200-901 Understanding and Using APIs Practice Test 3 — 15 Questions

Question 1

A Webex API request returns a 401 Unauthorized error. The developer has already obtained an access token. What is the most likely cause?

Accepted Answer

Invalid access token or expired token. A 401 error typically indicates an invalid or expired token, or missing Authorization header.

Answer

Resource not found

Answer

Rate limit exceeded

Answer

Server internal error

Question 2

In a Postman collection, a developer stores the base URL of a Meraki API as a variable. Which Postman feature allows this?

Accepted Answer

Environments. Environments allow defining variables like base_url that can be reused across requests.

Answer

Tests

Answer

Pre-request Scripts

Answer

Collections

Question 3

Which TWO authentication mechanisms are commonly used with Cisco REST APIs? (Choose two.)

Accepted Answer

API key. API key and OAuth 2.0 are the most common. Basic auth is less common now. Token-based is a subset of OAuth. Certificate-based is not typical for REST APIs.

Answer

Basic authentication (base64 encoded)

Answer

Certificate-based authentication

Answer

Token-based authentication (self-issued)

Question 4

Which THREE of the following are valid NETCONF operations? (Choose three.)

Accepted Answer

. NETCONF defines standard operations: , , , , , , , , . is used in the candidate configuration model but is not a base operation; it's an optional capability. is the message wrapper, not an operation.

Answer

<rpc>

Answer

Question 5

A developer is using the Meraki Dashboard API and needs to handle paginated responses. Which TWO ways does Meraki indicate pagination? (Choose two.)

Accepted Answer

Link header with rel="next". Meraki uses Link header for pagination (rel="next") and also supports query parameters like perPage and startingAfter (cursor-based). Offset is not used by Meraki.

Answer

Offset and limit query parameters

Answer

Multiple pages returned in a single response

Answer

Total count in response body

Question 6

Which HTTP method should be used to partially update an existing resource in a REST API?

Accepted Answer

PATCH. PATCH is used for partial updates, while PUT replaces the entire resource.

Answer

PUT

Answer

DELETE

Answer

POST

Question 7

A developer wants to retrieve a list of network devices from Cisco DNA Center. Which HTTP method and URL structure should be used?

Accepted Answer

GET /dna/intent/api/v1/network-device. The DNA Center intent API uses GET with the path /dna/intent/api/v1/network-device to retrieve devices.

Answer

POST /dna/intent/api/v1/network-device

Answer

DELETE /dna/intent/api/v1/network-device

Answer

PUT /dna/intent/api/v1/network-device

Question 8

An application uses OAuth 2.0 client credentials grant to authenticate with a Cisco API. Which of the following best describes this flow?

Accepted Answer

The application sends its client ID and secret to obtain a token directly.. Client credentials grant is used for server-to-server authentication without user involvement.

Answer

The application uses a username and password in the request body.

Answer

The user provides their credentials via a consent screen.

Answer

A device code is displayed for the user to enter on a separate device.

Question 9

A developer is using the Meraki Dashboard API and notices that some requests return a 429 status code. What is the most likely cause?

Accepted Answer

The rate limit of 5 requests per second has been exceeded.. Meraki API rate limits at 5 calls per second; exceeding this returns 429 Too Many Requests.

Answer

The organization ID is incorrect.

Answer

The request payload is too large.

Answer

The API key is invalid.

Question 10

When using RESTCONF to configure a network device, which URL path prefix and content-type header should be used?

Accepted Answer

/restconf/data/ and Content-Type: application/yang-data+json. RESTCONF uses /restconf/data/ and content-type application/yang-data+json.

Answer

/restconf/operations/ and Content-Type: application/xml

Answer

/restconf/data/ and Content-Type: application/json

Answer

/restconf/ and Content-Type: text/plain

Question 11

In Postman, you want to run a collection of API requests automatically and test responses. Which feature should you use?

Accepted Answer

Collection Runner. The Collection Runner runs all requests in a collection sequentially and allows tests to be evaluated.

Answer

Postman Workspaces

Answer

Postman Monitors

Answer

Postman Interceptor

Question 12

An IoT device streams telemetry data to a collector using gNMI. Which mode allows the collector to initiate the subscription?

Accepted Answer

Dial-in mode. In dial-in mode, the collector (client) initiates the gNMI subscription to the device (server).

Answer

gRPC streaming

Answer

Dial-out mode

Answer

NETCONF telemetry

Question 13

A developer needs to retrieve a list of Webex teams that the authenticated user belongs to. Which HTTP request is correct?

Accepted Answer

GET https://api.ciscospark.com/v1/teams. The Webex Teams API uses GET /v1/teams to list teams.

Answer

POST https://api.ciscospark.com/v1/teams

Answer

PUT https://api.ciscospark.com/v1/teams

Answer

GET https://api.webex.com/v1/teams

Question 14

Which header is used to pass an API key in Meraki Dashboard API requests?

Accepted Answer

X-Cisco-Meraki-API-Key: <key>. Meraki API uses the X-Cisco-Meraki-API-Key header for authentication.

Answer

X-API-Key: <key>

Answer

Authorization: Bearer <token>

Answer

Authorization: Basic <base64>

Question 15

What does the Link header in a paginated API response typically contain?

Accepted Answer

URLs for navigating to other pages. The Link header includes URLs for next, previous, first, and last pages for cursor-based pagination.

Answer

The rate limit status

Answer

The API version

Answer

Only the total count of resources