200-901 Infrastructure and Automation Practice Test 4 — 15 Questions

Question 1

A Python script uses the ncclient library to connect to a Cisco NX-OS device over NETCONF. After establishing the session, the script executes an editing operation with candidate datastore. Which additional step is required to make the changes take effect immediately on the running configuration?

Accepted Answer

Execute a commit operation on the candidate datastore. Option D is correct because when using NETCONF with the candidate datastore on Cisco NX-OS, changes are staged in the candidate configuration and do not affect the running configuration until a commit operation is explicitly sent. The commit operation copies the candidate configuration to the running datastore, making the changes take effect immediately. Without this step, the candidate changes remain unapplied.

Answer

Execute a discard-changes operation on the candidate datastore

Answer

Execute a validate operation on the candidate datastore

Answer

No additional step is needed; candidate changes are automatically applied to running

Question 2

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

Accepted Answer

Include an API key in the X-Cisco-Meraki-API-Key header. The Meraki Dashboard API uses a simple API key for authentication, not OAuth2 or JWT. The key must be included in the `X-Cisco-Meraki-API-Key` header of every request. This is the only supported method for authenticating with the Meraki API, as documented by Cisco Meraki.

Answer

Provide username and password in the Authorization header with Basic auth

Answer

Use OAuth2 client credentials grant and pass a bearer token

Answer

Generate a JSON Web Token (JWT) signed with a shared secret

Question 3

A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?

Accepted Answer

Linting stage. Linting is the stage that validates syntax and style for code or configuration files. In a CI/CD pipeline for network automation, the linting stage uses tools like `ansible-lint` to check Ansible playbooks for syntax errors, best practices, and idempotency issues before any testing or deployment occurs.

Answer

Integration testing stage

Answer

Deployment stage

Answer

Unit testing stage

Question 4

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

Accepted Answer

To define and manage network infrastructure resources in a declarative state file. Option D is correct because the Cisco Catalyst Center Terraform provider allows network automation engineers to define and manage network infrastructure resources in a declarative state file. Terraform uses a desired-state approach where the configuration file describes the intended end state of resources, and the provider communicates with Catalyst Center's REST API to enforce that state, enabling idempotent and version-controlled infrastructure management.

Answer

To execute a series of CLI commands on network devices in sequence

Answer

To write imperative scripts that configure network devices via SSH

Answer

To directly manage routers and switches without using Catalyst Center

Question 5

A developer is designing a data model for network device configurations using YANG. They need to represent a list of interfaces where each interface has a name (string) and speed (enumeration). Which YANG statement correctly defines this structure?

Accepted Answer

list interface { key name; leaf name { type string; } leaf speed { type enumeration; } }. Option C is correct because YANG requires a `list` statement to define a collection of entries with multiple leafs, and a `key` statement to uniquely identify each list entry. The `list interface` with `key name` allows multiple interfaces, each having both a `name` (string) and `speed` (enumeration), matching the requirement exactly.

Answer

leaf interface-list { type string; }

Answer

leaf-list interface { type string; }

Answer

list interface { leaf name { type string; } leaf speed { type enumeration; } }

Question 6

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Accepted Answer

Inventory files can be written in YAML format. Ansible inventory files define the hosts and groups that Ansible manages. They can be written in YAML format, which is a human-readable data serialization language that Ansible supports alongside the traditional INI format. This flexibility allows users to choose the format that best suits their automation needs, with YAML being particularly useful for complex inventories due to its support for structured data.

Answer

Inventory files cannot contain variables for individual hosts

Answer

Inventory files must be in INI format only

Answer

An inventory file can include a [vars] section to define group variables

Question 7

Which TWO methods are commonly used to discover network devices in an automation environment? (Select exactly 2.)

Accepted Answer

Using LLDP or CDP to retrieve directly connected neighbor information. Option D is correct because LLDP (IEEE 802.1AB) and CDP (Cisco Discovery Protocol) are Layer 2 protocols that allow network devices to advertise their identity, capabilities, and directly connected neighbors. In automation environments, these protocols enable dynamic discovery of the network topology without manual intervention, making them essential for automated inventory and mapping.

Answer

Manually entering device details into a spreadsheet

Answer

Using SNMP to bulk-configure devices

Answer

Monitoring DHCP logs to lease IP addresses to new devices

Question 8

Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)

Accepted Answer

Enables validation of data constraints before applying changes. Option A is correct because YANG (RFC 6020/7950) allows you to define data constraints such as ranges, mandatory elements, and type restrictions directly in the model. When you attempt to apply configuration via NETCONF or RESTCONF, the server validates the data against these constraints before committing, preventing invalid changes from being applied.

