200-901 Software Development and Design Practice Test 2 — 15 Questions

Question 1

Refer to the exhibit. An engineer uses NETCONF to configure an interface. After applying this configuration, the interface is administratively up. However, the interface does not pass traffic. What is the most likely cause?

Accepted Answer

The IP address configuration uses 'netmask' instead of 'prefix-length'. NETCONF uses YANG models that define IP address configuration with the leaf 'prefix-length' (an integer), not 'netmask'. The 'netmask' field is not a valid leaf in the standard ietf-interfaces or ietf-ip YANG model for IPv4 addresses, so the NETCONF server will either reject the configuration or apply it incorrectly, leaving the interface without a proper IP address and unable to pass traffic.

Answer

The interface type is misspelled

Answer

The 'enabled' field should be a string instead of a boolean

Answer

The interface name is invalid

Question 2

Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.

Question 3

Drag and drop the steps to deploy a Python script to a Cisco device via RESTCONF into the correct order.

Question 4

Match each Cisco DevNet Associate exam topic to its description.

Question 5

Match each HTTP status code to its meaning.

Question 6

A Python script using the requests library to query the Cisco Meraki API returns a 403 Forbidden error. The API key is correctly set in the header. What is the most likely cause?

Accepted Answer

The API key does not have permission for the requested resource. A 403 Forbidden error typically indicates the API key is invalid or lacks permissions. The API key is set correctly, so the issue is likely that the API key does not have the required scope for the endpoint.

Answer

The request URL is incorrect

Answer

The API endpoint is rate-limiting the request

Answer

The Content-Type header is missing

Question 7

A network automation team uses a CI/CD pipeline. Which practice best ensures that configuration changes are validated before deployment to production?

Accepted Answer

Deploying to a staging environment that mirrors production. Deploying to a staging environment that mirrors production allows comprehensive testing without risk. This is a key DevOps best practice.

Answer

Automated unit tests that verify syntax of configuration files

Answer

Peer review of code only

Answer

Manual testing by the network engineer after deployment

Question 8

A Python script used for network automation requires storing an API secret. Which approach is the most secure and recommended best practice?

Accepted Answer

Use environment variables. Option D is correct because storing secrets in environment variables decouples sensitive data from the source code, preventing accidental exposure in version control systems like Git. This approach follows the principle of least privilege and is recommended by security best practices such as the Twelve-Factor App methodology. Environment variables are managed outside the script, reducing the risk of credential leakage during code sharing or deployment.

Answer

Hardcode the secret in the Python script

Answer

Store the secret in a plain text file in the repository

Answer

Encrypt the secret and store it in the script

Question 9

A team uses GitHub for version control and wants Jenkins to automatically run tests when changes are pushed to the main branch. Which trigger should be configured in the Jenkins job?

Accepted Answer

GitHub webhook. A webhook allows GitHub to notify Jenkins instantly on push events, enabling immediate triggering of the pipeline.

Answer

Cron job on the Jenkins server

Answer

Poll SCM every minute

Answer

Manual build trigger

Question 10

A Python script uses the `requests` library to fetch device details from Cisco DNA Center. The API returns a JSON response with nested objects. To extract the management IP address from the response stored in variable `data`, which code snippet is correct? The JSON structure is:
{
  "response": [
    {
      "managementIpAddress": "192.168.1.1",
      "hostname": "router1"
    }
  ]
}

Accepted Answer

data['response'][0]['managementIpAddress']. The response contains a list under key 'response'; correct access is via data['response'][0]['managementIpAddress'].

Answer

data.managementIpAddress

Answer

data['response']['managementIpAddress']

Answer

data.get('response')[0].get('managementIpAddress')

Question 11

An Ansible playbook fails with the error: "mapping values are not allowed here". The relevant YAML snippet is:
---
- name: Configure interface
  ios_config:
    lines:
      - ip address 10.0.0.1 255.255.255.0
    parents: interface GigabitEthernet0/1
  What is the most likely cause of this error?

Accepted Answer

The indentation of `parents:` is incorrect relative to `lines:`. The error "mapping values are not allowed here" in YAML typically indicates an indentation issue. The `parents:` line should be at the same indentation level as `lines:`.

Answer

The `ios_config` module requires a provider statement

Answer

The `lines:` item should be a list of strings

Answer

The `parents:` value must be enclosed in quotes

Question 12

The exhibit shows a JSON response from a Cisco NX-OS API query for interface status. What is the operational state of interface Ethernet1/1?

Accepted Answer

down. The JSON shows "oper-state": "down", so the operational state is down.

Answer

unknown

Answer

admin-down

Answer

up

Question 13

A network engineer runs the Ansible playbook shown in the exhibit, but it fails. The error indicates the module 'cisco.ios.ios_vlan' does not exist. What is the most likely cause?

Accepted Answer

The module name is misspelled; it should be 'ios_vlans'. The correct module name is 'ios_vlans' (plural) for Cisco IOS VLAN configuration. 'ios_vlan' is not a valid module.

Answer

The collection 'cisco.ios' is not installed

Answer

The 'state: present' is invalid for this module

Answer

The playbook lacks 'become: yes'

Question 14

A Python script using ncclient to configure a Cisco IOS XE device fails with an error that the capability 'urn:ietf:params:xml:ns:netconf:base:1.0' is missing. What is the most likely cause?

Accepted Answer

The device does not have NETCONF enabled. The 'hostkey_verify=False' parameter bypasses SSH host key checking, but the error indicates NETCONF capability not supported. The device likely does not have NETCONF enabled, or SSH connectivity fails.

Answer

The username or password is incorrect

Answer

The edit-config operation should be on candidate instead of running

Answer

The host key verification is disabled incorrectly

Question 15

Which TWO of the following are essential steps in a typical Git workflow when collaborating on a feature branch? (Choose two.)

Accepted Answer

Merge the branch into master. Creating a branch isolates work, and merging integrates it back. While rebasing is common, the question asks for essential steps; merge is more fundamental than rebase.

Answer

Rebase onto master

Answer

Delete the remote repository

Answer

Stash changes before switching branches

200-901 Software Development and Design Practice Test 2 — 15 Questions

Exhibit

200-901 Software Development and Design Practice Test 2 — 15 Questions

Exhibit