Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

← Infrastructure and Automation practice sets

200-901 Infrastructure and Automation • Complete Question Bank

200-901 Infrastructure and Automation — All Questions With Answers

Complete 200-901 Infrastructure and Automation question bank — all 0 questions with answers and detailed explanations.

111
Questions
Free
No signup
Certifications/200-901/Practice Test/Infrastructure and Automation/All Questions
Question 1easymultiple choice
Open the full VLAN trunking answer →

An engineer needs to automate the deployment of a new VLAN across multiple switches. Which tool is best suited for this task?

Question 2easymultiple choice
Read the full Infrastructure and Automation explanation →

A DevOps team wants to version control their network configurations. Which tool should they use?

Question 3mediummultiple choice
Read the full Infrastructure and Automation explanation →

During an automation script run, a network device returns HTTP 429. What does this indicate?

Question 4mediummultiple choice
Study the full Python automation breakdown →

A network automation engineer is writing a Python script to configure multiple devices. Which library is most appropriate for SSH-based interactions?

Question 5hardmultiple choice
Read the full Infrastructure and Automation explanation →

In a CI/CD pipeline for network changes, which practice best ensures that a configuration push does not disrupt production traffic?

Question 6hardmultiple choice
Read the full Ansible explanation →

An engineer uses Ansible to push a configuration change to 100 switches. The playbook fails on 5 switches. What is the most efficient way to apply the change only to those 5?

Question 7easymultiple choice
Read the full network assurance explanation →

Which protocol is commonly used to retrieve real-time telemetry data from network devices in a streaming fashion?

Question 8mediummultiple choice
Read the full Ansible explanation →

A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?

Question 9hardmultiple choice
Read the full Infrastructure and Automation explanation →

In a network automation workflow, a developer needs to ensure idempotency. What does idempotency mean in this context?

Question 10mediummultiple choice
Review the full routing breakdown →

An engineer is tasked with automating the backup of running configurations from 50 routers. Which approach is most scalable?

Question 11easymultiple choice
Read the full Infrastructure and Automation explanation →

Which data format is most commonly used in REST API requests and responses in modern network automation?

Question 12mediummulti select
Read the full Infrastructure and Automation explanation →

Which TWO of the following are characteristics of a declarative automation model? (Select exactly 2.)

Question 13hardmulti select
Read the full Ansible explanation →

Which THREE of the following are best practices for writing Ansible playbooks for network automation? (Select exactly 3.)

Question 14mediummulti select
Read the full REST/YANG explanation →

Which TWO of the following are benefits of using NETCONF over SNMP for network automation? (Select exactly 2.)

Question 15hardmulti select
Study the full Python automation breakdown →

Which THREE of the following are valid methods to handle API rate limiting in a Python automation script? (Select exactly 3.)

Question 16mediummultiple choice
Read the full DHCP explanation →

Refer to the exhibit. An automation script expects the interface IP address to be configured via DHCP. Based on the output, what is the current configuration source for the IP address?

Exhibit

Refer to the exhibit.

R1#show run | section interface GigabitEthernet0/1
interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 duplex auto
 speed auto
!
R1#show ip interface GigabitEthernet0/1
GigabitEthernet0/1 is up, line protocol is up
  Internet address is 192.168.1.1/24
  Broadcast address is 255.255.255.255
  Address determined by non-volatile memory
  MTU is 1500 bytes
  Helper address is not set
  Directed broadcast forwarding is disabled
  Outgoing access list is not set
  Inbound  access list is not set
Question 17hardmultiple choice
Study the full Python automation breakdown →

Refer to the exhibit. A Python script uses the YANG model to configure the interface. After applying this JSON payload via a PATCH request, what is the expected operational state of the interface?

Exhibit

Refer to the exhibit.

