does not block others.

Answer

Binary framing layer

Answer

Server push

Answer

Header compression (HPACK)

Question 4

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

Accepted Answer

RESTCONF. RESTCONF is the correct choice because it is a stateless protocol that uses standard HTTP methods (GET, POST, PUT, PATCH, DELETE) to manipulate YANG-defined data stores on a Cisco IOS-XE device. Unlike NETCONF, which is stateful and session-oriented, RESTCONF operates over HTTP without maintaining session state, making it ideal for lightweight, RESTful automation.

Answer

NETCONF

Answer

SNMP

Answer

CLI

Question 5

A Cisco Catalyst Center API uses OAuth 2.0 with the client credentials grant for server-to-server communication. Which token endpoint parameter should the client include to identify itself?

Accepted Answer

grant_type=client_credentials. In client credentials, the client sends client_id and client_secret (often as Basic auth or form parameters) to authenticate.

Answer

scope=admin

Answer

response_type=token

Answer

grant_type=authorization_code

Question 6

When using Cisco Intersight API to manage UCS servers, a script must invoke an API that triggers a firmware upgrade. Which HTTP method and endpoint pattern should be used?

Accepted Answer

POST to /api/v1/upgrade. Triggering a firmware upgrade in Cisco Intersight requires creating a new operation, which aligns with the POST HTTP method. The endpoint /api/v1/upgrade is a typical RESTful pattern for initiating an upgrade action, as POST is used to submit data to a resource to create or trigger a process. In Intersight's API, firmware upgrades are managed via POST requests to specific endpoints like /api/v1/upgrade, not through retrieval, modification, or deletion of existing resources.

Answer

PUT to /api/v1/version

Answer

DELETE to /api/v1/firmware

Answer

GET to /api/v1/status

Question 7

An EEM applet is triggered when a specific syslog message pattern appears. Which action should be used to send a custom syslog message?

Accepted Answer

action 1.0 syslog msg "Custom event occurred". EEM applets use 'action syslog msg ' to generate a syslog message.

Answer

action 1.0 cli command "show logging"

Answer

action 1.0 info type routername

Answer

action 1.0 set 1.0 _syslog_msg "Custom event"

Question 8

An organization uses Cisco DNA Center and wants to programmatically deploy a configuration template to multiple devices. Which API category should be used?

Accepted Answer

Change your network. The 'change your network' category includes template deployment, plug and play, etc.

Answer

Platform

Answer

Run your network

Answer

Know your network

Question 9

A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?

Accepted Answer

Southbound interface. NETCONF is a network management protocol used to install, manipulate, and delete the configuration of network devices. In the SDN architecture, the southbound interface is the layer that connects the control plane to the data plane, and NETCONF operates as a southbound protocol by carrying configuration data from a controller or management system down to network devices.

Answer

Northbound interface

Answer

Application layer

Answer

Control layer

Question 10

Refer to the exhibit. A developer from subnet 10.10.10.0/24 cannot reach the RESTCONF API on the IOS-XE device. What is the most likely cause?

Accepted Answer

The 10.10.10.0/24 subnet is not permitted by the access-class.. The access-class configured under the RESTCONF API restricts incoming connections to specific subnets. Since the developer is on subnet 10.10.10.0/24, which is not listed in the permit statement, all HTTPS requests from that subnet are dropped before reaching the API. This is the most direct cause of the connectivity failure.

Answer

HTTPS is not enabled on the device.

Answer

The HTTP server is not enabled.

Answer

Authentication is not configured as local.

Question 11

A network administrator configures a switch port to belong to VLAN 10. Which OSI layer is primarily involved in VLAN tagging?

Accepted Answer

Layer 2 (Data Link). VLANs operate at Layer 2 (Data Link) by adding tags to Ethernet frames.

Answer

Layer 1 (Physical)

Answer

Layer 3 (Network)

Answer

Layer 4 (Transport)

Question 12

Which OSI layer is responsible for routing packets across different networks?

Accepted Answer

Layer 3 (Network). The Network layer (Layer 3) is responsible for logical addressing and routing packets between different networks. Protocols like IP (IPv4/IPv6) use routing tables and algorithms (e.g., OSPF, BGP) to determine the best path for forwarding packets across multiple hops. Without Layer 3, traffic could not leave a local broadcast domain.

