200-901 Understanding and Using APIs Practice Test 8 — 15 Questions

Question 1

Which three statements are true about the Cisco Catalyst Center (formerly DNA Center) intent API? (Choose three.)

Accepted Answer

The base URL for the API includes the Catalyst Center hostname and port.. Option A is correct because every Catalyst Center intent API call is built on a base URL of the form https://:, typically port 443 for HTTPS, followed by the service path such as /dna/intent/api/v1. Option B is correct because authentication is performed by sending a POST request with the username and password in a JSON body to /dna/system/api/v1/auth/token, which returns a JWT token used as a Bearer token in the X-Auth-Token header for subsequent calls. Option D is correct because the intent API follows RESTful principles, using resource-oriented URIs and standard HTTP verbs, and returns responses formatted as JSON. Option C is incorrect because the API also uses PUT and DELETE methods (for example, to update or remove resources), not only GET and POST. Option E is incorrect because the X-Cisco-Meraki-API-Key header belongs to the Cisco Meraki Dashboard API, not to Catalyst Center, which relies on token-based authentication.

Answer

The API uses only GET and POST methods.

Answer

It requires an API key passed in the X-Cisco-Meraki-API-Key header.

Question 2

A developer is integrating a Python script with Cisco Webex Teams. The script must create a new space and then immediately post a message to that space. After the POST to /v1/rooms, the API returns HTTP 200 with a JSON body containing the new room's id. The script then needs to send a message. Which approach correctly uses the API response to post the message to the newly created room?

Accepted Answer

Extract the 'id' field from the JSON response and use it as the 'roomId' in a subsequent POST to /v1/messages.. When creating a resource via a REST API, the response typically includes the unique identifier of the new resource. For the Webex Teams API, the POST to /v1/rooms returns a JSON object with an 'id' field. To post a message to that room, the developer must pass that 'id' as the 'roomId' in the message creation request. This demonstrates understanding of API chaining and resource identification.

Answer

Parse the 'Link' header from the response and use its URL as the 'roomId' in a subsequent POST to /v1/messages.

Answer

Use the HTTP status code 200 as the 'roomId' in a subsequent POST to /v1/messages.

Answer

Use the 'title' of the room as the 'roomId' in a subsequent POST to /v1/messages.

Question 3

A network automation engineer is writing a Python script that calls the Cisco DNA Center API to retrieve device health scores. The API enforces rate limiting and returns HTTP 429 with a 'Retry-After' header when the limit is exceeded. The script must handle this gracefully without crashing. Which code pattern correctly implements the retry logic?

Accepted Answer

Check the response status code; if it is 429, read the 'Retry-After' header, sleep for the specified number of seconds, then retry the request.. When an API returns HTTP 429 Too Many Requests, it often includes a 'Retry-After' header specifying how long the client should wait before retrying. The script must check for this status code, extract the header, pause for the indicated duration, and then retry the request. This ensures compliance with rate limits and maintains the script's reliability without causing further throttling.

Answer

Ignore the 429 response and continue with the next API call, assuming the data will be fetched eventually.

Answer

Use a try-except block to catch requests.exceptions.HTTPError, then immediately retry the request in a loop until it succeeds.

Answer

Increase the request timeout value to 60 seconds and resend the request, hoping the rate limit resets.

Question 4

A developer is building a Python script that calls the Cisco Webex Teams API to fetch a list of rooms. The API returns a response with a Link header containing a URL with a 'pageToken' parameter. What should the developer do to retrieve the next page of results?

Accepted Answer

Extract the URL from the Link header and make a GET request to that URL.. The Link header in HTTP responses provides a ready-to-use URL for the next page of results. The developer should extract that URL and perform a GET request to it. This approach is consistent with RFC 5988 and is the method used by Cisco Webex APIs for cursor-based pagination.

Answer

Increment the 'page' query parameter by 1 and resend the original request.

Answer

Use the 'next' field in the JSON response body to construct a new request.

