200-901 Practice Exam 63 — 20 Questions

Question 1

A developer is using Cisco Webex Teams REST API. Which two authentication methods are supported for bot accounts? (Choose two.)

Accepted Answer

OAuth2 with client credentials. OAuth2 with client credentials is the standard authentication flow for server-to-server communication, allowing a bot to authenticate without user interaction. Option B is correct because a Bearer Token, typically obtained via OAuth2, is used in the Authorization header of API requests to authenticate bot accounts in Cisco Webex Teams.

Answer

JWT

Answer

Basic Auth

Answer

API Key

Question 2

A junior developer is writing a Python script to gather interface statistics from a Cisco IOS-XE device using NETCONF. They use the 'ncclient' library and successfully connect. They want to retrieve the operational status of all interfaces. Which YANG model and XPATH expression should they use to get the operational data?

Accepted Answer

Model: ietf-interfaces, XPATH: /interfaces-state/interface. The 'ietf-interfaces' YANG model defines the '/interfaces-state' container specifically for operational state data (e.g., status, counters), as per RFC 7223. The XPATH '/interfaces-state/interface' retrieves the list of all interfaces with their operational status, which is exactly what the developer needs. The 'ncclient' library can filter using this XPATH to get read-only operational data from a NETCONF-enabled Cisco IOS-XE device.

Answer

Model: cisco-native, XPATH: /native/interface

Answer

Model: ietf-interfaces, XPATH: /interfaces/interface

Answer

Model: ietf-interfaces, XPATH: /interfaces-state

Question 3

A developer is writing a Kubernetes Deployment YAML and wants to set a CPU limit of 500 millicores. Which of the following is the correct YAML snippet?

Accepted Answer

spec:
  containers:
  - resources:
      limits:
        cpu: 500m. Kubernetes resource limits are specified under the `resources.limits` key, and CPU limits are expressed in millicores using the `m` suffix. The YAML must use correct indentation: `limits:` is a child of `resources:`, and `cpu: 500m` is a valid value (500 millicores = 0.5 CPU cores).

Answer

spec:
  containers:
  - resources:
      limit:
        cpu: "500m"

Answer

spec:
  containers:
  - resources:
      requests:
        cpu: "500m"

Answer

spec:
  containers:
  - resources:
    limits:
      cpu: "500m"

Question 4

Which TWO of the following are commonly used protocols for network automation?

Accepted Answer

RESTCONF. NETCONF and RESTCONF are standardized protocols used for network automation based on YANG models. SNMP is primarily for monitoring, HTTP is a transport protocol, and SSH is used for CLI access but not as an automation protocol.

Answer

HTTP

Answer

SNMP

Answer

SSH

Question 5

A developer is deploying a containerized application using Docker Compose. Which TWO statements about Docker Compose are correct?

Accepted Answer

The docker-compose up command builds, (re)creates, starts, and attaches to containers for a service.. `docker-compose up` is the primary command that builds images if needed, (re)creates containers, starts them, and attaches to their output. This behavior is documented in the Docker Compose CLI reference and is fundamental to how Compose orchestrates multi-service deployments.

Answer

Docker Compose can only be used with swarm mode.

Answer

Services in a compose file can be scaled using the docker-compose scale command.

Answer

Docker Compose files are written in JSON format only.

Question 6

A large enterprise operates a multi-vendor network with Cisco routers and switches, as well as Juniper devices. The network team uses Ansible for automation, with a centralized control node running RHEL. They have been using the 'ios_config' module for Cisco devices and 'junos_config' for Juniper devices. Recently, they added a new Cisco Catalyst 9300 switch to the network. They wrote a playbook to configure VLAN 100 on the switch, but the task fails with the error: 'module_stderr: Could not find platform module for Cisco IOS XE'. The playbook uses the 'cisco.ios.ios_config' module. The control node has the 'cisco.ios' collection installed (version 2.0.0). The target switch runs IOS XE 16.12.3. The control node can SSH to the switch successfully. Which action will most likely resolve the issue?

Accepted Answer

Upgrade the 'cisco.ios' Ansible collection to the latest version.. The error 'Could not find platform module for Cisco IOS XE' indicates that the installed 'cisco.ios' collection (version 2.0.0) does not include a module or plugin that supports the IOS XE platform for the target switch. Upgrading the collection to the latest version ensures compatibility with IOS XE 16.12.3, as newer releases add support for newer platforms and OS versions.

Answer

Configure the switch to allow SSH connections from the control node IP.

Answer

Use the 'raw' module instead of 'ios_config' to send CLI commands directly.

Answer

Install Python 3.8 on the control node and update the ansible.cfg to use it.

