200-901 Network Fundamentals Practice Test 2 — 15 Questions

Question 1

An engineer is configuring a new IPv4 subnet with the address 172.16.5.0/25. Which three statements are true about this subnet? (Choose three.)

Accepted Answer

There are 126 usable host addresses.. A /25 prefix length corresponds to a subnet mask of 255.255.255.128, which provides 2^(32-25) - 2 = 128 - 2 = 126 usable host addresses. The network address is 172.16.5.0, and the broadcast address is 172.16.5.127, leaving addresses 172.16.5.1 through 172.16.5.126 for hosts.

Answer

The subnet mask is 255.255.255.192.

Answer

The network address is 172.16.5.128.

Question 2

A network engineer is analyzing traffic and observes that a client and server have completed the TCP three-way handshake. The client now needs to gracefully terminate the connection and ensure the server receives all outstanding data. Which sequence of TCP flags should the client send to initiate this teardown?

Accepted Answer

FIN, then ACK, then FIN, then ACK. A graceful TCP connection teardown uses a four-way handshake: the initiating side sends FIN, the other side acknowledges with ACK, then the other side sends its own FIN, and the first side acknowledges with ACK. This ensures both directions are closed and all data is delivered. The sequence in the correct option matches this process exactly.

Answer

SYN, then ACK, then FIN

Answer

ACK, then FIN, then ACK

Answer

RST, then ACK

Question 3

A network engineer is designing a solution that uses a Cisco SD-WAN controller. The engineer needs to programmatically retrieve the list of vEdge devices and their current status from the controller's API. The API is REST-based and requires authentication. Which two actions must the engineer perform to successfully authenticate and retrieve the data? (Choose two.)

Accepted Answer

Obtain a session token by sending a POST request to the /j_security_check endpoint with a JSON payload containing the username and password.. The Cisco SD-WAN vManage API requires session-based authentication. The engineer must first POST credentials to /j_security_check to obtain a JSESSIONID cookie, then include that cookie in subsequent GET requests to endpoints like /dataservice/device. This two-step process is necessary because the API does not support Basic Auth or API keys.

Answer

Send a POST request to /dataservice/device with the username and password in the body to retrieve the device list.

Answer

Generate an API key from the vManage GUI and include it in the X-API-Key header for all requests.

Answer

Use HTTP Basic Authentication with the username and password encoded in Base64 in the Authorization header for every request.

Question 4

A developer is writing a Python script that must retrieve the current time from a remote server without establishing a persistent connection or verifying delivery. Which transport protocol and port should the script use to send a single small request and receive a single small response?

Accepted Answer

UDP with an ephemeral destination port. The requirement is for a simple request/response exchange without a persistent connection or delivery verification. UDP provides connectionless, best-effort datagram delivery, which matches the described behavior. TCP would introduce a three-way handshake and reliability mechanisms that are unnecessary here. The port number is not the primary concern; the transport protocol is what matters for the stated constraints.

Answer

TCP port 123

Answer

UDP port 123

Answer

UDP port 69

Question 5

A network engineer needs to connect two switches in the same building so that devices on both switches can communicate as if they were on the same local area network. The engineer wants to avoid any routing between the two switches. Which type of connection should be used?

Accepted Answer

A Layer 2 trunk or access link in the same VLAN. Extending a single local area network across two switches requires a Layer 2 connection that places both switches in the same broadcast domain. A link configured for the same VLAN, whether as an access port or a trunk carrying that VLAN, achieves this without routing. The other options either introduce routing or are intended for different purposes such as carrying multiple VLANs or connecting endpoints, so they do not satisfy the requirement.

Answer

A routed link with OSPF enabled

Answer

A trunk link carrying multiple VLANs

Answer

An access link configured as a trunk

Question 6

A developer is using the Cisco DNA Center Intent API to retrieve a list of network devices. The API call returns a JSON response with a 'response' array containing device objects. The developer needs to extract the 'managementIpAddress' from each device and store them in a list. Which Python code snippet correctly parses the JSON and extracts the IP addresses?

Accepted Answer

import json; data = json.loads(response.text); ips = [device['managementIpAddress'] for device in data['response']]. The correct approach is to use json.loads on response.text to parse the JSON string into a Python dictionary, then extract the 'managementIpAddress' field from each element in the 'response' array. Using response.json() would also work, but the provided snippet with json.loads is valid. The other options misuse json.load or double-parse.

Answer

import json; data = json.load(response.text); ips = [device['managementIpAddress'] for device in data['response']]

Answer

import json; data = json.loads(response.json()); ips = [device['managementIpAddress'] for device in data['response']]

Answer

import json; data = json.loads(response.content); ips = [device['managementIpAddress'] for device in data['response']]

Question 7

A network engineer is configuring a new Cisco IOS switch and needs to ensure that only the MAC address 00:1A:2B:3C:4D:5E is allowed to send traffic on interface GigabitEthernet0/1. The engineer wants to achieve this with minimal configuration and without impacting other ports. Which command should be applied to the interface?

Accepted Answer

switchport port-security mac-address 00:1A:2B:3C:4D:5E. To allow only a specific MAC address on a switch port, the engineer must statically configure that MAC address using the switchport port-security mac-address command. This, combined with enabling port security and setting a maximum of one, ensures only that device can communicate. Other options either do not enforce access control or do not specify the allowed MAC.

