200-901 Cisco Platforms and Development Practice Test 11 — 15 Questions

Question 1

A developer is using the Cisco Webex Teams API to manage memberships in a space. Which two HTTP methods and corresponding endpoints are used to add a new member and to remove an existing member? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

POST /v1/memberships to add a member. Adding a member to a Webex space is done with POST /v1/memberships, providing roomId and personEmail. Removing a member is done with DELETE /v1/memberships/{membershipId}. These are the standard methods for managing memberships. Other methods like PUT are for updates, and the room-based endpoints do not exist.

Answer

PUT /v1/memberships/{membershipId} to update a member

Answer

DELETE /v1/rooms/{roomId}/members/{personId} to remove a member

Answer

POST /v1/rooms/{roomId}/members to add a member

Question 2

A developer is writing a Python script that uses the Cisco Meraki Dashboard API. The script must read the API key from an environment variable named MERAKI_API_KEY and include it in every request. Which header should the script set?

Accepted Answer

X-Cisco-Meraki-API-Key: <API_KEY>. The Meraki Dashboard API expects the API key in a custom HTTP header called X-Cisco-Meraki-API-Key. This is the only header that authenticates the request; standard Authorization or generic API key headers are ignored. Reading the key from an environment variable and placing it in that header keeps credentials out of source code while allowing the script to call Meraki endpoints successfully.

Answer

Api-Key: <API_KEY>

Answer

Authorization: Bearer <API_KEY>

Answer

X-Auth-Token: <API_KEY>

Question 3

A developer is writing a Python script that uses the Cisco Meraki Dashboard API to update the VLAN configuration of a network. The script reads the API key from an environment variable and places it in the appropriate request header. Which header should the developer set, and what happens if the key is invalid?

Accepted Answer

Set X-Cisco-Meraki-API-Key; an invalid key produces an HTTP 401 Unauthorized response. The Meraki Dashboard API uses a purpose-built header for API key authentication rather than standard HTTP bearer tokens. Placing the organization key in X-Cisco-Meraki-API-Key authenticates the call, and an invalid or revoked key yields a 401 Unauthorized response. Reading the key from an environment variable keeps credentials out of source control while still populating the correct header.

Answer

Set Authorization to a Bearer token; an invalid key produces an HTTP 403 Forbidden response

Answer

Set X-Cisco-Meraki-API-Key; an invalid key produces an HTTP 404 Not Found response

Answer

Set X-Meraki-Token; an invalid key produces an HTTP 429 Too Many Requests response

Question 4

A developer is building a Python application that interacts with Cisco Meraki Dashboard API. The application needs to retrieve the list of organizations. Which HTTP header must be included in the request to authenticate?

Accepted Answer

X-Cisco-Meraki-API-Key: <API_KEY>. The Meraki Dashboard API authenticates requests using the X-Cisco-Meraki-API-Key header. The API key is generated in the Meraki Dashboard and must be included in every API call. Other headers like Authorization: Bearer or X-Auth-Token are used by different Cisco platforms and will not work with Meraki.

Answer

Authorization: Bearer <API_KEY>

Answer

X-Auth-Token: <API_KEY>

Answer

api-key: <API_KEY>

Question 5

A developer needs to retrieve the list of all networks in a specific Cisco Meraki organization. The developer has the organization ID and a valid API key. Which HTTP method and endpoint should be used?

Accepted Answer

GET /api/v1/organizations/{organizationId}/networks. To list networks in a Meraki organization, the developer must use GET /api/v1/organizations/{organizationId}/networks. The organization ID is required in the path, and the API key authenticates the request. The response contains an array of network objects. Other methods like POST are for creating networks, and incorrect paths will fail.

