200-901 Cisco Platforms and Development Practice Test 10 — 15 Questions

Question 1

Which three actions can an EEM applet perform when triggered? (Choose three.)

Accepted Answer

Execute a CLI command. EEM (Embedded Event Manager) applets can execute CLI commands when triggered by an event. This allows automation of operational tasks such as configuration changes or troubleshooting commands without manual intervention.

Answer

Modify a YANG data model

Answer

Create a new VLAN

Question 2

An engineer is using the Cisco Meraki Dashboard API to retrieve a list of all network clients for a specific network. Which TWO of the following are required to successfully make this API call?

Accepted Answer

Network ID in the URL path. The Meraki Dashboard API endpoint for listing network clients (GET /networks/{networkId}/clients) requires the network ID as a path parameter to identify the specific network from which to retrieve client data. Without the network ID in the URL, the API cannot determine which network's clients to return, making it a mandatory component of the request.

Answer

Bearer token in the Authorization header

Answer

Organization ID in the URL path

Answer

API key as a query parameter

Question 3

A developer is building an automation script to retrieve network device details from Cisco DNA Center. The script needs to authenticate and then call the device list API. Which THREE steps are required in the correct sequence?

Accepted Answer

Send a GET request to /dna/intent/api/v1/network-device. The correct sequence begins with D: the script must POST to /dna/system/api/v1/auth/token using HTTP Basic Auth (base64-encoded username:password) to obtain a JWT token from Cisco DNA Center. Next, C is required because that token must be presented on every subsequent API call in the Authorization header using the Bearer scheme (Authorization: Bearer <token>), which is how DNA Center validates the caller. Finally, A is required because the device inventory is retrieved with a GET request to /dna/intent/api/v1/network-device, the Intent API endpoint that returns the network device list. Option B is incorrect because DNA Center's token-based authentication does not rely on HTTP cookies. Option E is incorrect because the token must be sent in the Authorization header, not as a query parameter, which would be insecure and unsupported.

Answer

Enable cookie-based authentication in the HTTP client

Answer

Include the token as a query parameter in the device list request

Question 4

A network administrator wants to use Cisco Webex APIs to automate sending messages to a specific room. Which THREE pieces of information are required to send a message using POST /v1/messages?

Accepted Answer

Message body as plain text or markdown. Option B is correct because POST /v1/messages requires a message payload, and the Webex Messages API accepts the content as either plain text or markdown in the request body. Option C is correct because the API requires a target destination, specified as either the roomId of the room or the toPersonEmail of the recipient. Option E is correct because every Webex API request must be authenticated with an OAuth Bearer token in the Authorization header. Option A is incorrect because X-Cisco-Meraki-API-Key is used for the Meraki Dashboard API, not Webex messaging. Option D is incorrect because the Messages API does not require the recipient's user ID; it targets a room ID or recipient email instead.

Answer

X-Cisco-Meraki-API-Key header

Answer

User ID of the recipient

Question 5

A developer is building a Python script to create a new network in a Cisco Meraki organization. The developer must authenticate to the Dashboard API. Which HTTP header is used to pass the API key?

Accepted Answer

X-Cisco-Meraki-API-Key. The Meraki Dashboard API authenticates requests using an API key passed in the X-Cisco-Meraki-API-Key HTTP header. This is a custom header specific to Meraki, and it must be present in all API calls. Other authentication schemes like Bearer tokens or Basic auth are not used. Understanding the correct header is essential for successful API integration.

Answer

Authorization: Bearer <token>

Answer

Authorization: Basic <base64-encoded-credentials>

Answer

X-Api-Key

Question 6

A network engineer is using the Cisco DNA Center Intent API to retrieve a list of all sites. Which HTTP method and endpoint should be used?

Accepted Answer

GET /dna/intent/api/v1/site. To retrieve a list of sites in Cisco DNA Center, the correct API call is a GET request to /dna/intent/api/v1/site. This endpoint is part of the Intent API and returns all sites. Authentication is required using a token from the authentication API. Other methods or paths do not perform this function.

