200-901 Multiple Select — 20 Questions

Question 1

Which two authentication methods are commonly used with Cisco APIs? (Choose two.)

Accepted Answer

Basic Authentication over HTTPS. Basic Authentication over HTTPS is commonly used with Cisco APIs because it sends a base64-encoded username:password pair in the Authorization header, which is a simple and widely supported method for authenticating REST API requests. Cisco's REST APIs, such as those on DNA Center and Meraki, often accept Basic Auth as a fallback or for legacy integration, though it is less secure than token-based methods.

Answer

SNMPv3

Answer

SSH Key

Answer

RADIUS

Question 2

Which THREE are valid ways to expose ConfigMap data to a pod in Kubernetes?

Accepted Answer

As environment variables. Kubernetes allows ConfigMap data to be exposed as environment variables inside a pod using the `env` or `envFrom` field in the pod spec. This is a common method for injecting configuration into containers without modifying the container image.

Answer

As a Kubernetes Secret

Answer

As a container image label

Question 3

A DevOps engineer is managing a Git repository and wants to discard local changes to a file and revert it to the last committed state. Which TWO commands can accomplish this? (Choose two.)

Accepted Answer

git checkout -- . Both `git checkout -- ` and `git restore ` discard unstaged local changes to a file, reverting it to the content of the last commit (HEAD). `git checkout -- ` is the traditional command, while `git restore ` is the newer, more intuitive alternative introduced in Git 2.23. Both operate on the working tree without affecting the staging area or commit history.

Answer

git reset --hard HEAD

Answer

git stash drop

Answer

git revert <file>

Question 4

Which TWO statements about the MVC pattern are correct? (Choose two.)

Accepted Answer

Controller handles user input and updates the Model.. MVC separates Model (data), View (UI), Controller (logic). Controller updates Model, View reflects Model.

Answer

Model is dependent on the View.

Answer

Model represents the user interface.

Answer

View directly modifies the Model.

Question 5

Which two Meraki Dashboard API features are used to paginate through large result sets? (Choose two.)

Accepted Answer

startingAfter and endingBefore parameters. Meraki supports Link header for standard pagination and startingAfter/endingBefore parameters for cursor-based pagination.

Answer

offset and limit parameters

Answer

page and perPage query parameters

Answer

Retry-After header

Question 6

Which TWO Ansible modules are commonly used for automating Cisco IOS devices?

Accepted Answer

ios_config. The `ios_config` module is correct because it is specifically designed to manage Cisco IOS device configurations by sending configuration commands via SSH or Telnet, using the CLI to apply changes to the running or startup configuration. This module is part of Ansible's `cisco.ios` collection and directly supports the IOS operating system, making it the standard choice for automating configuration tasks on Cisco IOS devices.

Answer

junos_config

Answer

nxos_command

Answer

eos_config

Question 7

When implementing network automation with Cisco devices, which THREE practices help ensure idempotency? (Select THREE)

Accepted Answer

Performing a full configuration replace using RESTCONF PUT instead of PATCH.. A full configuration replace using RESTCONF PUT ensures idempotency by setting the entire configuration to a known state, regardless of the current state. Unlike PATCH, which applies incremental changes that may behave differently depending on the existing configuration, PUT overwrites the entire resource, guaranteeing the same result every time it is executed.

Answer

Writing scripts that only push incremental configurations.

Answer

Relying on manual rollback procedures after automation failures.

Question 8

Which three of the following are common data formats used with REST APIs on Cisco platforms?

Accepted Answer

JSON. JSON (JavaScript Object Notation) is a lightweight, text-based data interchange format that is natively supported by most programming languages and REST APIs. Cisco platforms, such as Cisco DNA Center and Cisco Meraki, use JSON as the primary data format for API requests and responses because it is easy to parse and has a compact structure. JSON's key-value pair syntax aligns well with RESTful principles, making it the most common choice for modern Cisco REST APIs.

Answer

CSV

Answer

HTML

Question 9

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Accepted Answer

Inventory files can be written in YAML format. Ansible inventory files define the hosts and groups that Ansible manages. They can be written in YAML format, which is a human-readable data serialization language that Ansible supports alongside the traditional INI format. This flexibility allows users to choose the format that best suits their automation needs, with YAML being particularly useful for complex inventories due to its support for structured data.

Answer

Inventory files cannot contain variables for individual hosts

Answer

Inventory files must be in INI format only

Answer

An inventory file can include a [vars] section to define group variables

Question 10

A developer is using the Meraki Dashboard API to list all organizations. Which TWO of the following are true regarding pagination in the Meraki API? (Choose TWO.)

Accepted Answer

The Link header contains URLs for the next and previous pages.. Meraki API pagination uses Link header or startingAfter/endingBefore query parameters.

Answer

Page size is fixed at 1000 items per page.

Answer

Pagination is optional and disabled by default.

Answer

Pagination requires the use of OAuth tokens.

Question 11

Which THREE are valid methods for managing Kubernetes application configuration?

Accepted Answer

Helm values.. Helm values (A) are correct because Helm is a package manager for Kubernetes that uses values.yaml files to inject configuration into templates at deployment time, enabling dynamic, environment-specific application configuration without modifying the underlying chart. This is a standard method for managing Kubernetes application configuration in production workflows.