Answer

GET /api/v1/organizations/{organizationId}/network

Answer

GET /api/v1/networks

Answer

POST /api/v1/organizations/{organizationId}/networks

Question 6

A developer is writing a Python script to interact with a Cisco Meraki Dashboard API. The script retrieves a list of organizations and then, using the organization ID, retrieves the networks for that organization. The API returns a 200 OK with a JSON body and a Link header containing a URL for the next page. The developer wants to ensure all networks are retrieved. Which approach should the developer take?

Accepted Answer

Parse the Link header and follow the URL for the next page until no Link header is present.. The Meraki Dashboard API implements pagination using the Link header, which contains a URL for the next page of results. To retrieve all networks, the developer must follow the 'next' link until it is absent. Other methods like using a 'page' parameter, increasing 'perPage', or looking for an 'offset' field do not align with the API's design and will not work.

Answer

Parse the response for an 'offset' field and use it in subsequent requests until the offset equals the total count.

Answer

Use the 'perPage' query parameter set to 1000 to retrieve all networks in a single request.

Answer

Send the same GET request with an increased 'page' query parameter until an empty array is returned.

Question 7

A developer is building a Python application that must authenticate to Cisco Webex APIs on behalf of a service account. The application will run unattended and must not require interactive user login. The developer has already registered an integration in the Webex Developer Portal and obtained the client ID and client secret. Which OAuth 2.0 grant type should the application use?

Accepted Answer

Client Credentials grant. For an unattended service account that must call Webex APIs without any user interaction, the Client Credentials grant is the correct OAuth 2.0 flow. It uses the client ID and client secret directly to obtain an access token, eliminating the need for a browser redirect or user credentials. This is the standard approach for machine-to-machine integrations.

Answer

Implicit grant

Answer

Authorization Code grant

Answer

Resource Owner Password Credentials grant

Question 8

A developer is writing a Python script that uses the Cisco SD-WAN (vManage) API to create a device template. The API requires the request body to include the template configuration and the device model. Which HTTP method and resource path should the developer use?

Accepted Answer

POST /dataservice/template/device. Creating a device template in Cisco SD-WAN vManage requires an HTTP POST to the /dataservice/template/device resource. The request body must contain the device model and the configuration. GET retrieves, PUT updates, and DELETE removes, so only POST aligns with the create operation described in the scenario.

Answer

PUT /dataservice/template/device/feature

Answer

DELETE /dataservice/template/device

Answer

GET /dataservice/template/device

Question 9

A developer is using the Cisco DNA Center API to manage devices. The developer needs to perform operations that are part of the 'Site Management' API category. (Choose two.)

Accepted Answer

Assign a device to a site. The Site Management API category in Cisco DNA Center includes operations for creating, updating, and deleting sites, as well as associating devices with sites. Creating a new site and assigning a device to a site are both part of this category. Other operations like retrieving device health or configuring SNMP belong to different API categories.

Answer

Retrieve device health

Answer

Configure SNMP settings on a device

Answer

Create a new network profile

Question 10

A developer is writing a Python script to interact with a Cisco IOS XE device using the NETCONF protocol. The script uses the ncclient library to establish a connection and retrieve the running configuration. Which method should the developer use to retrieve the configuration?

Accepted Answer

manager.get_config(source='running'). The ncclient library provides the get_config method to retrieve configuration from a NETCONF server. The source parameter specifies the datastore, such as 'running' for the running configuration. The get method is for state data, edit_config is for modifying configuration, and dispatch is for custom RPCs. Therefore, the correct method is manager.get_config(source='running').

Answer

manager.edit_config(target='running')

Answer

manager.get(filter=('subtree', 'running'))

Answer

manager.dispatch(rpc='get-config')

Question 11

A developer is building an application that uses Cisco Webex Teams APIs to manage memberships in a space. The developer needs to perform two operations: add a new member to a space and remove an existing member from a space. Which two API requests should the developer use? (Choose two.)

Accepted Answer

POST /v1/memberships with a JSON body containing 'roomId' and 'personEmail'.. The Webex Teams API manages space memberships through the /v1/memberships resource. Adding a member requires a POST to /v1/memberships with the room ID and person's email. Removing a member requires a DELETE to /v1/memberships/{membershipId}. These two operations correctly add and remove members. Other options use non-existent endpoints or incorrect HTTP methods.