Question 7

Refer to the exhibit. A developer receives this response from Cisco DNA Center API. What is the most likely cause and solution?

Accepted Answer

The token is expired; generate a new one using /dna/system/api/v1/auth/token.. The HTTP 401 Unauthorized response indicates that the request lacks valid authentication credentials. In Cisco DNA Center API, tokens are short-lived (default 1 hour) and must be refreshed via POST /dna/system/api/v1/auth/token. The error is not about the endpoint, body syntax, or RBAC permissions — it specifically means the token used is expired or invalid.

Answer

The API path is incorrect; verify the endpoint URL.

Answer

The request body is malformed; check JSON syntax.

Answer

The user does not have permission; request admin to grant access.

Question 8

A network administrator is deploying a wireless network that supports the latest security standards and high throughput. Which TWO of the following are true regarding Wi-Fi 6 (802.11ax) compared to Wi-Fi 5 (802.11ac)?

Accepted Answer

Uses OFDMA for improved efficiency. Wi-Fi 6 (802.11ax) introduces Orthogonal Frequency Division Multiple Access (OFDMA), which subdivides a channel into smaller resource units (RUs) to serve multiple clients simultaneously, significantly improving efficiency in dense environments compared to Wi-Fi 5's OFDM that allocates the entire channel to a single user per transmission.

Answer

Uses only 20 MHz channels

Answer

Maximum theoretical speed is lower than Wi-Fi 5

Answer

Operates only on the 5 GHz band

Question 9

A developer wants to send a message to a specific Webex Teams room using the REST API. Which HTTP method and endpoint should be used?

Accepted Answer

POST /messages. The correct endpoint to send a message to a specific Webex Teams room is POST /messages, because the Webex REST API uses a single messages resource for creating new messages. The room ID is included in the request body as a JSON parameter, not in the URL path. This design follows RESTful conventions where POST is used to create a resource, and the /messages endpoint accepts the roomId field to target the desired space.

Answer

POST /rooms/{roomId}/messages

Answer

PUT /messages

Answer

GET /rooms/{roomId}/messages

Question 10

A system administrator wants to use the Cisco Intersight API to collect hardware inventory from a set of UCS servers managed by Intersight. The administrator needs to retrieve the serial numbers, memory, and CPU information. The administrator has an API key with the appropriate permissions. The administrator uses a Python script with the requests library to send a GET request to https://intersight.com/api/v1/compute/PhysicalSummaries. The request returns HTTP 200 with a list of objects. However, each object only contains the 'Moid' and 'Name' fields; the serial number and hardware details are missing. What should the administrator do to get the full inventory details?

Accepted Answer

Use the 'Moid' from each summary object to send individual GET requests to /api/v1/compute/PhysicalSummaries/{Moid} for full details.. The `/api/v1/compute/PhysicalSummaries` endpoint returns a list of summary objects containing only the 'Moid' and 'Name' fields by design. To retrieve the full hardware inventory details (serial numbers, memory, CPU), the administrator must use the 'Moid' from each summary object to send individual GET requests to the specific resource endpoint `/api/v1/compute/PhysicalSummaries/{Moid}`. This is a common RESTful API pattern where list endpoints provide lightweight summaries, and full details require fetching each resource individually.

Answer

Change the endpoint to /api/v1/compute/PhysicalSummary?details=true.

Answer

Add the '?expand=*' query parameter to the request to include all fields.

Answer

Generate a new API key with broader permissions.

Question 11

Which TWO of the following are benefits of using NETCONF over SNMP for network automation? (Select exactly 2.)

Accepted Answer

Structured data models (YANG). NETCONF uses YANG (RFC 6020/7950) to define structured, hierarchical data models, enabling consistent and predictable configuration and state data retrieval. This contrasts with SNMP's flat MIB structure, which is less flexible for complex automation tasks. Option D is correct because NETCONF supports candidate configurations and confirmed commits (RFC 6241, Section 8.4), allowing transactional changes that can be validated and rolled back atomically, whereas SNMP lacks built-in transaction support.

Answer

Lower CPU usage on devices

Answer

Binary data encoding

Answer

Simple polling mechanism

Question 12

In a CI/CD pipeline using Jenkins, which stage is typically executed immediately after the build stage to ensure code quality before deployment?

Accepted Answer

Unit test. In a Jenkins CI/CD pipeline, the build stage compiles the code and produces artifacts. Immediately after the build, unit tests are executed to validate individual components in isolation, catching defects early before proceeding to integration or deployment stages. This aligns with the principle of 'shift-left' testing, where quality gates are applied as early as possible.