{
  "ietf-interfaces:interface": {
    "name": "GigabitEthernet0/1",
    "description": "Link to Core",
    "type": "iana-if-type:ethernetCsmacd",
    "enabled": false,
    "ietf-ip:ipv4": {
      "address": [
        {
          "ip": "10.10.10.1",
          "netmask": "255.255.255.0"
        }
      ]
    }
  }
}
Question 18easymultiple choice
Read the full Ansible explanation →

Refer to the exhibit. An Ansible playbook targeting a Cisco IOS device fails with this error. What is the most likely cause?

Exhibit

Refer to the exhibit.

Error: 'Failed to authenticate to device 192.168.1.100:22'
Question 19hardmultiple choice
Read the full Ansible explanation →

You are a network automation engineer at a large enterprise. The network consists of 200 Cisco Catalyst switches distributed across five data centers. Each switch runs IOS-XE and supports NETCONF. Your team uses a centralized Ansible control node to manage configurations. Recently, the security team mandated that all management access must use SSH keys instead of passwords. You updated the Ansible inventory to use SSH keys and tested on a few switches successfully. However, when you run the playbook against all switches, about 30 switches fail with the error: 'Authentication failed.' You verify that the SSH public key is correctly deployed on those switches via the console. What is the most likely cause of the failure?

Question 20hardmultiple choice
Read the full Ansible explanation →

You are automating the deployment of a new software image on a fleet of Cisco Nexus switches using Ansible. The switches are in a production environment and must have minimal downtime. You have a maintenance window of 30 minutes per switch. Your playbook performs the following steps: 1) Copy the image to the switch via SCP, 2) Set the boot variable to the new image, 3) Save the configuration, 4) Reload the switch. During a dry run on a test switch, you notice that the reload step takes 8 minutes, but the copy step takes 15 minutes due to slow link speed. For the production rollout, you need to reduce the overall time per switch. Which approach should you take?

Question 21mediummultiple choice
Open the full VLAN trunking answer →

A network engineer is automating the deployment of VLANs across multiple switches using Ansible. The playbook fails with an error indicating that the VLAN ID already exists on one of the switches. Which approach should the engineer use to ensure the playbook completes without errors?

Question 22hardmulti select
Read the full Infrastructure and Automation explanation →

Which TWO statements accurately describe characteristics of infrastructure as code (IaC) in network automation?

Question 23hardmultiple choice
Study the full QoS explanation →

Refer to the exhibit. A network engineer applies this JSON-based QoS policy to a Cisco device using NETCONF/YANG. Which statement best describes the expected behavior for traffic from 10.0.0.0/24 with DSCP EF?

Exhibit

Refer to the exhibit.

{
  "policy": {
    "name": "QoS-Policy",
    "match": {
      "dscp": "EF",
      "source_ip": "10.0.0.0/24"
    },
    "action": {
      "set_dscp": "AF41",
      "police": {
        "cir": "100000000",
        "bc": "10000000",
        "conform_action": "transmit",
        "exceed_action": "drop"
      }
    }
  }
}
Question 24easymultiple choice
Open the full VLAN trunking answer →

A DevOps team manages a hybrid cloud environment with on-premises Cisco Nexus switches and AWS VPCs using Terraform. They have a configuration management tool that pushes VLAN and interface configurations to the Nexus switches. Recently, they noticed that after a Terraform run that updates the AWS VPC subnets, some on-premises switches lose connectivity to the cloud. The team suspects a mismatch between the VLAN configurations on the Nexus switches and the AWS VPC subnets. They have a centralized source of truth stored in a Git repository containing YAML files for network definitions. Which action should the team take first to resolve the issue and prevent future occurrences?

Question 25mediumdrag order
Review the full OSPF breakdown →

Drag and drop the steps to configure OSPF on a Cisco router into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 26mediummatching
Read the full Infrastructure and Automation explanation →

Match each JSON data type to its example.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

"hello"

42

true

[1, 2, 3]

{"key": "value"}

Question 27easymultiple choice
Read the full Ansible explanation →

A developer wants to automate the configuration of multiple Cisco IOS-XE devices using Ansible. Which protocol should be used to ensure secure and idempotent configuration updates?

Question 28easymultiple choice
Study the full Python automation breakdown →

A team is using Python scripts with netmiko to back up configurations from a large number of network devices. What is the primary advantage of using netmiko over direct paramiko for this task?