Answer

Send a POST request to the same endpoint with the 'pageToken' in the request body.

Question 5

A developer is building a Python script that calls the Cisco Webex REST API. The API requires an OAuth 2.0 access token that expires after 14 days. The script will run unattended on a server every hour. Which OAuth 2.0 grant type should the developer use to obtain tokens without user interaction?

Accepted Answer

Client Credentials grant. The Client Credentials grant is the correct choice because it allows the application to authenticate itself directly with the authorization server using its client ID and secret, without any user involvement. This is ideal for server-to-server automation where the script acts on its own behalf and needs to run unattended.

Answer

Resource Owner Password Credentials grant

Answer

Authorization Code grant

Answer

Implicit grant

Question 6

A network engineer is writing a script to interact with a Cisco DNA Center controller. They need to authenticate and obtain a token to include in subsequent API requests. Which HTTP header should they use to send the token?

Accepted Answer

Authorization: Bearer <token>. Cisco DNA Center uses OAuth 2.0 token-based authentication. After obtaining a token from the authentication endpoint, the client must include it in the 'Authorization' header using the 'Bearer' scheme. This is the correct and standard way to authenticate API requests.

Answer

Authorization: Basic <token>

Answer

Cookie: token=<token>

Answer

X-Auth-Token: <token>

Question 7

A developer is building a Python script that calls the Cisco Webex Rooms API. The API returns a JSON error response with HTTP status code 429. The script currently retries immediately in a tight loop, but the errors persist. What should the developer implement to correctly handle this response?

Accepted Answer

Read the Retry-After response header and wait that many seconds before retrying the request.. HTTP 429 signals that the client has exceeded the API rate limit. Cisco Webex APIs return a Retry-After header indicating how long to wait before the next request. Reading and honoring that value prevents further throttling and is the standard remediation. Immediate retries, changing methods, or refreshing tokens do not address the underlying rate-limit condition.

Answer

Change the HTTP method from GET to POST and resend the request.

Answer

Set the Authorization header to a new access token and resend the request immediately.

Answer

Add a Content-Type: application/json header and resend the request.

Question 8

A developer is writing a Python script to interact with a REST API that returns JSON. The script must handle rate limiting gracefully. The API returns a 429 status code with a Retry-After header when the limit is exceeded. Which approach should the developer take to ensure the script continues to function without being blocked?

Accepted Answer

Parse the Retry-After header and sleep for the specified number of seconds before retrying.. Respecting the Retry-After header is the correct way to handle 429 responses. It tells the client exactly how long to wait before retrying, allowing the script to back off appropriately and avoid overwhelming the API. This approach ensures compliance with the API's rate limiting policy and maintains reliable operation.

Answer

Switch to a different HTTP method to bypass the rate limit.

Answer

Ignore the 429 response and continue with the next request.

Answer

Immediately retry the request in a tight loop until it succeeds.

Question 9

A developer is writing a Python script that calls the Cisco Webex Rooms API to create a new team room. The script must send JSON data in the request body and receive JSON responses. Which HTTP header should be set to ensure the API interprets the request body as JSON and returns JSON?

Accepted Answer

Content-Type: application/json. To send JSON data in a request body, the client must set the Content-Type header to application/json. This tells the server that the payload is JSON, enabling correct parsing. The Accept header is for response format, Authorization is for authentication, and Content-Length is for size. Only Content-Type directly addresses the request body format.

Answer

Content-Length: <length>

Answer

Accept: application/json

Answer

Authorization: Bearer <token>

Question 10

A developer is writing a Python script that calls the Cisco Webex Teams API to create a new space. The API returns the new space object, including a Location header pointing to the newly created resource. Which HTTP status code should the developer expect from a successful space creation?

Accepted Answer

201 Created. The correct status code for a successful resource creation via POST in the Webex API is 201 Created. This status indicates that the request has been fulfilled and has resulted in one or more new resources being created. The response typically includes a Location header with the URI of the new resource and a body containing the representation of the created space. Understanding this helps developers correctly handle API responses and extract necessary identifiers.