Answer

DELETE /v1/rooms/{roomId}/members/{personId}

Answer

POST /v1/rooms/{roomId}/members with a JSON body containing 'email'.

Answer

PUT /v1/memberships/{membershipId} with a JSON body containing 'personEmail'.

Question 12

A developer is writing a Python script that uses the Cisco Meraki Dashboard API to retrieve a list of organizations. The script sends a GET request to https://api.meraki.com/api/v1/organizations but receives an HTTP 401 Unauthorized response. The developer has confirmed that the API key is correct and active. Which header must be included in the request to authenticate successfully?

Accepted Answer

X-Cisco-Meraki-API-Key: <API_KEY>. The Meraki Dashboard API authenticates requests using the API key supplied in the X-Cisco-Meraki-API-Key header. When this header is missing or incorrectly named, the API returns 401 Unauthorized regardless of the key's validity. Therefore, the developer must include X-Cisco-Meraki-API-Key with the correct key value to successfully retrieve the list of organizations.

Answer

Api-Key: <API_KEY>

Answer

Authorization: Bearer <API_KEY>

Answer

X-Api-Key: <API_KEY>

Question 13

A developer is building a Python application that uses the Webex Teams API to send a message to a specific room. The developer has the room ID and a valid access token. Which HTTP method and endpoint should be used?

Accepted Answer

POST /v1/messages with roomId and text in the JSON body. To send a message to a Webex Teams room, the developer must use POST /v1/messages with the roomId and text in the JSON body. The access token is provided in the Authorization header. Other methods like GET are for listing messages, and PUT is for updating existing messages. The endpoint must be exactly as documented.

Answer

GET /v1/messages with roomId as a query parameter

Answer

PUT /v1/messages with roomId and text in the JSON body

Answer

POST /v1/rooms/{roomId}/messages with text in the JSON body

Question 14

A developer needs to configure a Cisco IOS XE device using NETCONF and wants to ensure the session supports candidate configuration and confirmed commit. Which capability must the device advertise in its NETCONF hello message?

Accepted Answer

urn:ietf:params:netconf:capability:candidate:1.0. NETCONF defines capabilities in the hello exchange, and candidate configuration is advertised via the candidate capability URN. When a device supports it, clients can edit the candidate datastore, validate it, and commit atomically. Confirmed commit builds on this by requiring an explicit confirmation within a timeout, otherwise the device reverts. The candidate capability is therefore the prerequisite for the described workflow.

Answer

urn:ietf:params:netconf:capability:writable-running:1.0

Answer

urn:ietf:params:netconf:capability:startup:1.0

Answer

urn:ietf:params:netconf:capability:rollback-on-error:1.0

Question 15

A developer is using the Cisco NX-API on a Cisco Nexus switch to retrieve the running configuration. The developer sends an HTTP POST request to the NX-API endpoint with the JSON payload: {"ins_api": {"version": "1.0", "type": "cli_show", "chassis": "1", "input": "show running-config", "output_format": "json"}}. The switch returns an error indicating that the command is not supported. What is the most likely reason?

Accepted Answer

The 'show running-config' command requires the 'cli_show_ascii' type instead of 'cli_show'.. The NX-API uses different types for commands: 'cli_show' for structured JSON output and 'cli_show_ascii' for ASCII text output. The 'show running-config' command does not support JSON output, so it must be requested with 'cli_show_ascii'. The error occurs because the developer used 'cli_show' with a command that lacks JSON support. Changing the type to 'cli_show_ascii' resolves the issue.

Answer

The NX-API requires the 'input' field to be a list of commands, not a single string.

Answer

The 'output_format' should be set to 'ascii' instead of 'json'.

Answer

The 'chassis' field must be omitted for commands that are not chassis-specific.