Question 29easymultiple choice
Read the full Infrastructure and Automation explanation →

An automation engineer wants to programmatically retrieve the interface configuration of a Cisco Nexus switch using NX-API. Which API call method is most appropriate?

Question 30mediummultiple choice
Open the full VLAN trunking answer →

A network administrator is tasked with automating the deployment of a new VLAN configuration across a fabric of Cisco ACI switches. Which automation tool is best suited for interacting with the APIC REST API?

Question 31mediummultiple choice
Read the full Ansible explanation →

During a CI/CD pipeline for network changes, a Jenkins job runs an Ansible playbook that applies configuration to a device. The playbook fails with a timeout error. What is the most likely cause?

Question 32mediummultiple choice
Study the full Python automation breakdown →

A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?

Question 33hardmultiple choice
Read the full DHCP explanation →

An organization implements zero-touch provisioning (ZTP) for new Cisco routers using DHCP and TFTP. The provision script is not being executed even though the device obtains an IP address. The DHCP server logs show the option 67 (bootfile-name) and option 150 (tftp-server) are set. What is the most probable reason?

Question 34hardmultiple choice
Study the full ACL explanation →

A network engineer uses Ansible to apply a standard ACL to multiple routers. The playbook runs without errors, but the ACL is not applied on some routers. Upon checking, those routers have a different configuration revision due to a previous manual change. What is the best practice to ensure consistent application?

Question 35hardmultiple choice
Read the full Ansible explanation →

In a CI/CD pipeline for network automation, a change is rolled back using a Git revert commit that triggers a new pipeline. The rollback playbook fails because the 'previous' configuration snapshot is missing. What should be implemented to prevent this?

Question 36easymulti select
Read the full REST/YANG explanation →

Which TWO of the following are characteristics of the YANG data modeling language that make it suitable for network automation? (Select two)

Question 37mediummulti select
Read the full Infrastructure and Automation explanation →

Which TWO tools are commonly used for automated network compliance checking against a desired state? (Select two)

Question 38hardmulti select
Read the full Infrastructure and Automation explanation →

Which THREE practices help ensure idempotent network automation? (Select three)

Question 39easymultiple choice
Read the full Ansible explanation →

An automation script using Ansible tries to configure IP address 192.168.1.2 on GigabitEthernet0/1. After running, the interface remains administratively down. What is the first thing to check?

Exhibit

Refer to the exhibit.

Router# show ip interface brief
Interface             IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0    192.168.1.1     YES NVRAM  up                    up      
GigabitEthernet0/1    unassigned      YES NVRAM  administratively down down
Question 40mediummultiple choice
Open the full VLAN trunking answer →

An automation engineer runs a Python script using the Cisco NXOS NX-API to retrieve the interface configuration. The JSON response shows the 'switchport access vlan' as '10'. However, VLAN 10 does not exist in the VLAN database. What is the expected behavior of the switch regarding this interface?

Exhibit

Refer to the exhibit.

! From a Nexus switch:
interface Ethernet1/1
  description Connected to Server
  switchport mode access
  switchport access vlan 10
  spanning-tree portfast
  no shutdown
Question 41hardmultiple choice
Read the full REST/YANG explanation →

A NETCONF manager sends a get-config request to a Cisco device and receives the above reply. The automation script expected the interface to be enabled. Which of the following is the best course of action to remediate the issue?

Exhibit

Refer to the exhibit.

<rpc-reply message-id="101" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
  <data>
    <interfaces xmlns="http://openconfig.net/yang/interfaces">
      <interface>
        <name>GigabitEthernet0/1</name>
        <config>
          <enabled>false</enabled>
        </config>
      </interface>
    </interfaces>
  </data>
</rpc-reply>
Question 42easymultiple choice
Read the full Ansible explanation →

A network engineer wants to automate the configuration of multiple Cisco IOS devices using Ansible. What is the minimum requirement on the control node to execute Ansible playbooks against these devices?