Answer

Operator custom resources.

Answer

Environment variables in the Dockerfile.

Question 12

A network administrator is using Cisco DNA Center APIs to automate network changes. Which two API categories are used to perform configuration deployments? (Choose two.)

Accepted Answer

Platform. DNAC API categories: 'Change your network' includes template deployment and PnP; 'Platform' includes task management for monitoring deployment status.

Answer

Know your network

Answer

Run your network

Answer

Event notifications

Question 13

Which THREE of the following are characteristics of IPv6? (Select exactly three.)

Accepted Answer

IPv6 does not have a built-in NAT requirement.. IPv6 was designed without a built-in requirement for Network Address Translation (NAT) because its vast 128-bit address space allows every device to have a globally unique public IP address. Unlike IPv4, which relies on NAT to conserve limited address space, IPv6 restores end-to-end connectivity by default, eliminating the need for address translation at the network edge.

Answer

IPv6 addresses are 32 bits in length.

Answer

IPv6 uses ARP to resolve MAC addresses.

Question 14

A network automation solution uses YANG data models to describe network configurations. Which THREE statements about YANG are true? (Select THREE)

Accepted Answer

YANG can be used in conjunction with NETCONF and RESTCONF.. YANG is a data modeling language that defines the structure and constraints of configuration and state data, and it is designed to be used with NETCONF (RFC 6241) and RESTCONF (RFC 8040) as the transport protocols. This makes option A correct because YANG models are encoded in XML or JSON and exchanged via these protocols.

Answer

YANG models are always written in XML syntax.

Answer

YANG is a replacement for SNMP.

Question 15

Which TWO are common authentication methods used when interacting with Cisco APIs?

Accepted Answer

HTTP Basic Authentication. HTTP Basic Authentication (option B) is a common method for authenticating to Cisco APIs, where the client sends a base64-encoded username:password string in the Authorization header. API keys in HTTP headers (option C) are also widely used, especially with REST APIs like Cisco DNA Center or Meraki, where the key is passed in a custom header (e.g., 'X-Cisco-Meraki-API-Key'). Both are simple, stateless mechanisms supported by many Cisco platforms.

Answer

Client certificate exchange

Answer

LDAP bind credentials

Answer

SNMPv3 authentication

Question 16

Which TWO of the following are valid OAuth 2.0 grant types? (Select TWO)

Accepted Answer

Client credentials. Authorization code and client credentials are standard grant types. Basic is not OAuth 2.0. API key is a different authentication method. Implicit is deprecated.

Answer

API key

Answer

Basic authentication

Answer

Implicit grant

Question 17

A network engineer needs to create a new subnet that can support at least 50 usable host addresses for a development environment. Which TWO subnet masks would meet this requirement? (Choose two.)

Accepted Answer

255.255.255.128 (/25). (255.255.255.128 /25) provides 126 usable host addresses (2^(32-25) - 2 = 126), which exceeds the requirement of 50. Option C (255.255.255.192 /26) provides 62 usable host addresses (2^(32-26) - 2 = 62), also meeting the requirement. Both masks are valid because they yield at least 50 usable IPs for the development subnet.

Answer

255.255.255.224 (/27)

Answer

255.255.255.248 (/29)

Answer

255.255.255.240 (/28)

Question 18

A Python script needs to iterate over a dictionary of network interfaces and print each interface name and its IP address. The dictionary is structured as: {'GigabitEthernet1/0/1': '10.1.1.1', 'GigabitEthernet1/0/2': None}. Which THREE code snippets correctly iterate and print the key-value pairs, skipping entries with None? (Choose three.)

Accepted Answer

for iface, ip in interfaces.items():
    if ip != None:
        print(f'{iface}: {ip}'). Options A, B, and D correctly iterate over the dictionary, skip entries where the IP is None, and print the key-value pairs. Option E uses truthiness to skip None, but that would also skip other falsy values like an empty string, and the print with commas adds spaces around the colon, making the output format inconsistent. Option C does not skip None and prints the value as the string 'None'.

Answer

for iface in interfaces.keys():
    print(iface + ': ' + interfaces.get(iface))

Answer

for iface in interfaces:
    if interfaces[iface]:
        print(iface, ':', interfaces[iface])

Question 19

Which THREE are valid reasons to use Cisco DNA Center's Assurance APIs in an enterprise network?

Accepted Answer

Proactively detect client connectivity issues.. Cisco DNA Center's Assurance APIs provide proactive monitoring and analytics that can detect client connectivity issues before they impact users, leveraging telemetry data from network devices to identify problems like authentication failures, DHCP timeouts, or signal degradation.

Answer

Automatically enforce QoS policies on switches.

Answer

Collect NetFlow data from all network devices.

Question 20

Which TWO of the following are characteristics of TLS (Transport Layer Security) used in HTTPS? (Choose two.)

Accepted Answer

It uses asymmetric encryption to exchange a symmetric session key.. TLS provides encryption and uses certificates for authentication. HTTP/2 is an application layer protocol, not a TLS feature. Port 443 is the default for HTTPS, but TLS itself does not define the port. TLS uses symmetric encryption for session keys.

Answer

It supports multiplexing of multiple streams.

Answer

It is an application layer protocol like HTTP.

Answer

It uses port 443 by default.