200-901 Practice Test 9 — 10 Questions

Question 1

A DevOps engineer is automating network device configuration using Ansible. The playbook must retrieve the MAC address table from a Cisco switch. Which protocol should the engineer use to fetch this data?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SNMP. E is correct because SNMP (Simple Network Management Protocol) is specifically designed for reading operational data like MAC address tables from network devices. The engineer can use SNMP GET requests to query the dot1dTpFdbTable (RFC 1493) or the BRIDGE-MIB to retrieve MAC address entries from a Cisco switch efficiently without requiring CLI parsing or web interfaces.

Answer

SSH with CLI scraping

Answer

HTTPS with Web UI

Answer

REST API

Answer

NETCONF

Question 2

A network engineer needs to create a new subnet that can support at least 50 usable host addresses for a development environment. Which TWO subnet masks would meet this requirement? (Choose two.)

Accepted Answer

255.255.255.128 (/25). (255.255.255.128 /25) provides 126 usable host addresses (2^(32-25) - 2 = 126), which exceeds the requirement of 50. Option C (255.255.255.192 /26) provides 62 usable host addresses (2^(32-26) - 2 = 62), also meeting the requirement. Both masks are valid because they yield at least 50 usable IPs for the development subnet.

Answer

255.255.255.224 (/27)

Answer

255.255.255.248 (/29)

Answer

255.255.255.240 (/28)

Question 3

An organization uses Cisco DNA Center and wants to use its Intent API to retrieve the health score of all wireless clients. Which API endpoint and method should be used?

Accepted Answer

GET /dna/intent/api/v1/client-health. The Intent API for retrieving client health scores uses the GET HTTP method on the `/dna/intent/api/v1/client-health` endpoint. This endpoint returns the aggregated health data for all wireless clients, aligning with the read-only nature of the operation and the Intent API's resource-oriented design.

Answer

PUT /dna/intent/api/v1/client-health

Answer

GET /api/v1/health

Answer

POST /dna/intent/api/v1/client-detail

Question 4

A Python script needs to iterate over a dictionary of network interfaces and print each interface name and its IP address. The dictionary is structured as: {'GigabitEthernet1/0/1': '10.1.1.1', 'GigabitEthernet1/0/2': None}. Which THREE code snippets correctly iterate and print the key-value pairs, skipping entries with None? (Choose three.)

Accepted Answer

for iface, ip in interfaces.items():
    if ip != None:
        print(f'{iface}: {ip}'). Options A, B, and D correctly iterate over the dictionary, skip entries where the IP is None, and print the key-value pairs. Option E uses truthiness to skip None, but that would also skip other falsy values like an empty string, and the print with commas adds spaces around the colon, making the output format inconsistent. Option C does not skip None and prints the value as the string 'None'.

Answer

for iface in interfaces.keys():
    print(iface + ': ' + interfaces.get(iface))

Answer

for iface in interfaces:
    if interfaces[iface]:
        print(iface, ':', interfaces[iface])

Question 5

A CI/CD pipeline for a microservice application includes stages: code commit, build Docker image, push to registry, deploy to staging, run integration tests, and deploy to production. The team wants to ensure that if integration tests fail, the pipeline stops and does not proceed to production. Which CI/CD concept is used to enforce this behavior?

Accepted Answer

Stage gates. Stage gates are conditional checkpoints in a CI/CD pipeline that evaluate predefined criteria before allowing the pipeline to proceed to the next stage. In this scenario, the integration test stage acts as a gate: if the tests fail, the gate blocks the pipeline from advancing to the production deployment stage, ensuring only validated code reaches production.

Answer

Rolling update

Answer

Container orchestration

Answer

Artifact management

Question 6

Given the Python list comprehension: result = [x*2 for x in range(10) if x > 5]
What is the value of result?

Accepted Answer

[12, 14, 16, 18]. The list comprehension `[x*2 for x in range(10) if x > 5]` iterates over `x` from 0 to 9, filters to only include `x` values greater than 5 (i.e., 6, 7, 8, 9), and multiplies each by 2, producing `[12, 14, 16, 18]`. This is a standard Python comprehension with a conditional filter.

Answer

[0, 2, 4, 6, 8, 10, 12, 14, 16, 18]

Answer

[10, 12, 14, 16, 18]

Answer

[6, 7, 8, 9]

Question 7

Which THREE are valid reasons to use Cisco DNA Center's Assurance APIs in an enterprise network?

Accepted Answer

Proactively detect client connectivity issues.. Cisco DNA Center's Assurance APIs provide proactive monitoring and analytics that can detect client connectivity issues before they impact users, leveraging telemetry data from network devices to identify problems like authentication failures, DHCP timeouts, or signal degradation.

Answer

Automatically enforce QoS policies on switches.

Answer

Collect NetFlow data from all network devices.

Question 8

Which TWO of the following are characteristics of TLS (Transport Layer Security) used in HTTPS? (Choose two.)

Accepted Answer

It uses asymmetric encryption to exchange a symmetric session key.. TLS provides encryption and uses certificates for authentication. HTTP/2 is an application layer protocol, not a TLS feature. Port 443 is the default for HTTPS, but TLS itself does not define the port. TLS uses symmetric encryption for session keys.

Answer

It supports multiplexing of multiple streams.

Answer

It is an application layer protocol like HTTP.

Answer

It uses port 443 by default.

Question 9

A Kubernetes pod needs to read configuration data such as database hostname, which is non-sensitive and may change across environments. Which resource should be used to store this data and inject it into the pod?

Accepted Answer

ConfigMap. ConfigMap stores non-sensitive configuration data. Secret stores sensitive data. Deployment and Service are for workload and networking.

Answer

Deployment

Answer

Secret

Answer

Service

Question 10

Which TCP flag is set in the second step of the three-way handshake?

Accepted Answer

SYN and ACK. The TCP three-way handshake begins with the client sending a SYN segment to initiate a connection. In the second step, the server responds with a SYN-ACK segment, which both acknowledges the client's SYN (using the ACK flag) and synchronizes its own sequence number (using the SYN flag). This combined flag is essential for establishing a reliable, bidirectional connection.

Answer

ACK

Answer

SYN

Answer

FIN