Question 43mediummultiple choice
Study the full Python automation breakdown →

A developer is using Python requests library to interact with a Cisco IOS XE device's REST API. The call returns a 400 Bad Request status. The payload is correctly formatted JSON. What is the most likely cause?

Question 44hardmultiple choice
Read the full Infrastructure and Automation explanation →

A DevOps team manages network infrastructure using Infrastructure as Code (IaC). They store configuration files in a Git repository and use CI/CD to deploy changes. What is the best practice to ensure that only validated configurations are applied to production devices?

Question 45easymultiple choice
Read the full REST/YANG explanation →

A YANG module defines a leaf named 'bandwidth' of type 'uint32'. What does this represent in the context of a network device?

Question 46mediummultiple choice
Study the full Python automation breakdown →

A Python script uses the ncclient library to connect to a Cisco NX-OS device over NETCONF. After establishing the session, the script executes an editing operation with candidate datastore. Which additional step is required to make the changes take effect immediately on the running configuration?

Question 47hardmultiple choice
Read the full wireless explanation →

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

Question 48easymultiple choice
Read the full Ansible explanation →

A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?

Question 49mediummultiple choice
Read the full Infrastructure and Automation explanation →

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

Question 50hardmultiple choice
Read the full REST/YANG explanation →

A developer is designing a data model for network device configurations using YANG. They need to represent a list of interfaces where each interface has a name (string) and speed (enumeration). Which YANG statement correctly defines this structure?

Question 51easymulti select
Read the full Ansible explanation →

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Question 52mediummulti select
Read the full Infrastructure and Automation explanation →

Which TWO methods are commonly used to discover network devices in an automation environment? (Select exactly 2.)

Question 53hardmulti select
Read the full REST/YANG explanation →

Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)

Question 54mediummultiple choice
Read the full Infrastructure and Automation explanation →

Based on the exhibit, which interface is in a state that prevents it from sending or receiving IP traffic?

Exhibit

Refer to the exhibit.

Router# show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0     192.168.1.1     YES NVRAM  up                    up
GigabitEthernet0/1     unassigned      YES unset  administratively down down
GigabitEthernet0/2     10.10.10.1      YES manual up                    up
Question 55hardmultiple choice
Study the full Python automation breakdown →

A Python script sends the above REST API request to a Cisco Catalyst 9000 switch running IOS XE. The response is a 400 Bad Request. Which field is most likely missing from the JSON payload?

Exhibit

Refer to the exhibit.

POST /api/v1/vlan HTTP/1.1
Host: 192.168.1.100
Authorization: Bearer <token>
Content-Type: application/json

{
    "name": "Engineering",
    "vlanId": 10
}
Question 56easymultiple choice
Read the full Ansible explanation →

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

Exhibit

Refer to the exhibit.

---
- name: Configure interfaces
  hosts: switches
  gather_facts: no
  tasks:
    - name: Set interface description
      ios_config:
        lines:
          - description Lab-Interface
        parents: interface GigabitEthernet0/1
Question 57easymultiple choice
Read the full Infrastructure and Automation explanation →

An automation engineer is using the Cisco DNA Center REST API to retrieve a list of network devices. The API call returns HTTP status code 200. What does this indicate?

Question 58mediummultiple choice
Read the full Ansible explanation →

A network team uses an Ansible playbook to automate the configuration of multiple Cisco IOS XE devices. The playbook includes the 'ios_config' module. Which of the following best describes the purpose of the 'provider' parameter in the ios_config module?

Question 59hardmultiple choice
Read the full REST/YANG explanation →

A developer is creating a YANG data model for a new interface feature. The model must allow the user to choose from a predefined set of values for the 'duplex' leaf. Which YANG statement should be used to restrict the values to 'full', 'half', and 'auto'?

Question 60easymultiple choice
Read the full Infrastructure and Automation explanation →

When using the Cisco Meraki Dashboard API to create an HTTP webhook for network alerts, which authentication method is required in the request header?

