200-901 Understanding and Using APIs Practice Test 5 — 15 Questions

Question 1

Which header is used in an HTTP request to tell the server the format of the request body?

Accepted Answer

Content-Type. Content-Type header specifies the media type of the request body, e.g., application/json.

Answer

Authorization

Answer

Accept

Answer

Host

Question 2

A Cisco Webex bot needs to receive real-time notifications when new messages are posted in a space. Which API feature should the bot use?

Accepted Answer

Webhooks via the /webhooks API. Webex Webhooks allow real-time event notifications; the bot registers a webhook with a target URL that receives POST requests when events occur.

Answer

Server-Sent Events (SSE)

Answer

Polling the /messages endpoint every second

Answer

Long polling with a keep-alive connection

Question 3

When using OAuth 2.0 client credentials flow with a Cisco API, what is the typical purpose of the access token?

Accepted Answer

To authorize the client application to access resources. Client credentials flow is for server-to-server; the access token authorizes the client application to access resources on its own behalf, not on behalf of a user.

Answer

To identify the user's role

Answer

To authenticate the user

Answer

To encrypt the request payload

Question 4

In the Cisco DNA Center intent API, which HTTP method should be used to update a specific site's information?

Accepted Answer

PUT. For updating an existing resource, PUT is used to replace the entire resource, while PATCH is for partial updates. DNA Center intent API typically uses PUT for updates, but PATCH may also be supported. The question asks for update; PUT is the standard.

Answer

GET

Answer

POST

Answer

DELETE

Question 5

Which TWO of the following are valid methods for authenticating to a Cisco REST API? (Select two.)

Accepted Answer

API key in a custom header. API key and OAuth 2.0 token are common authentication methods. Basic auth (username:password) is also valid but less common for Cisco APIs. The question likely expects API key and OAuth 2.0.

Answer

IP address whitelisting

Answer

Username and password in the request body

Answer

Session ID in a cookie

Question 6

Which THREE of the following are characteristics of RESTCONF compared to NETCONF? (Select three.)

Accepted Answer

Uses HTTP as the transport protocol. RESTCONF uses HTTP and supports JSON encoding, while NETCONF uses SSH and XML RPCs. Both use YANG data models.

Answer

Employs XML Remote Procedure Calls (RPCs)

Answer

Uses SSH for secure transport

Question 7

Which TWO of the following are valid query parameter-based pagination methods used in REST APIs? (Select two.)

Accepted Answer

Cursor-based (e.g., startingAfter). Offset/limit and cursor-based (e.g., startingAfter) are common. Page/per_page is similar to offset/limit. Link header is another method but not a query parameter.

Answer

Timestamp-based (e.g., since)

Answer

Link header with rel="next"

Answer

Page and per_page

Question 8

Which TWO of the following HTTP methods are considered safe (idempotent and not modifying server state)? (Select two.)

Accepted Answer

GET. GET and HEAD are safe; they do not change server state and are idempotent.

Answer

PUT

Answer

DELETE

Answer

POST

Question 9

A developer is designing a Cisco Catalyst Center integration that uses the intent API. Which THREE of the following are available via the intent API? (Select three.)

Accepted Answer

Site hierarchy. The intent API provides access to network devices, site hierarchy, and issues. Command runner is also available but as a separate endpoint.

Answer

Network device configuration files

Answer

Real-time interface statistics

Question 10

Which HTTP method is used to partially update a resource in a RESTful API?

Accepted Answer

PATCH. PATCH is used for partial updates, while PUT replaces the entire resource.

Answer

POST

Answer

PUT

Answer

UPDATE

Question 11

A developer needs to retrieve a list of network devices from Cisco DNA Center. Which API endpoint should be used?

Accepted Answer

GET /dna/intent/api/v1/network-device. The intent API endpoint /dna/intent/api/v1/network-device retrieves network devices.

Answer

GET /dna/intent/api/v1/topology

Answer

POST /dna/intent/api/v1/network-device

Answer

GET /dna/intent/api/v1/site

Question 12

What is the default rate limit for the Meraki Dashboard API?

Accepted Answer

5 calls per second. Meraki Dashboard API enforces a rate limit of 5 calls per second.

Answer

20 calls per second

Answer

1 call per second

Answer

10 calls per second

Question 13

In the context of Cisco Webex APIs, which mechanism allows an application to receive real-time notifications when a message is created in a space?

Accepted Answer

Registering a webhook with the resource 'messages' and event 'created'. Webex uses webhooks to send HTTP callbacks for events like message creation.

Answer

Enabling Server-Sent Events (SSE)

Answer

Polling the /messages endpoint every second

Answer

Using a long-lived HTTP connection

Question 14

A developer uses RESTCONF to configure a network device. What is the correct content-type header to send in the request?

Accepted Answer

application/yang-data+json. RESTCONF uses application/yang-data+json for JSON encoding of YANG data.

Answer

application/json

Answer

application/xml

Answer

text/plain

Question 15

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required?

Accepted Answer

Client Credentials Grant. Client credentials grant is used for server-to-server authentication without user consent.

Answer

Implicit Grant

Answer

Authorization Code Grant

Answer

Password Grant