200-901 Practice Exam 64 — 20 Questions

Question 1

Using the Cisco DNA Center API, an engineer wants to create a new site with building and floor information. Which HTTP method and endpoint should be used?

Accepted Answer

POST /dna/intent/api/v1/site. The POST HTTP method is used to create a new resource on the server, and the Cisco DNA Center API endpoint `/dna/intent/api/v1/site` is designed to accept a POST request with a JSON payload containing site, building, and floor details. This follows RESTful conventions where POST is the standard method for resource creation, and the API documentation specifies this exact endpoint for adding a new site hierarchy.

Answer

PUT /dna/intent/api/v1/site

Answer

GET /dna/intent/api/v1/site

Answer

POST /dna/intent/api/v1/site/create

Question 2

An administrator is using the Cisco Intersight API to manage server profiles. The API returns the following error: '{"error": "Forbidden", "message": "Insufficient privileges"}'. What is the most likely cause?

Accepted Answer

The OAuth2 token has insufficient scopes.. The error 'Forbidden' with message 'Insufficient privileges' directly indicates that the authenticated user or API client does not have the required permissions to perform the requested operation. In Cisco Intersight, access control is managed via OAuth2 scopes assigned to API keys; if the token lacks the specific scope (e.g., 'server-profile-write') needed for the API call, the server returns this 403 Forbidden error. Option C correctly identifies that the OAuth2 token has insufficient scopes.

Answer

The server profile ID is incorrect.

Answer

The request body is malformed.

Answer

The API key has expired.

Question 3

A network automation script uses the requests library to retrieve device information from a REST API. The API requires authentication via a bearer token. Which code example correctly sets the Authorization header?

Accepted Answer

headers = {'Authorization': 'Bearer ' + token}
response = requests.get(url, headers=headers). It constructs the Authorization header using the 'Bearer' scheme, which is the standard method for passing OAuth 2.0 bearer tokens in HTTP requests. The requests library requires the header to be explicitly set as a dictionary, and the token must be prefixed with 'Bearer ' to comply with RFC 6750.

Answer

headers = {'Authorization': 'Token ' + token}
response = requests.get(url, headers=headers)

Answer

response = requests.get(url, headers={'Authorization': token})

Answer

response = requests.get(url, auth=('Bearer', token))

Question 4

In a CI/CD pipeline using Jenkins, which plugin is commonly used to integrate with Cisco Container Platform for deploying containers?

Accepted Answer

Cisco Container Platform Plugin. The Cisco Container Platform Plugin is the correct choice because it provides native integration between Jenkins and Cisco Container Platform (CCP), enabling automated deployment of containers directly to CCP clusters. This plugin handles authentication, cluster discovery, and deployment orchestration specific to CCP, which is built on Kubernetes but includes Cisco-specific extensions for policy and networking.

Answer

Docker Pipeline Plugin

Answer

Kubernetes CLI Plugin

Answer

SSH Plugin

Question 5

A developer is building an application that interacts with the Webex API to create rooms and send messages. The application needs to receive real-time notifications when a new message is posted in any room. Which TWO actions should the developer take? (Choose two.)

Accepted Answer

Provide a target URL where the webhook sends the notification. To receive real-time notifications, a webhook must be registered for the 'message.created' event. The webhook will POST to a specified URL when a message is created.

Answer

Poll the GET /v1/messages endpoint every second

Answer

Use the 'roomId' parameter to filter messages

Answer

Send a POST request to /v1/webhooks with 'resource: messages' and 'event: seen'

Question 6

A network team is implementing automation to provision new switchports across a campus network. They decide to use a controller-based approach with Cisco DNA Center. What is the primary advantage of using DNA Center for this task?

Accepted Answer

It allows intent-based automation where the desired state is defined and the controller pushes the necessary configuration.. Cisco DNA Center uses an intent-based networking model where the administrator defines the desired state (e.g., 'provision a switchport for access VLAN 10') and the controller automatically translates that intent into the necessary device configurations (CLI or NETCONF/YANG). This abstraction reduces manual errors and enforces consistency across the campus network without requiring per-device CLI scripting.