Answer

Layer 1 (Physical)

Answer

Layer 4 (Transport)

Answer

Layer 2 (Data Link)

Question 13

Which Python exception would be raised by the following code?

my_dict = {'a': 1}
value = my_dict['b']

Accepted Answer

KeyError. Accessing a dictionary key that does not exist raises a KeyError in Python. In the code, my_dict['b'] attempts to retrieve the value for key 'b', which is not present in the dictionary {'a': 1}, so Python raises KeyError.

Answer

ValueError

Answer

IndexError

Answer

AttributeError

Question 14

An application uses the Meraki Dashboard API and receives a 429 Too Many Requests error. What is the most likely cause, and how should the application adjust?

Accepted Answer

The application exceeded the rate limit of 5 calls per second; implement exponential backoff.. Meraki API rate limits at 5 calls per second; a 429 indicates rate limit exceeded. The application should implement retry with backoff.

Answer

The request body is malformed; check JSON syntax.

Answer

The API key is invalid; regenerate the key.

Answer

The network is down; check connectivity.

Question 15

A network engineer is troubleshooting a connectivity issue between two hosts in different VLANs on the same switch. The hosts are in VLAN 10 and VLAN 20, respectively. The switch has an SVI for each VLAN and IP routing is enabled. Which command should be used to verify that the switch is forwarding traffic between the VLANs?

Accepted Answer

show ip route. 'show ip route' displays the switch's routing table, which contains the directly connected subnets for VLAN 10 and VLAN 20 (via their SVIs) and any learned routes. Since IP routing is enabled, the switch uses this table to make forwarding decisions between VLANs. Verifying that both VLAN subnets appear in the routing table confirms that the switch can route traffic between them.

Answer

show interfaces trunk

Answer

show vlan

Answer

show mac address-table

Question 16

Which THREE are valid methods for managing Kubernetes application configuration?

Accepted Answer

Helm values.. Helm values (A) are correct because Helm is a package manager for Kubernetes that uses values.yaml files to inject configuration into templates at deployment time, enabling dynamic, environment-specific application configuration without modifying the underlying chart. This is a standard method for managing Kubernetes application configuration in production workflows.

Answer

Operator custom resources.

Answer

Environment variables in the Dockerfile.

Question 17

A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?

Accepted Answer

Use Ansible Vault. Ansible Vault is the recommended security practice for encrypting sensitive data like SSH credentials. It allows you to store encrypted variables and files within your playbooks or inventory, protecting secrets at rest while enabling decryption at runtime via a password or key file. This avoids exposing credentials in plain text, which is critical for centralized automation servers that may be accessed by multiple users or integrated into CI/CD pipelines.

Answer

Store credentials in a public repository

Answer

Hardcode credentials in playbooks

Answer

Use plain text inventory files

Question 18

Which authentication method is used by the Cisco Meraki Dashboard API?

Accepted Answer

API key in the X-Cisco-Meraki-API-Key header. Meraki Dashboard API uses an API key passed in the X-Cisco-Meraki-API-Key header.

Answer

JWT token in the Authorization header

Answer

OAuth 2.0 token in the Authorization header

Answer

HTTP Basic authentication with username and password

Question 19

Which of the following is a private IPv4 address range as defined by RFC 1918?

Accepted Answer

10.0.0.0/8. (10.0.0.0/8) is correct because RFC 1918 reserves this range, along with 172.16.0.0/12 and 192.168.0.0/16, for private IPv4 addressing. These addresses are not routable on the public internet and are intended for use within private networks, such as corporate LANs or home networks.

Answer

169.254.0.0/16

Answer

192.167.0.0/16

Answer

172.32.0.0/16

Question 20

A network administrator is using Cisco DNA Center APIs to automate network changes. Which two API categories are used to perform configuration deployments? (Choose two.)

Accepted Answer

Platform. DNAC API categories: 'Change your network' includes template deployment and PnP; 'Platform' includes task management for monitoring deployment status.

Answer

Know your network

Answer

Run your network

Answer

Event notifications