200-901 Understanding and Using APIs Practice Test 4 — 15 Questions

Question 1

A network engineer wants to use NETCONF to change the hostname of a Cisco device. Which operation should be used?

Accepted Answer

. The operation is used to modify configuration data in NETCONF.

Answer

<lock>

Answer

<copy-config>

Answer

<get-config>

Question 2

In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?

Accepted Answer

GET /dna/intent/api/v1/site. The site hierarchy can be retrieved via GET /dna/intent/api/v1/site.

Answer

POST /dna/intent/api/v1/site

Answer

GET /dna/intent/api/v1/network-device

Answer

GET /dna/intent/api/v1/topology

Question 3

Which two authentication methods are commonly used with Cisco REST APIs? (Choose two.)

Accepted Answer

API key in header. API key and OAuth 2.0 are common; Basic auth is less common; session cookie and SAML are not typical for REST APIs.

Answer

Basic authentication with username/password

Answer

Session cookie

Answer

SAML assertion

Question 4

Which three HTTP methods are used for CRUD operations in REST APIs? (Choose three.)

Accepted Answer

GET. GET (read), POST (create), PUT (update/replace) are CRUD; DELETE (delete) is also CRUD but question asks for three, and PATCH is partial update not always considered core CRUD.

Answer

DELETE

Answer

PATCH

Question 5

Which three statements about Webex API webhooks are true? (Choose three.)

Accepted Answer

Webhooks deliver event data via HTTP POST to a specified URL.. Webhooks are registered via POST, deliver payload via HTTP POST, and can be filtered by resource/event. They are not secured by OAuth exclusively and do not use long polling.

Answer

Webhooks require OAuth 2.0 client credentials grant for security.

Answer

Webhooks use long polling to receive events.

Question 6

A network automation engineer wants to retrieve a list of all network devices from Cisco DNA Center. Which HTTP method and URL path should be used with the DNAC intent API?

Accepted Answer

GET /dna/intent/api/v1/network-device. The intent API uses GET to retrieve data, and /dna/intent/api/v1/network-device is the correct path for listing network devices.

Answer

PUT /dna/intent/api/v1/network-device

Answer

POST /dna/intent/api/v1/network-device

Answer

DELETE /dna/intent/api/v1/network-device

Question 7

An application uses the Meraki Dashboard API and receives a 429 Too Many Requests error. What is the most likely cause, and how should the application adjust?

Accepted Answer

The application exceeded the rate limit of 5 calls per second; implement exponential backoff.. Meraki API rate limits at 5 calls per second; a 429 indicates rate limit exceeded. The application should implement retry with backoff.

Answer

The request body is malformed; check JSON syntax.

Answer

The API key is invalid; regenerate the key.

Answer

The network is down; check connectivity.

Question 8

A developer is implementing OAuth 2.0 for a Cisco Webex integration that needs to send messages on behalf of a user. The integration runs on a server with no user interface. Which OAuth 2.0 flow should be used?

Accepted Answer

Client Credentials flow. For a server-to-server scenario without a user interface, the client credentials grant is appropriate, even though Webex typically uses authorization code for user context. However, the question implies a machine-to-machine scenario; client credentials flow is for server-to-server where no user is present.

Answer

Implicit flow

Answer

Authorization Code flow with PKCE

Answer

Device Code flow

Question 9

When using RESTCONF to configure a network device, what Content-Type header should be set in the HTTP request to indicate YANG data in JSON format?

Accepted Answer

application/yang-data+json. RESTCONF uses application/yang-data+json for JSON encoding of YANG data.

Answer

application/yang

Answer

application/xml

Answer

application/json

Question 10

What is the purpose of the Authorization header in a REST API call?

Accepted Answer

To authenticate the client sending the request. The Authorization header carries credentials (e.g., Bearer token) to authenticate the client.

Answer

To specify the content type of the request body

Answer

To specify the format of the response body

Answer

To indicate the desired language

Question 11

A developer is using Postman to test a Cisco Webex API that creates a room. After running the request, they want to verify that the response status is 200 and that the response body contains a non-null 'id' field. Which Postman test code accomplishes this?

Accepted Answer

pm.test('Status code is 200', () => { pm.response.to.have.status(200); }); pm.test('ID exists', () => { pm.expect(pm.response.json().id).to.not.be.null; });. pm.response.to.have.status checks the status; pm.expect and pm.response.json() access the body.

Answer

pm.response.to.have.status(200); if(pm.response.json().id) { console.log('exists'); }

Answer

pm.expect(pm.response.code).to.equal(200); pm.expect(pm.response.json().id).to.not.be.null;

Answer

pm.test('Status code is 200', () => { pm.response.to.have.status(200); }); pm.test('ID exists', () => { pm.expect(pm.response.json().id).to.be.null; });

Question 12

Which HTTP method is used to partially update an existing resource in a RESTful API?

Accepted Answer

PATCH. PATCH is used for partial updates; PUT replaces the entire resource.

Answer

UPDATE

Answer

POST

Answer

PUT

Question 13

When using the Cisco Meraki Dashboard API with pagination, the Link header in the response contains <https://api.meraki.com/api/v1/organizations?perPage=10&startingAfter=123>; rel="next". What does this indicate?

Accepted Answer

The API uses cursor-based pagination; the next page can be retrieved using the provided URL.. The Link header with rel="next" provides the URL for the next page of results; cursor-based pagination is used via startingAfter.

Answer

The API uses offset-based pagination and the next offset is 123.

Answer

The request should be retried after 123 seconds.

Answer

The response is limited to 10 items, and 123 items remain.

Question 14

An application uses NETCONF to configure a Cisco device. It sends an <edit-config> operation with the target 'running' and the operation 'merge'. Which statement about this operation is correct?

Accepted Answer

It will merge the new data into the running configuration, creating or updating as needed.. In NETCONF, <edit-config> with 'merge' operation will update existing data if present, or create if not. The 'running' datastore is typically not directly writable; 'candidate' is used for changes then commit. However, some devices allow direct edit of 'running' with 'merge' if supported.

Answer

It will delete the specified data from the running configuration.

Answer

It will remove all configuration and apply only the new data.

Answer

It will replace the entire running configuration with the new data.

Question 15

A developer is using gRPC/gNMI for model-driven telemetry from a Cisco device. Which of the following best describes the difference between dial-in and dial-out streaming?

Accepted Answer

Dial-in is initiated by the collector; dial-out is initiated by the device.. In gNMI, dial-in is when the collector initiates the subscription to the device; dial-out is when the device pushes data to the collector.

Answer

Dial-in uses gNMI; dial-out uses NETCONF.

Answer

Dial-in uses TCP; dial-out uses UDP.

Answer

Dial-in is initiated by the network device; dial-out is initiated by the collector.