Answer

It automatically rolls back any configuration that deviates from the standard.

Answer

It replaces all existing CLI commands with a graphical interface.

Answer

It eliminates the need for any human intervention in network management.

Question 7

A network automation engineer is writing a Python script to configure multiple devices. Which library is most appropriate for SSH-based interactions?

Accepted Answer

Netmiko. Netmiko is a Python library built on top of Paramiko that simplifies SSH connections to network devices. It provides high-level methods for sending commands, handling prompts, and managing device interactions, making it the most appropriate choice for automating configuration tasks across multiple devices.

Answer

requests

Answer

socket

Answer

paramiko

Question 8

A developer is using Cisco NSO to create a service. They are evaluating whether to use Python or Java for plan callbacks. Which consideration is most important?

Accepted Answer

Both are equally supported, but Python has more extensive libraries for networking. Cisco NSO supports both Python and Java for plan callbacks, and the choice between them often hinges on the developer's familiarity and the specific requirements of the service. Python is particularly favored in many networking contexts due to its extensive ecosystem of libraries (e.g., for NETCONF, RESTCONF, or SNMP), which can accelerate development. However, Java is equally supported and may be chosen for performance-critical or deeply integrated components within NSO's Java Native Interface (JNI).

Answer

Java is preferred due to better integration with NSO's internal data model

Answer

Python is the only supported language for custom service code in NSO

Answer

Python is preferred due to faster execution

Question 9

Based on the exhibit, which interface is in a state that prevents it from sending or receiving IP traffic?

Accepted Answer

GigabitEthernet0/1. Interface GigabitEthernet0/1 is in the 'administratively down' state, as indicated by the 'down' status in the 'Status' column and the 'down' in the 'Protocol' column. This means the interface has been manually disabled with the 'shutdown' command, preventing it from sending or receiving any IP traffic. In contrast, interfaces that are 'up/up' can forward traffic, while 'up/down' indicates a Layer 1 issue but still allows Layer 2 control plane traffic.

Answer

GigabitEthernet0/2

Answer

GigabitEthernet0/0

Answer

None of the interfaces are down

Question 10

Which TWO of the following are recommended practices for securing a CI/CD pipeline in a DevOps environment? (Choose two.)

Accepted Answer

Store secrets and credentials in a secure vault and inject them at runtime. Storing secrets (e.g., API keys, database passwords) in a secure vault (like HashiCorp Vault or AWS Secrets Manager) and injecting them at runtime prevents hard-coded credentials in source code or configuration files. This follows the principle of least privilege and ensures that secrets are never exposed in logs, version control, or build artifacts, which is a fundamental security practice for CI/CD pipelines.

Answer

Grant all developers write access to the production environment to enable faster fixes

Answer

Deploy code to production first, then run security tests to check for issues

Answer

Use the same API token for all pipeline stages to simplify authentication

Question 11

A developer uses the Cisco DNA Center API to retrieve device inventory. The JSON response is shown. Which Python code snippet correctly extracts the serial number?

Accepted Answer

data['response'][0]['serialNumber']. The JSON response from the Cisco DNA Center device inventory API returns a list of devices under the 'response' key, and each device is a dictionary. The serial number for the first device is accessed by indexing into the list with [0] and then retrieving the 'serialNumber' key from that dictionary.

Answer

data['serialNumber']

Answer

data['response']['serialNumber']

Answer

data[0]['serialNumber']

Question 12

Based on the routing table, what is the administrative distance of the route to 192.168.1.0/24?

Accepted Answer

120. The administrative distance (AD) for a route learned via EIGRP (internal) is 90, but for EIGRP external routes it is 170. However, the route to 192.168.1.0/24 in the routing table shows an AD of 120, which is the default AD for RIP (Routing Information Protocol). Since the question states the AD is 120, the correct answer is C.

Answer

10

Answer

0

Answer

1

Question 13

Which THREE of the following are valid methods to automatically assign IP addresses to network hosts?