Answer

Deploy to production

Answer

Integration test

Answer

Artifact publication

Question 13

A script using the Meraki Python library fails with an error 'Rate limit exceeded'. The developer needs to handle this. Which approach is correct?

Accepted Answer

Increase the sleep interval between requests and implement exponential backoff.. The Meraki API enforces rate limits per organization and per API key. When a 'Rate limit exceeded' error occurs, the proper response is to implement exponential backoff with increased sleep intervals between requests. This approach respects the API's retry-after headers and prevents further throttling, aligning with REST API best practices for handling 429 status codes.

Answer

Reduce the number of API calls by caching responses.

Answer

Use a different API endpoint to avoid the limit.

Answer

Request a higher rate limit from Meraki support.

Question 14

In a CI/CD pipeline for network automation, a change is rolled back using a Git revert commit that triggers a new pipeline. The rollback playbook fails because the 'previous' configuration snapshot is missing. What should be implemented to prevent this?

Accepted Answer

Store configuration backups in a version-controlled repository before each change. Storing configuration backups in a version-controlled repository before each change ensures that a known good state is available for rollback, even if subsequent changes occur.

Answer

Use a single source of truth like NetBox

Answer

Use the 'check mode' only

Answer

Disable rollback pipelines

Question 15

Which THREE of the following are typically included in a Cisco DevNet sandbox environment? (Choose three.)

Accepted Answer

Pre-configured Cisco devices (routers, switches, or firewalls). Cisco DevNet sandboxes provide pre-configured Cisco devices (routers, switches, firewalls) to allow developers to test automation scripts and network configurations without needing physical hardware. These sandboxes are isolated environments that mirror production-like setups, enabling safe experimentation with device APIs and CLI commands.

Answer

Ability to run production application traffic

Answer

Access to production customer data for realistic testing

Question 16

A network engineer is automating the deployment of VLANs across multiple switches using Ansible. The playbook fails with an error indicating that the VLAN ID already exists on one of the switches. Which approach should the engineer use to ensure the playbook completes without errors?

Accepted Answer

Use an idempotent Ansible module that checks for existing VLANs before creating them.. Ansible's idempotent modules, such as `ios_vlan` for Cisco IOS devices, are designed to check the current state of the device before making changes. If the VLAN already exists, the module will report 'ok' and not attempt to create it again, preventing the error and ensuring the playbook completes successfully. This aligns with Ansible's best practice of writing idempotent playbooks that produce the same result regardless of how many times they are run.

Answer

Modify the playbook to skip switches where the VLAN already exists.

Answer

Remove the VLAN from all switches before creating it again.

Answer

Add ignore_errors: yes to the VLAN creation task.

Question 17

A software developer is using the Cisco Webex REST API and wants to filter messages by date range. Which two query parameters should be included? (Choose two.)

Accepted Answer

before. The Cisco Webex REST API uses the 'before' and 'after' query parameters to filter messages by date range. 'before' returns messages sent before a specified date/time, and 'after' returns messages sent after a specified date/time, allowing precise range-based filtering.

Answer

since

Answer

end

Answer

start

Question 18

A company is implementing an API gateway for its microservices. Which TWO security features should be enabled at the gateway to protect backend services?

Accepted Answer

JWT validation.. JWT validation at the API gateway ensures that only requests with valid, unexpired, and properly signed JSON Web Tokens are forwarded to backend microservices. This offloads authentication and token verification from individual services, enforcing a consistent security boundary and preventing unauthorized access.

Answer

In-depth packet inspection.

Answer

Database connection pooling.

Answer

CORS configuration.

Question 19

A developer is using Git to manage automation code. What is the primary advantage of using 'rebase' instead of 'merge' to integrate changes from a feature branch into the main branch?

Accepted Answer

Rebase results in a linear project history. `git rebase` rewrites the commit history of the feature branch to appear as if it was branched from the latest commit on the main branch, resulting in a linear, clean project history. This avoids the merge commits that `git merge` creates, making the commit log easier to follow and debug. The primary advantage is not speed or conflict resolution, but a streamlined, non-branching history.

Answer

Rebase automatically resolves all conflicts

Answer

Rebase is faster than merge

Answer

Rebase preserves the exact commit timestamps

Question 20

A company uses Ansible to automate network configuration. They have an Ansible control node that must reach all network devices. Which transport protocol does Ansible use by default to connect to Cisco IOS devices?

Accepted Answer

SSH. Ansible uses SSH as its default transport protocol to connect to Cisco IOS devices because SSH provides encrypted, secure remote access and is the standard for network device management in modern environments. Ansible's native architecture relies on SSH for agentless communication, executing modules and playbooks over this secure channel without requiring additional software on the target devices.

Answer

HTTP

Answer

Telnet

Answer

SNMP