Answer

204 No Content

Answer

200 OK

Answer

202 Accepted

Question 11

A developer is integrating a Python script with the Cisco Webex API to create a new team. The script sends a POST request to https://webexapis.com/v1/teams with a JSON body containing the team name. The API returns HTTP 401 Unauthorized. The developer confirms the request body and URL are correct. Which of the following is the most likely cause of the 401 response?

Accepted Answer

The request is missing a valid Authorization header with a Bearer token.. A 401 Unauthorized status code means the request lacks valid authentication credentials for the target resource. The Webex API requires an OAuth 2.0 Bearer token in the Authorization header. Without it, the API rejects the request regardless of the correctness of the URL or body. The developer must obtain a valid access token and include it in the request headers.

Answer

The API endpoint requires a GET request instead of POST.

Answer

The request is missing the Content-Type header set to application/json.

Answer

The request body is not formatted as XML.

Question 12

A network engineer wants to retrieve the list of organizations associated with their API key from the Cisco Meraki Dashboard API. The API base URL is https://api.meraki.com/api/v1. Which HTTP request should the engineer send?

Accepted Answer

GET https://api.meraki.com/api/v1/organizations with the X-Cisco-Meraki-API-Key header set to the API key.. The Meraki Dashboard API lists organizations at GET /api/v1/organizations and authenticates via the X-Cisco-Meraki-API-Key request header. Using the correct path and header ensures the API key is recognized and the list of accessible organizations is returned. Alternative methods such as POST, Basic auth, or query-parameter keys are not supported for this operation.

Answer

POST https://api.meraki.com/api/v1/organizations with the API key in the request body.

Answer

GET https://api.meraki.com/api/v1/organization with the API key as a query parameter.

Answer

GET https://api.meraki.com/api/v1/organizations with Basic authentication using the API key as the password.

Question 13

A developer is building a Python script that calls the Cisco Webex Rooms API. The script must handle rate limiting gracefully by reading the response headers when the API returns HTTP 429. Which response header should the script inspect to determine how long to wait before retrying?

Accepted Answer

Retry-After. When the Webex API throttles a client with HTTP 429, it includes the Retry-After header to specify the number of seconds to wait. Reading this header allows the script to implement an appropriate backoff, respecting the service's limits and avoiding further penalties. The other headers serve different purposes and do not provide rate-limit timing information.

Answer

X-RateLimit-Reset

Answer

Location

Answer

WWW-Authenticate

Question 14

A developer is building an application that needs to retrieve information from a REST API that uses cursor-based pagination. The response includes a 'next_cursor' field when more results are available. How should the developer structure the requests to retrieve all pages of data?

Accepted Answer

Send the first request without any pagination parameters, then use the 'next_cursor' value as a query parameter in subsequent requests until it is absent.. Cursor-based pagination requires using the cursor provided by the API to fetch the next set of results. The developer should start with a request without pagination parameters, then iteratively use the 'next_cursor' value as a parameter in subsequent requests until the cursor is no longer returned, ensuring all data is retrieved in order.

Answer

Send multiple requests in parallel, each with a different page number, until all pages are retrieved.

Answer

Increment an 'offset' parameter by a fixed page size until no more results are returned.

Answer

Use the 'Link' header from the response to find the URL for the next page and follow it.

Question 15

A network engineer is using the Cisco DNA Center API to retrieve a list of all sites. The API returns a large number of records, and the response includes a header indicating the total count and a limit on the number of records per page. Which HTTP response header should the engineer inspect to find the URL for the next page of results?

Accepted Answer

Link. The Link header is the standard way to provide pagination links in REST APIs. It includes a URL for the next page, allowing clients to iterate through large result sets. Other headers like X-Total-Count give total counts, Location is for resource creation, and Retry-After is for rate limiting. Only Link directly provides the next page URL.

Answer

Location

Answer

Retry-After

Answer

X-Total-Count