Accepted Answer

SLAAC. SLAAC (Stateless Address Autoconfiguration) is a valid method for automatically assigning IPv6 addresses to network hosts. It uses ICMPv6 Router Advertisement (RA) messages to provide a prefix, and the host generates its own interface identifier (often based on EUI-64 or privacy extensions) to form a complete IPv6 address without a central server.

Answer

Static assignment

Answer

DNS

Question 14

Which TWO of the following are common causes of VLAN connectivity issues?

Accepted Answer

VLAN not created on all switches. VLANs must exist in the VLAN database of every switch that needs to forward traffic for that VLAN. If a VLAN is not created on a switch, interfaces assigned to that VLAN will be in an inactive or error-disabled state, and the switch will not forward frames for that VLAN across trunk links. This is a common misconfiguration when adding a new VLAN to a network without propagating it to all switches.

Answer

Mismatched subnet masks on access ports

Answer

Incorrect default gateway

Answer

STP blocking port

Question 15

Which TWO of the following are valid branching strategies in Git? (Choose two.)

Accepted Answer

Feature branching. Feature branching (C) is a valid Git branching strategy where each new feature is developed in its own branch, allowing isolated work without disrupting the main codebase. GitFlow (E) is another valid strategy that defines a strict branching model with master, develop, feature, release, and hotfix branches, commonly used for projects with scheduled releases.

Answer

Rebase-only

Answer

Merge avoidance

Answer

Direct commit to main

Question 16

An engineer uses Ansible to push a configuration change to 100 switches. The playbook fails on 5 switches. What is the most efficient way to apply the change only to those 5?

Accepted Answer

Use Ansible's --limit with the retry file. Ansible generates a retry file by default when a playbook fails on some hosts. Using `--limit @<retry-file>` re-runs the playbook only against the failed hosts, avoiding unnecessary execution on the 95 successful switches. This is the most efficient method because it targets only the problematic devices without manual intervention or full re-runs.

Answer

Use --skip-tags on successful hosts

Answer

Re-run the playbook on all switches

Answer

Manually configure the 5 switches

Question 17

Which TWO HTTP methods are considered safe according to HTTP/1.1 specification?

Accepted Answer

GET. According to RFC 7231, safe methods are those that do not modify the state of the resource on the server. GET and HEAD are both defined as safe because they are intended for retrieval only and must not have side effects. This means a client can make these requests without risk of altering server data.

Answer

PUT

Answer

DELETE

Answer

POST

Question 18

A team uses GitHub Actions for CI/CD. Their workflow includes a job that builds a Docker image and pushes it to a private registry. The job needs to authenticate to the registry using secrets stored in GitHub. Which approach is most secure for passing credentials?

Accepted Answer

Use GitHub Secrets and reference them with ${{ secrets.REGISTRY_PASSWORD }}.. GitHub Secrets allow storing sensitive data encrypted. In the workflow, secrets are accessed via ${{ secrets.REGISTRY_PASSWORD }}. This avoids hardcoding credentials.

Answer

Embed the password directly in the workflow YAML file.

Answer

Store the password in a plain text file in the repository and read it during the build.

Answer

Use environment variables set in the runner's local .env file.

Question 19

A developer is designing a REST API for managing network devices. The API should support idempotent operations for updating device configuration. Which HTTP method should be used for the update operation?

Accepted Answer

PUT. PUT is the correct HTTP method for idempotent updates because it replaces the entire resource at a given URI with the request body. Idempotency means that multiple identical PUT requests produce the same result as a single request, which is essential for safely retrying configuration updates without side effects. This aligns with RFC 7231, which defines PUT as idempotent.

Answer

DELETE

Answer

PATCH

Answer

POST

Question 20

Which tool is designed for infrastructure as code, uses a declarative language, and can automate configuration management across multiple devices?

Accepted Answer

Ansible. Ansible is the correct answer because it is an infrastructure-as-code tool that uses a declarative YAML-based language (playbooks) to define desired system states. It automates configuration management across multiple devices agentlessly, using SSH or WinRM to push configurations, making it ideal for multi-device environments.

Answer

Git

Answer

Python

Answer

Postman