Answer

GET /dna/system/api/v1/site

Answer

GET /dna/intent/api/v1/sites

Answer

POST /dna/intent/api/v1/site

Question 7

A developer is creating a Python script that uses the Cisco Webex Teams REST API. The script needs to read the WEBCEX_ACCESS_TOKEN environment variable and include it as a Bearer token in the HTTP Authorization header for every request. Which code snippet correctly accomplishes this?

Accepted Answer

headers = {'Authorization': 'Bearer ' + os.environ['WEBEX_ACCESS_TOKEN']}. The Webex Teams API uses OAuth 2.0 bearer tokens, so the Authorization header must be in the format 'Bearer <token>'. The code must read the token from the environment variable and concatenate it with the 'Bearer ' prefix. Using os.environ or os.getenv is appropriate, but the scheme must be 'Bearer'. The other options either use the wrong scheme or omit the prefix, leading to authentication failures.

Answer

headers = {'Authorization': os.environ['WEBEX_ACCESS_TOKEN']}

Answer

headers = {'Authorization': 'Basic ' + os.environ['WEBEX_ACCESS_TOKEN']}

Answer

headers = {'Authorization': 'Token ' + os.getenv('WEBEX_ACCESS_TOKEN')}

Question 8

A developer is building a Python application that uses the Cisco Meraki Dashboard API to update VLAN settings on a network. The application must handle API errors gracefully and avoid being rate-limited. The developer wants to implement logic that inspects the response status code and the Retry-After header. Which two actions should the developer take when the API returns HTTP 429? (Choose two.)

Accepted Answer

Read the Retry-After response header and pause requests for the specified number of seconds before retrying.. Meraki's Dashboard API enforces rate limits and returns HTTP 429 with a Retry-After header when exceeded. The robust client reads that header, waits the indicated time, and then retries using exponential backoff with jitter to avoid synchronized retries. Rotating keys or switching protocols does not change the per-organization limit and can introduce security or reliability problems.

Answer

Immediately resend the same request with an incremented X-Retry-Count header to bypass the rate limit.

Answer

Switch the request from HTTPS to HTTP to reduce overhead and avoid rate limiting.

Answer

Rotate to a different API key for the same organization to reset the rate-limit counter.

Question 9

A developer is using the Cisco Meraki Dashboard API to update the VLAN configuration on a switch port. The API call returns a 404 Not Found error. The developer has verified that the API key is valid and the organization ID and network ID are correct. What is the most likely cause of the 404 error?

Accepted Answer

The API endpoint URL is incorrect or the resource does not exist.. A 404 Not Found error means the server cannot locate the requested resource. Common causes include an incorrect endpoint URL, a non-existent resource ID (such as a port that does not exist on the switch), or a typo in the path. Authentication issues yield 401, permission issues yield 403, bad request bodies yield 400, and rate limits yield 429. Therefore, the developer should verify the URL and resource identifiers.

Answer

The API key does not have write permissions for the network.

Answer

The request body is missing required parameters.

Answer

The Meraki Dashboard API rate limit has been exceeded.

Question 10

A network automation engineer is using Cisco NX-OS with NX-API enabled. The engineer wants to send a JSON-RPC request to the device to retrieve the running configuration. Which URL format and HTTP method should be used to send the request to the NX-API endpoint?

Accepted Answer

POST to https://<device-ip>/ins with a JSON body containing the RPC parameters.. NX-API provides a JSON-RPC interface at the /ins endpoint over HTTPS. To run show commands and retrieve the running configuration, the client sends an HTTP POST with a JSON body specifying the command and parameters. Other endpoints such as RESTCONF or form-encoded requests are not part of the NX-API JSON-RPC mechanism.

Answer

POST to https://<device-ip>/ins with form-encoded parameters and a Content-Type of application/x-www-form-urlencoded.

Answer

GET to https://<device-ip>/api/v1/config with query parameters for the command.