Answer

switchport port-security maximum 1

Answer

switchport port-security violation restrict

Answer

mac address-table static 00:1A:2B:3C:4D:5E vlan 1 interface GigabitEthernet0/1

Question 8

A developer is writing a script to interact with a REST API that uses JSON. The script must send a POST request with a JSON payload and include an Authorization header with a Bearer token. Which Python code snippet correctly uses the requests library to achieve this?

Accepted Answer

requests.post(url, json=json_payload, headers={'Authorization': 'Bearer token'}). The requests library provides a json parameter that serializes the payload and sets the Content-Type header to application/json automatically. This, combined with an Authorization header containing the Bearer token, correctly sends a JSON POST request. The other options either send form-encoded data, use the wrong authentication mechanism, or require manual serialization and header setting, which is less concise and more error-prone.

Answer

requests.post(url, data=json.dumps(json_payload), headers={'Authorization': 'Bearer token', 'Content-Type': 'application/json'})

Answer

requests.post(url, data=json_payload, headers={'Authorization': 'Bearer token'})

Answer

requests.post(url, json=json_payload, auth=('Bearer', 'token'))

Question 9

A developer is building a Python application that consumes a REST API. The API returns JSON data. The developer needs to parse the response and extract a specific field. Which Python code snippet correctly parses the JSON response from the requests library?

Accepted Answer

import json; data = json.loads(response.text); value = data['field']. The correct way to parse JSON from a requests response is to call response.json() or use json.loads(response.text). The snippet that uses json.loads(response.text) correctly converts the JSON string into a Python dictionary, allowing extraction of the desired field. Other options either misuse attributes or attempt to index non-dictionary objects.

Answer

data = response.content; value = data['field']

Answer

data = response.text.json(); value = data['field']

Answer

data = response.json; value = data['field']

Question 10

A developer is building a Python application that uses the Cisco Meraki Dashboard API to retrieve network events. The API requires an API key for authentication and enforces rate limiting. The developer needs to handle pagination and rate limiting gracefully. Which two practices should the developer implement? (Choose two.)

Accepted Answer

Include the API key in the 'X-Cisco-Meraki-API-Key' header of each request.. The two correct practices are including the API key in the 'X-Cisco-Meraki-API-Key' header for authentication and using the 'Link' header to follow pagination links. These are standard requirements for working with the Meraki Dashboard API. The other options either suggest improper retry behavior, rely on inconsistent headers, or do not address the core needs of authentication and pagination.

Answer

Cache all API responses locally to reduce the number of requests and avoid rate limiting.

Answer

Parse the 'Retry-After' header on 429 responses and wait for the specified number of seconds before retrying.

Answer

Retry failed requests immediately without delay to minimize overall execution time.

Question 11

In the OSI model, which layer is responsible for logical addressing and routing of packets between networks?

Accepted Answer

Layer 3 (Network). Layer 3 (Network) of the OSI model handles logical addressing (IP addresses) and routing of packets between different networks via routers. Layer 2 uses physical MAC addresses for local delivery, and Layer 4 handles end-to-end transport (TCP/UDP ports and segmentation). Thus Layer 3 is the correct answer.

Answer

Layer 1 (Physical)

Answer

Layer 4 (Transport)

Answer

Layer 2 (Data Link)

Question 12

Which transport protocol is connection-oriented and ensures reliable delivery through acknowledgments and retransmissions?

Accepted Answer

TCP. TCP is connection-oriented: it establishes a session via the three-way handshake (SYN, SYN-ACK, ACK), then guarantees reliable, ordered delivery using sequence numbers, acknowledgments, and retransmission of lost segments. These mechanisms ensure data arrives intact and in order.

Answer

IP

Answer

HTTP

Answer

UDP

Question 13

A DNS AAAA record is used to resolve a hostname to what type of address?

Accepted Answer

IPv6 address. A DNS AAAA record maps a hostname to an IPv6 address, analogous to how an A record maps to an IPv4 address. The four A's in 'AAAA' correspond to the 128-bit IPv6 address being four times the 32-bit IPv4 size, making it the standard record type for IPv6 resolution.

Answer

Mail exchange server

Answer

IPv4 address

Answer

Canonical name alias

Question 14

A network engineer is designing a subnet that needs to support 30 usable hosts. Which subnet mask should be used?

Accepted Answer

255.255.255.224 (/27). (255.255.255.224, /27) provides 5 host bits, yielding 2^5 = 32 total addresses per subnet. Subtracting the network and broadcast addresses leaves exactly 30 usable hosts, meeting the requirement precisely.

Answer

255.255.255.240 (/28)

Answer

255.255.255.0 (/24)

Answer

255.255.255.192 (/26)

Question 15

Which HTTP method is idempotent and used to update a resource by sending the full representation?

Accepted Answer

PUT. PUT is idempotent because making the same request multiple times results in the same server state. It requires the client to send a full representation of the resource, replacing any existing resource at that URI. This aligns with RFC 7231, which defines PUT as a method that creates or replaces the target resource with the enclosed representation.

Answer

DELETE

Answer

POST

Answer

GET