Question 61mediummultiple choice
Read the full Infrastructure and Automation explanation →

A DevOps engineer is implementing Infrastructure as Code (IaC) for network devices. Which of the following practices is most critical to ensure that the environment state matches the desired configuration defined in code?

Question 62hardmultiple choice
Read the full REST/YANG explanation →

A network engineer attempts to use RESTCONF to retrieve the running configuration of a Cisco IOS XE device. The GET request to '/restconf/data/Cisco-IOS-XE-native:native' returns a 405 Method Not Allowed error. What is the most likely cause?

Question 63easymultiple choice
Study the full Python automation breakdown →

In a Python script using the 'requests' library to interact with Cisco DNA Center API, which function call is used to send a POST request with JSON data?

Question 64mediummultiple choice
Read the full Infrastructure and Automation explanation →

A team uses Chef to manage network device configurations. Which component of Chef is responsible for storing configuration policy and distributing it to nodes?

Question 65hardmultiple choice
Read the full REST/YANG explanation →

When using NETCONF to edit the configuration of a Cisco IOS XE device, an engineer receives an <rpc-error> with error-tag 'in-use' and error-app-tag 'data-exists'. What does this error indicate?

Question 66easymulti select
Read the full Ansible explanation →

Which TWO Ansible modules are commonly used for automating Cisco IOS devices?

Question 67mediummulti select
Read the full Infrastructure and Automation explanation →

Which THREE of the following are key principles of Infrastructure as Code (IaC) as applied to network automation?

Question 68hardmulti select
Read the full Ansible explanation →

A network automation engineer uses Ansible to manage a group of Cisco IOS XE devices. The playbook fails with 'unreachable' for some devices. Which TWO actions should the engineer take to troubleshoot the connectivity?

Question 69mediummultiple choice
Read the full REST/YANG explanation →

A NETCONF RPC reply indicates a validation failure. Based on the exhibit, what is the most probable reason for the failure?

Exhibit

Refer to the exhibit.

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
  <rpc-error>
    <error-type>protocol</error-type>
    <error-tag>operation-failed</error-tag>
    <error-severity>error</error-severity>
    <error-message>
      Edit operation failed: the candidate configuration does not pass validation.
    </error-message>
    <error-info>
      <bad-element>mtu</bad-element>
      <bad-namespace>urn:cisco:params:xml:ns:yang:Cisco-IOS-XE-native</bad-namespace>
    </error-info>
  </rpc-error>
</rpc-reply>
Question 70hardmultiple choice
Read the full REST/YANG explanation →

A network engineer wants to programmatically enable an interface using the YANG model shown. Which XPath expression correctly targets the 'shutdown' leaf for GigabitEthernet0/1?

Network Topology
rw interfaces+rw GigabitEthernet* [name]rw name stringrw description? stringrw iprw shutdown? boolean| +rw address?rw primaryrw address inet:ipv4-addressrw mask inet:ipv4-addressRefer to the exhibit.module: Cisco-IOS-XE-interface
Question 71easymultiple choice
Study the full Python automation breakdown →

A developer uses the Cisco DNA Center API to retrieve device inventory. The JSON response is shown. Which Python code snippet correctly extracts the serial number?

Exhibit

Refer to the exhibit.

{
    "response": [
        {
            "hostname": "Core-Router",
            "managementIpAddress": "10.1.1.1",
            "platformId": "ISR4451-X",
            "serialNumber": "F0C1234A5B6",
            "lastUpdated": "2023-11-28T15:30:00.000+00:00"
        }
    ],
    "version": "2.0.0"
}
Question 72easymultiple choice
Read the full Infrastructure and Automation explanation →

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

Question 73mediummultiple choice
Read the full Ansible explanation →

A network automation engineer is writing an Ansible playbook to configure interface descriptions on Cisco IOS-XE devices. The playbook uses the ios_config module. Which attribute should be used to ensure idempotency and only apply changes when the interface does not already have the desired description?

