200-901 Cisco Platforms and Development Practice Test 3 — 15 Questions

Question 1

A developer is building a Webex Teams bot that monitors network alerts from Cisco DNA Assurance. The bot must authenticate to the Webex API. Which authentication method should be used?

Accepted Answer

OAuth2 client credentials grant with bot token. Webex Teams bots require OAuth2 client credentials grant to obtain a bot token, which is a long-lived, scoped token that authenticates the bot without user interaction. This method is designed for server-to-server communication, matching the bot's need to post messages and listen for events via the Webex API. Basic authentication, session cookies, and API keys are not supported or appropriate for bot authentication in Webex.

Answer

Basic authentication with username/password

Answer

Session ID cookie

Answer

API key in query string

Question 2

A developer uses Cisco Intersight API to manage UCS servers. Which authentication method is required for Intersight API calls?

Accepted Answer

API key with HMAC signature. Cisco Intersight API requires API key authentication with HMAC (Hash-Based Message Authentication Code) signing for all REST API calls. The developer generates an API key pair (private and public) in the Intersight GUI, then uses the private key to create an HMAC-SHA256 signature over the request headers and payload. This signature is included in the Authorization header, ensuring request integrity and non-repudiation without transmitting the secret key over the network.

Answer

OAuth2 token from Webex

Answer

Session cookie

Answer

Basic authentication with username/password

Question 3

A developer needs to retrieve interface configuration from a Cisco IOS XE device using NETCONF. Which operation should be used?

Accepted Answer

with filter. To retrieve interface configuration from a Cisco IOS XE device using NETCONF, the operation with a filter is the correct choice. retrieves the running configuration datastore, and the filter (typically an XML subtree filter) narrows the response to only the interface subtree, avoiding unnecessary data. This is the standard NETCONF operation for reading configuration data, as defined in RFC 6241.

Answer

<get> with filter

Answer

<delete-config>

Answer

<edit-config>

Question 4

A script using the Meraki Python library fails with an error 'Rate limit exceeded'. The developer needs to handle this. Which approach is correct?

Accepted Answer

Increase the sleep interval between requests and implement exponential backoff.. Option A is correct because the Meraki API enforces rate limits per organization and per API key. When a 'Rate limit exceeded' error occurs, the proper response is to implement exponential backoff with increased sleep intervals between requests. This approach respects the API's retry-after headers and prevents further throttling, aligning with REST API best practices for handling 429 status codes.

Answer

Reduce the number of API calls by caching responses.

Answer

Use a different API endpoint to avoid the limit.

Answer

Request a higher rate limit from Meraki support.

Question 5

Refer to the exhibit. Which statement correctly describes this subscription configuration?

Accepted Answer

It subscribes to YANG-push notifications for interface state data.. Option A is correct because the subscription configuration uses YANG-push notifications to stream interface state data. The presence of a subscription ID, a YANG-push filter (e.g., 'ietf-interfaces:interfaces-state'), and a destination group (e.g., '10.1.1.1:2000') indicates that the device is configured to push telemetry data for interface operational state changes to a receiver using the YANG-push model, which is a standard mechanism for streaming data from network devices.

Answer

It pushes interface operational status changes to a receiver using UDP.

Answer

It uses XML encoding for the telemetry data.

Answer

The receiver is configured to listen on port 2000 using TCP.

Question 6

Refer to the exhibit. Which key-value pair indicates whether this Meraki MR is currently connected to the cloud?

Accepted Answer

"status": "online". The 'status' key with the value 'online' directly indicates that the Meraki MR access point is currently connected to the Meraki cloud. In the Meraki dashboard API response, the 'status' field reflects the device's cloud connectivity state, where 'online' means the device has an active connection to the Meraki cloud controller.

Answer

"serial": "Q2XX-XXXX-XXXX"

Answer

"lanIp": "192.168.1.100"

Answer

"model": "MR42"

Question 7

Refer to the exhibit. A developer receives this response from Cisco DNA Center API. What is the most likely cause and solution?

Accepted Answer

The token is expired; generate a new one using /dna/system/api/v1/auth/token.. The HTTP 401 Unauthorized response indicates that the request lacks valid authentication credentials. In Cisco DNA Center API, tokens are short-lived (default 1 hour) and must be refreshed via POST /dna/system/api/v1/auth/token. The error is not about the endpoint, body syntax, or RBAC permissions — it specifically means the token used is expired or invalid.

Answer

The API path is incorrect; verify the endpoint URL.

Answer

The request body is malformed; check JSON syntax.

Answer

The user does not have permission; request admin to grant access.

Question 8

A network developer wants to quickly prototype an application that interacts with a Cisco Catalyst 9000 switch using REST APIs. What is the most appropriate resource to use?

Accepted Answer

Cisco DevNet Sandbox. Cisco DevNet Sandbox provides free, cloud-hosted lab environments with pre-configured Cisco Catalyst 9000 switches that expose REST APIs (e.g., RESTCONF over HTTPS). This allows a developer to quickly prototype and test applications without needing physical hardware or complex setup, making it the most appropriate resource for rapid prototyping.

