200-901 Practice Test 7 — 10 Questions

Question 1

A network administrator configures a switch port to belong to VLAN 10. Which OSI layer is primarily involved in VLAN tagging?

Accepted Answer

Layer 2 (Data Link). VLANs operate at Layer 2 (Data Link) by adding tags to Ethernet frames.

Answer

Layer 1 (Physical)

Answer

Layer 3 (Network)

Answer

Layer 4 (Transport)

Question 2

Which OSI layer is responsible for routing packets across different networks?

Accepted Answer

Layer 3 (Network). The Network layer (Layer 3) is responsible for logical addressing and routing packets between different networks. Protocols like IP (IPv4/IPv6) use routing tables and algorithms (e.g., OSPF, BGP) to determine the best path for forwarding packets across multiple hops. Without Layer 3, traffic could not leave a local broadcast domain.

Answer

Layer 1 (Physical)

Answer

Layer 4 (Transport)

Answer

Layer 2 (Data Link)

Question 3

Which Python exception would be raised by the following code?

my_dict = {'a': 1}
value = my_dict['b']

Accepted Answer

KeyError. Accessing a dictionary key that does not exist raises a KeyError in Python. In the code, my_dict['b'] attempts to retrieve the value for key 'b', which is not present in the dictionary {'a': 1}, so Python raises KeyError.

Answer

ValueError

Answer

IndexError

Answer

AttributeError

Question 4

An application uses the Meraki Dashboard API and receives a 429 Too Many Requests error. What is the most likely cause, and how should the application adjust?

Accepted Answer

The application exceeded the rate limit of 5 calls per second; implement exponential backoff.. Meraki API rate limits at 5 calls per second; a 429 indicates rate limit exceeded. The application should implement retry with backoff.

Answer

The request body is malformed; check JSON syntax.

Answer

The API key is invalid; regenerate the key.

Answer

The network is down; check connectivity.

Question 5

A network engineer is troubleshooting a connectivity issue between two hosts in different VLANs on the same switch. The hosts are in VLAN 10 and VLAN 20, respectively. The switch has an SVI for each VLAN and IP routing is enabled. Which command should be used to verify that the switch is forwarding traffic between the VLANs?

Accepted Answer

show ip route. 'show ip route' displays the switch's routing table, which contains the directly connected subnets for VLAN 10 and VLAN 20 (via their SVIs) and any learned routes. Since IP routing is enabled, the switch uses this table to make forwarding decisions between VLANs. Verifying that both VLAN subnets appear in the routing table confirms that the switch can route traffic between them.

Answer

show interfaces trunk

Answer

show vlan

Answer

show mac address-table

Question 6

Which THREE are valid methods for managing Kubernetes application configuration?

Accepted Answer

Helm values.. Helm values (A) are correct because Helm is a package manager for Kubernetes that uses values.yaml files to inject configuration into templates at deployment time, enabling dynamic, environment-specific application configuration without modifying the underlying chart. This is a standard method for managing Kubernetes application configuration in production workflows.

Answer

Operator custom resources.

Answer

Environment variables in the Dockerfile.

Question 7

A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?

Accepted Answer

Use Ansible Vault. Ansible Vault is the recommended security practice for encrypting sensitive data like SSH credentials. It allows you to store encrypted variables and files within your playbooks or inventory, protecting secrets at rest while enabling decryption at runtime via a password or key file. This avoids exposing credentials in plain text, which is critical for centralized automation servers that may be accessed by multiple users or integrated into CI/CD pipelines.

Answer

Store credentials in a public repository

Answer

Hardcode credentials in playbooks

Answer

Use plain text inventory files

Question 8

Which authentication method is used by the Cisco Meraki Dashboard API?

Accepted Answer

API key in the X-Cisco-Meraki-API-Key header. Meraki Dashboard API uses an API key passed in the X-Cisco-Meraki-API-Key header.

Answer

JWT token in the Authorization header

Answer

OAuth 2.0 token in the Authorization header

Answer

HTTP Basic authentication with username and password

Question 9

Which of the following is a private IPv4 address range as defined by RFC 1918?

Accepted Answer

10.0.0.0/8. (10.0.0.0/8) is correct because RFC 1918 reserves this range, along with 172.16.0.0/12 and 192.168.0.0/16, for private IPv4 addressing. These addresses are not routable on the public internet and are intended for use within private networks, such as corporate LANs or home networks.

Answer

169.254.0.0/16

Answer

192.167.0.0/16

Answer

172.32.0.0/16

Question 10

A network administrator is using Cisco DNA Center APIs to automate network changes. Which two API categories are used to perform configuration deployments? (Choose two.)

Accepted Answer

Platform. DNAC API categories: 'Change your network' includes template deployment and PnP; 'Platform' includes task management for monitoring deployment status.

Answer

Know your network

Answer

Run your network

Answer

Event notifications