Question 74hardmultiple choice
Read the full network assurance explanation →

A Cisco DevNet engineer is configuring model-driven telemetry on a Cisco IOS-XE device. The telemetry subscription includes the following path: 'Cisco-IOS-XE-native:native/interface/GigabitEthernet[Name='1/0/1']/ip/address'. Which part of this path identifies a specific list instance?

Question 75mediummultiple choice
Read the full Infrastructure and Automation explanation →

Refer to the exhibit. Based on the output, which interface is experiencing a Layer 2 issue?

Exhibit

Refer to the exhibit.

ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet1       10.1.1.1        YES NVRAM  up                    up
GigabitEthernet2       unassigned      YES unset  up                    up
Serial0/0/0            192.168.1.1     YES NVRAM  up                    down
Loopback0              1.1.1.1         YES NVRAM  up                    up
Question 76easymulti select
Read the full REST/YANG explanation →

Which TWO are valid capabilities advertised during a NETCONF session?

Question 77mediummultiple choice
Read the full Infrastructure and Automation explanation →

A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?

Question 78easymultiple choice
Read the full Infrastructure and Automation explanation →

Which tool is designed for infrastructure as code, uses a declarative language, and can automate configuration management across multiple devices?

Question 79hardmultiple choice
Read the full REST/YANG explanation →

Refer to the exhibit. Based on the YANG model snippet, what is the data type of the 'mask' leaf?

Exhibit

Refer to the exhibit.

yang-module: Cisco-IOS-XE-native
  container native
    container ip
      list route
        key "prefix mask"
        leaf prefix { type inet:ipv4-address; }
        leaf mask { type inet:ipv4-prefix-length; }
        leaf next-hop { type inet:ipv4-address; }
Question 80mediummulti select
Read the full Infrastructure and Automation explanation →

Which THREE are common best practices for implementing CI/CD in network automation?

Question 81hardmultiple choice
Read the full Infrastructure and Automation explanation →

Using the Cisco DNA Center API, an engineer wants to create a new site with building and floor information. Which HTTP method and endpoint should be used?

Question 82easymultiple choice
Read the full Ansible explanation →

Refer to the exhibit. An Ansible playbook is intended to set the description on GigabitEthernet0/1. However, the playbook fails because the device does not have that interface. What is the most likely reason?

Exhibit

Refer to the exhibit.

---
- name: Configure interface description
  hosts: cisco_devices
  gather_facts: no
  tasks:
    - name: Set description
      ios_config:
        lines:
          - description Configured by Ansible
        parents: interface GigabitEthernet0/1
Question 83mediummultiple choice
Read the full Infrastructure and Automation explanation →

A developer is using Git to manage automation code. What is the primary advantage of using 'rebase' instead of 'merge' to integrate changes from a feature branch into the main branch?

Question 84hardmulti select
Read the full network assurance explanation →

Which TWO statements correctly describe differences between model-driven telemetry and traditional SNMP polling?

Question 85hardmultiple choice
Study the full Python automation breakdown →

A Python script using the ncclient library connects to a Cisco IOS-XE device to retrieve the running configuration. The script raises an exception: 'TimeoutError: Session timed out'. Which is the most likely cause?

Question 86easymultiple choice
Read the full REST/YANG explanation →

What is the default transport protocol for NETCONF sessions?

Question 87easymultiple choice
Read the full Infrastructure and Automation explanation →

An engineer needs to automate the backup of configuration files from multiple Cisco IOS devices to a central server. Which protocol is most appropriate for pushing configurations from the devices to the server?

Question 88easymultiple choice
Read the full REST/YANG explanation →

A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?

Question 89easymultiple choice
Read the full REST/YANG explanation →

Which tool is specifically designed for model-driven programmability using YANG data models?

Question 90mediummultiple choice
Read the full Infrastructure and Automation explanation →

A network team is implementing automation to provision new switchports across a campus network. They decide to use a controller-based approach with Cisco DNA Center. What is the primary advantage of using DNA Center for this task?

Question 91mediummultiple choice
Review the full OSPF breakdown →

An engineer is writing a Python script using the Cisco DevNet sandbox to configure OSPF on a CSR1000v via RESTCONF. What authentication method is typically used for RESTCONF requests?