Answer

Cisco DNA Center

Answer

Cisco Unified Communications Manager

Answer

Cisco Prime Infrastructure

Question 9

A developer writes a Python script using ncclient to retrieve the running configuration from a Cisco IOS XE device. The script fails with an XML parsing error. What is the most likely cause?

Accepted Answer

The script is not filtering the output correctly and receives multiple root elements. The most likely cause is that the script does not filter the NETCONF reply to a specific subtree, so the device returns multiple top-level XML elements (e.g., both and ). An XML parser expects a single root element, and receiving multiple roots triggers a parsing error. ncclient's `get_config` with no filter can return the entire configuration as separate elements, violating XML well-formedness.

Answer

The device does not support NETCONF

Answer

The ncclient library version is too old

Answer

The username and password are incorrect

Question 10

A company uses Cisco NSO to manage multiple network devices. They want to ensure that before deploying a configuration change, all devices are in sync with NSO's CDB. Which approach is the best practice?

Accepted Answer

Configure NSO to automatically sync devices when changes are detected. Option A is correct because NSO's automatic sync capability (via the 'devices sync' or 'sync-from' action triggered by device changes) ensures that the Configuration Database (CDB) remains the authoritative source of truth without manual intervention. This best practice eliminates the risk of deploying a change to devices that are out of sync, which could cause configuration drift or operational failures. NSO's NETCONF-based synchronization allows it to detect and reconcile differences between CDB and device running configurations automatically.

Answer

Run 'devices sync-from' on all devices before each deployment

Answer

Schedule a periodic sync every hour

Answer

Use the 'check-sync' action and only deploy if all devices are in sync

Question 11

A developer wants to send a message to a specific Webex Teams room using the REST API. Which HTTP method and endpoint should be used?

Accepted Answer

POST /messages. The correct endpoint to send a message to a specific Webex Teams room is POST /messages, because the Webex REST API uses a single messages resource for creating new messages. The room ID is included in the request body as a JSON parameter, not in the URL path. This design follows RESTful conventions where POST is used to create a resource, and the /messages endpoint accepts the roomId field to target the desired space.

Answer

POST /rooms/{roomId}/messages

Answer

PUT /messages

Answer

GET /rooms/{roomId}/messages

Question 12

When making API calls to Cisco DNA Center, a developer receives a 401 Unauthorized error. The token was obtained using the token API endpoint. What is the most likely reason?

Accepted Answer

The token has expired. A 401 Unauthorized error when using a token obtained from the token API endpoint most commonly indicates that the token has expired. Cisco DNA Center tokens have a configurable Time-To-Live (TTL), typically defaulting to 1 hour, after which the token becomes invalid and must be refreshed via the /dna/system/api/v1/auth/token endpoint.

Answer

The request body contains invalid JSON

Answer

The API base URL is incorrect

Answer

The HTTP header for Accept is missing

Question 13

A team is building a CI/CD pipeline for network automation. They want to use Cisco Modeling Labs (CML) to validate configuration changes before production. What is the best approach to integrate CML into the pipeline?

Accepted Answer

Use CML's REST API to start a simulation, apply changes, run tests, then tear down. D is correct because CML provides a REST API that allows programmatic lifecycle management of simulations. Integrating this API into a CI/CD pipeline enables the pipeline to dynamically create an isolated test environment, apply configuration changes, run validation tests, and then tear down the simulation to free resources. This approach ensures repeatability, isolation, and efficient resource usage, which are critical for automated network validation.

Answer

Use the pyATS framework to connect to CML and run tests

Answer

Create a permanent topology in CML for each branch

Answer

Use Ansible to provision CML nodes directly

Question 14

A developer needs to retrieve a list of all networks in a Meraki organization using the Dashboard API. Which API call should be made?

Accepted Answer

GET /organizations/{organizationId}/networks. The correct API call to retrieve a list of all networks in a Meraki organization is GET /organizations/{organizationId}/networks. This endpoint returns an array of network objects associated with the specified organization, as documented in the Meraki Dashboard API. The path includes the organization ID to scope the request, and the response contains details such as network name, ID, and product types.

Answer

GET /organizations/{organizationId}/networks

Answer

GET /networks

Answer

GET /organizations/{organizationId}/networks/{networkId}

Question 15

An Ansible playbook using the ios_config module fails with the error 'unable to open connection'. The network device is reachable via SSH from the Ansible control node. What is the most likely cause?

Accepted Answer

The SSH key exchange algorithm is not supported by the device. The error 'unable to open connection' indicates that Ansible cannot establish an SSH session with the device, even though the device is reachable. Since the device is reachable via SSH from the control node, the most likely cause is a mismatch in SSH key exchange algorithms, where the device only supports older algorithms (e.g., diffie-hellman-group1-sha1) that are not enabled by default in modern SSH clients. This is a common issue when connecting to legacy Cisco IOS devices that lack updated SSH configurations.

Answer

The device has an invalid username and password

Answer

The Ansible user does not have privilege level 15 on the device

Answer

The ios_config module requires NETCONF instead of SSH