Answer

Allows direct execution of CLI commands on any device

Answer

Supports multiple serialization formats like JSON and XML

Question 9

Based on the exhibit, which interface is in a state that prevents it from sending or receiving IP traffic?

Accepted Answer

GigabitEthernet0/1. Interface GigabitEthernet0/1 is in the 'administratively down' state, as indicated by the 'down' status in the 'Status' column and the 'down' in the 'Protocol' column. This means the interface has been manually disabled with the 'shutdown' command, preventing it from sending or receiving any IP traffic. In contrast, interfaces that are 'up/up' can forward traffic, while 'up/down' indicates a Layer 1 issue but still allows Layer 2 control plane traffic.

Answer

GigabitEthernet0/2

Answer

GigabitEthernet0/0

Answer

None of the interfaces are down

Question 10

A Python script sends the above REST API request to a Cisco Catalyst 9000 switch running IOS XE. The response is a 400 Bad Request. Which field is most likely missing from the JSON payload?

Accepted Answer

interface. The REST API request is targeting the creation of a network interface on a Cisco Catalyst 9000 switch running IOS XE. The 400 Bad Request indicates a missing required field in the JSON payload. According to the Cisco IOS XE REST API documentation for the `/api/v1/interface` endpoint, the `interface` field (which specifies the interface name, e.g., 'GigabitEthernet1/0/1') is mandatory when creating a new interface. Without it, the API cannot determine which interface to configure, resulting in a 400 error.

Answer

vlanId

Answer

description

Answer

name

Question 11

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

Accepted Answer

network_cli. The ios_config module is designed for Cisco IOS devices and requires a persistent network connection to send configuration commands. The network_cli connection method establishes an SSH session that remains open for the duration of the playbook task, allowing the module to send multiple CLI commands and handle prompts. This is the recommended connection method for ios_config because it supports privilege escalation and command responses needed for configuration changes.

Answer

local

Answer

netconf

Answer

httpapi

Question 12

An automation engineer is using the Cisco DNA Center REST API to retrieve a list of network devices. The API call returns HTTP status code 200. What does this indicate?

Accepted Answer

The request was successful and data is returned.. HTTP status code 200 indicates a successful GET request where the server has processed the request and is returning the requested data in the response body. In the context of the Cisco DNA Center REST API, a 200 response to a GET /network-device call means the list of network devices was successfully retrieved and is included in the response payload.

Answer

The request succeeded but no content is returned.

Answer

The request was created successfully.

Answer

The request failed due to a client error.

Question 13

A network team uses an Ansible playbook to automate the configuration of multiple Cisco IOS XE devices. The playbook includes the 'ios_config' module. Which of the following best describes the purpose of the 'provider' parameter in the ios_config module?

Accepted Answer

It defines the connection details for the device.. The 'provider' parameter in the ios_config module is a dictionary that encapsulates the connection details required to access the network device, such as hostname, username, password, port, and transport protocol (e.g., SSH). This allows the module to establish a session with the Cisco IOS XE device before applying configuration changes. Without the provider, the module would not know how to reach or authenticate to the target device.

Answer

It identifies the name of the playbook being used.

Answer

It specifies the configuration lines to be applied.

Answer

It sets the timeout for the module execution.

Question 14

A developer is creating a YANG data model for a new interface feature. The model must allow the user to choose from a predefined set of values for the 'duplex' leaf. Which YANG statement should be used to restrict the values to 'full', 'half', and 'auto'?

Accepted Answer

type enumeration { enum full; enum half; enum auto; }. Option D is correct because the 'type enumeration' statement in YANG defines a leaf that can only take one of the explicitly listed enum values. By specifying 'enum full;', 'enum half;', and 'enum auto;', the developer restricts the 'duplex' leaf to exactly those three predefined strings, which matches the requirement.

Answer

choice duplex-options { case full; case half; case auto; }

Answer

type string;

Answer

type leafref { path '/other:duplex-list'; }

Question 15

When using the Cisco Meraki Dashboard API to create an HTTP webhook for network alerts, which authentication method is required in the request header?

Accepted Answer

X-Cisco-Meraki-API-Key: <your_api_key>. The Cisco Meraki Dashboard API requires authentication via a custom HTTP header named `X-Cisco-Meraki-API-Key`, where the value is your API key. This is the only supported method for authenticating requests to the Meraki API, as documented in the official API reference. Option D correctly specifies this header, making it the required authentication method for creating an HTTP webhook for network alerts.

Answer

Authorization: Bearer <token>

Answer

Include the API key as a query parameter.

Answer

Authorization: Basic <base64>