Question 92mediummultiple choice
Read the full Ansible explanation →

A company uses Ansible to automate network configuration. They have an Ansible control node that must reach all network devices. Which transport protocol does Ansible use by default to connect to Cisco IOS devices?

Question 93hardmultiple choice
Study the full SD-Access breakdown →

A large enterprise uses Cisco SD-Access with fabric automation. The network administrator wants to automate the process of adding a new user device to a specific virtual network (VN) based on its MAC address. Which API or tool should they use?

Question 94hardmultiple choice
Read the full REST/YANG explanation →

An engineer is troubleshooting a NETCONF session that fails to establish with a Cisco IOS XE device. The SSH connection succeeds, but NETCONF capabilities are not exchanged. What is the most likely cause?

Question 95hardmultiple choice
Read the full Infrastructure and Automation explanation →

A DevOps team uses a CI/CD pipeline to deploy network configurations. They want to ensure that only authorized network engineers can trigger changes to production devices. Which integration is most appropriate?

Question 96easymulti select
Read the full Ansible explanation →

An engineer is automating the configuration of SNMP on Cisco routers using Ansible. Which two modules are commonly used for this purpose? (Select TWO)

Question 97mediummulti select
Read the full REST/YANG explanation →

A network automation solution uses YANG data models to describe network configurations. Which THREE statements about YANG are true? (Select THREE)

Question 98hardmulti select
Read the full Infrastructure and Automation explanation →

When implementing network automation with Cisco devices, which THREE practices help ensure idempotency? (Select THREE)

Question 99easymultiple choice
Open the full VLAN trunking answer →

A network administrator is managing a small office with 10 Cisco 9200 switches. They want to automate the deployment of a standard base configuration (VLANs, STP, management access) to all switches. They have a Linux server with Ansible installed. The administrator writes a playbook that uses the 'ios_config' module to apply configuration blocks. However, when they run the playbook against the first switch, it fails with an authentication error. The administrator can SSH to the switch manually using the same credentials. What is the most likely cause of the failure?

Question 100mediummultiple choice
Read the full wireless explanation →

A large enterprise uses Cisco DNA Center to manage their campus network. They have deployed fabric technology for SD-Access. The network team wants to use the DNA Center REST API to automate the addition of new wireless users to a specific virtual network (VN) based on their location (building). They have identified the API endpoint for creating a user device in the fabric. However, when they send a POST request with the appropriate JSON body, they receive a 400 Bad Request error. The JSON payload includes the mandatory fields for hostname, MAC address, and VN name. What is the most likely cause of the error?

Question 101hardmultiple choice
Study the full Python automation breakdown →

A network automation engineer is developing a Python script that uses the NETCONF protocol to retrieve the running configuration from a Cisco IOS XE device. They use the ncclient library. The script works on the test device but fails on a production device with an error: "ncclient.transport.errors.AuthenticationError: Authentication exception". The engineer verifies that the SSH credentials (username and password) are correct and that the production device is reachable via SSH on port 830. What is the most likely issue?

Question 102mediummultiple choice
Open the full VLAN trunking answer →

An engineer needs to automate the deployment of VLAN configurations on a fleet of Cisco Catalyst 9000 switches running IOS-XE. The team uses Ansible Tower for automation. Which Ansible module should be used to push VLAN configuration idempotently?

Question 103hardmulti select
Read the full REST/YANG explanation →

Which TWO of the following are true about NETCONF capabilities as defined in RFC 6241?

Question 104easymultiple choice
Read the full network assurance explanation →

Based on the exhibit, what is the frequency of the telemetry subscription?