Answer

PUT to https://<device-ip>/restconf/data/Cisco-NX-OS-device:config

Question 11

A developer is automating a Cisco IOS XE device with NETCONF over SSH. The developer must retrieve only the running configuration's hostname without pulling the entire configuration datastore. Which NETCONF operation should the developer use?

Accepted Answer

with a source of and a subtree filter selecting the native hostname node. Reading a targeted piece of configuration from a NETCONF-capable device requires the read-oriented get-config operation, an explicit source datastore, and a filter that narrows the reply. Selecting the running datastore with a subtree filter that matches the IOS XE native hostname leaf returns exactly that value and nothing else, keeping the payload small and the device state unchanged.

Answer

copying into and then reading the response body

Answer

<get> with an empty filter, which returns operational and configuration state together

Answer

targeting with a merge operation on the hostname leaf

Question 12

A developer is writing a script that uses the Cisco DNA Center Intent API to retrieve a list of all sites in the network hierarchy. The developer needs to authenticate first. Which authentication method should be used to obtain a token for subsequent API calls?

Accepted Answer

Send a POST request to /dna/system/api/v1/auth/token with Basic authentication using the username and password.. Cisco DNA Center's Intent API uses a token-based authentication flow. The client sends a POST to /dna/system/api/v1/auth/token with HTTP Basic authentication, and the response includes a token. That token is then sent in the X-Auth-Token header for subsequent API calls, such as retrieving the site hierarchy.

Answer

Use OAuth 2.0 client credentials flow with a client ID and secret to obtain an access token.

Answer

Send a POST request to /dna/system/api/v1/auth/token with the username and password in the JSON body.

Answer

Send a GET request to /dna/system/api/v1/auth/token with an API key in the query string.

Question 13

A developer is using the Cisco DNA Center REST API to retrieve a list of all network devices. The API requires authentication. The developer wants to avoid hardcoding credentials and instead use a token-based authentication mechanism. Which authentication method should the developer use?

Accepted Answer

Token-based authentication using the /dna/system/api/v1/auth/token endpoint. DNA Center's REST API uses a token-based authentication flow. The developer must first call the authentication endpoint with Basic Auth to obtain a token, then include that token in the X-Auth-Token header for all subsequent requests. This approach is more secure than sending credentials with every call and is the standard method for DNA Center automation.

Answer

API key passed in the X-Auth-Token header

Answer

Basic Authentication with base64-encoded username and password

Answer

OAuth 2.0 with client credentials grant

Question 14

A developer is building a Python application that manages Cisco IOS XE devices through the Python library ncclient. The application must apply a configuration change atomically, validate it before committing, and avoid persisting the change if validation fails. Which approach should the developer take?

Accepted Answer

Lock the candidate datastore, edit the candidate, validate it with the validate operation, then commit and unlock. Transactional configuration over NETCONF depends on a staging datastore and an explicit validation step. Locking the candidate, editing it, running the validate operation, and then committing ensures the change is checked before it becomes active. If validation fails, the candidate can be discarded and running is never touched, satisfying the atomic and non-persistent requirements.

Answer

Issue a discard-changes operation against running after each edit-config to confirm the edit was accepted

Answer

Send an edit-config directly to the running datastore with the default merge operation

Answer

Use the copy-config operation to copy running into startup, then edit startup directly

Question 15

A developer is building a Python script that uses the Cisco Meraki Dashboard API. The script needs to retrieve the list of organizations the API key has access to. Which HTTP method and endpoint should the developer use?

Accepted Answer

GET /api/v1/organizations. The Meraki Dashboard API uses GET /api/v1/organizations to list organizations. The API key must be included in the X-Cisco-Meraki-API-Key header. This endpoint returns a JSON array of organizations. Other methods like POST or PUT are for creating or updating resources, and the API version must be v1.

Answer

POST /api/v1/organizations

Answer

GET /api/v0/organizations

Answer

PUT /api/v1/organizations