Exhibit

Refer to the exhibit.

telemetry ietf subscription 101
 encoding encode-kvgpb
 filter xpath /interfaces/interface[name='GigabitEthernet1']/oper-status
 source-address 10.1.1.1
 stream yang-push
 update-policy periodic 500
Question 105hardmultiple choice
Study the full Python automation breakdown →

A large enterprise uses Cisco DNA Center to manage over 500 network devices across multiple sites. The network operations team wants to automate the validation of device compliance with a baseline configuration. They have a Python script that uses the Cisco DNA Center REST API to retrieve the device configuration and compare it against a golden configuration stored in a local file. Recently, the script started failing with a 401 HTTP response code when trying to authenticate. The team confirmed the username and password are correct and that the DNA Center server is reachable. The script uses the /api/system/v1/auth/token endpoint to obtain a token. Which of the following is the most likely cause of the 401 error?

Question 106mediummultiple choice
Open the full VLAN trunking answer →

A network administrator automates the provisioning of Meraki MX security appliances using the Meraki Dashboard API. The Python script reads a CSV file with site details and creates VLANs, firewall rules, and VPN settings. Recently, the script started throwing an HTTP 429 error. The script is single-threaded and makes fewer than 10 requests per second. Which of the following is the most likely cause of the 429 error?

Question 107mediummultiple choice
Open the full VLAN trunking answer →

A DevOps team uses Ansible to configure Cisco Nexus switches for a new data center. They have a playbook that uses the nxos_vlan module to create VLANs and nxos_interface module to assign access VLANs. The playbook runs successfully on the first Nexus switch but fails on the second with error: 'module_stderr: ntclib: error: unable to connect to switch'. Both switches are reachable via ping and SSH from the Ansible control node. The inventory file has the same SSH credentials for both switches. What is the most likely cause of the connection failure on the second switch?

Question 108easymultiple choice
Study the full Python automation breakdown →

A junior developer is writing a Python script to gather interface statistics from a Cisco IOS-XE device using NETCONF. They use the 'ncclient' library and successfully connect. They want to retrieve the operational status of all interfaces. Which YANG model and XPATH expression should they use to get the operational data?

Question 109easymulti select
Read the full Infrastructure and Automation explanation →

Which TWO of the following are commonly used protocols for network automation?

Question 110hardmultiple choice
Read the full Infrastructure and Automation explanation →

Refer to the exhibit. A developer receives this response when making a POST request to the Cisco DNA Center API to create a new device. What is the most likely issue?

Exhibit

{"error":{"code":400,"message":"Invalid request: missing required parameter 'ipAddress'","details":null}}
Question 111mediummultiple choice
Read the full Ansible explanation →

A company uses Ansible to automate configuration of its Cisco IOS XE routers. The network team recently upgraded the routers' software from IOS 15.x to IOS XE 17.x. Since the upgrade, the Ansible playbook fails intermittently with the message: 'Failed to connect to the host via ssh: timed out'. However, the team can SSH manually to the routers from the Ansible control node without issues. The playbook uses the 'cisco.ios.ios_config' module with default SSH options. The routers have been configured with SSH version 2 and local authentication. The Ansible control node runs Red Hat Enterprise Linux 8. Which action should the network engineer take to resolve the issue?

Practice tests

Scored 10-question sessions with instant feedback and explanations.

200-901 Practice Test 1 — 10 Questions→200-901 Practice Test 2 — 10 Questions→200-901 Practice Test 3 — 10 Questions→200-901 Practice Test 4 — 10 Questions→200-901 Practice Test 5 — 10 Questions→200-901 Practice Exam 1 — 20 Questions→200-901 Practice Exam 2 — 20 Questions→200-901 Practice Exam 3 — 20 Questions→200-901 Practice Exam 4 — 20 Questions→Free 200-901 Practice Test 1 — 30 Questions→Free 200-901 Practice Test 2 — 30 Questions→Free 200-901 Practice Test 3 — 30 Questions→200-901 Practice Questions 1 — 50 Questions→200-901 Practice Questions 2 — 50 Questions→200-901 Exam Simulation 1 — 100 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Software Development and DesignUnderstanding and Using APIsCisco Platforms and DevelopmentApplication Deployment and SecurityInfrastructure and AutomationNetwork Fundamentals

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios→

Continue studying

All Infrastructure and Automation setsAll Infrastructure and Automation questions200-901 Practice Hub