200-901 Timed Practice Test 3 — 10 Questions

Question 1

An IPv6-enabled host is trying to discover the MAC address of another host on the same link. The host knows the destination IPv6 address but does not have a corresponding entry in the neighbor cache. Which protocol and message type does the host use?

10 minute time limit — choose an answer to begin.

Accepted Answer

Neighbor Solicitation (ICMPv6 type 135). When an IPv6 host needs to resolve a known destination IPv6 address to its MAC address on the same link, it sends a Neighbor Solicitation (NS) message, which is ICMPv6 type 135. This message is multicast to the solicited-node multicast address of the target, and the host with that IPv6 address responds with a Neighbor Advertisement (ICMPv6 type 136) containing its MAC address. This process replaces ARP in IPv4 and is defined in RFC 4861.

Answer

Neighbor Advertisement (ICMPv6 type 136)

Answer

Router Solicitation (ICMPv6 type 133)

Answer

Address Resolution Protocol (ARP)

Question 2

A DevOps team is deploying a microservices application on Cisco UCS using Docker containers. They need to ensure that secrets such as database credentials are securely managed without hardcoding them in the application code or container images. Which approach should they use?

Accepted Answer

Use a secure secret store like HashiCorp Vault and retrieve secrets at runtime via API.. It follows the principle of secret management by decoupling sensitive data from application code and container images. HashiCorp Vault provides a centralized, encrypted secret store with dynamic secrets, access policies, and audit logging, allowing the microservices to authenticate and retrieve credentials at runtime via its REST API, eliminating the need to hardcode secrets.

Answer

Embed secrets directly in the container image using COPY instructions.

Answer

Pass secrets as build arguments in the Docker build command.

Answer

Store secrets as environment variables in the Docker Compose file.

Question 3

A developer needs to send a diagnostic request to a network device to verify if it supports a specific MIB object. Which protocol and operation should be used?

Accepted Answer

SNMP GET. SNMP GET is the correct operation to retrieve the value of a specific MIB object from a network device. It sends a diagnostic request to verify if the device supports that object by checking whether a valid response is returned. This is the standard SNMP operation for reading a single managed object's value.

Answer

ICMP ping

Answer

HTTP GET

Answer

SNMP SET

Answer

NETCONF get-config

Question 4

Which TWO statements about the MVC pattern are correct? (Choose two.)

Accepted Answer

Controller handles user input and updates the Model.. MVC separates Model (data), View (UI), Controller (logic). Controller updates Model, View reflects Model.

Answer

Model is dependent on the View.

Answer

Model represents the user interface.

Answer

View directly modifies the Model.

Question 5

A DevOps team uses GitLab CI to deploy a containerized application to a Kubernetes cluster. The deployment pipeline fails at the 'deploy' stage with an error: 'unable to connect to server'. What is the most likely cause?

Accepted Answer

The kubeconfig file for the cluster is missing or invalid.. The error 'unable to connect to server' indicates that the GitLab CI runner cannot establish a TCP connection to the Kubernetes API server. This is most commonly caused by a missing or invalid kubeconfig file, which contains the cluster endpoint, credentials, and context required by kubectl to authenticate and communicate with the cluster. Without a valid kubeconfig, the deployment stage cannot proceed.

Answer

The Git repository is private and cannot be accessed.

Answer

The Docker image was not built successfully.

Answer

The Kubernetes cluster has insufficient resources to schedule the pod.

Question 6

A company uses a /24 subnet for its office LAN. The network must accommodate 30 hosts per VLAN. Which subnet mask would be most efficient for each VLAN while minimizing wasted IP addresses?

Accepted Answer

255.255.255.224. A /27 subnet mask (255.255.255.224) provides 32 total addresses per subnet, with 30 usable host addresses (2^5 - 2 = 30). This exactly meets the requirement of 30 hosts per VLAN without wasting IP addresses, as any larger subnet would leave unused addresses.

Answer

255.255.255.240

Answer

255.255.255.0

Answer

255.255.255.128

Answer

255.255.255.192

Question 7

Which two Meraki Dashboard API features are used to paginate through large result sets? (Choose two.)

Accepted Answer

startingAfter and endingBefore parameters. Meraki supports Link header for standard pagination and startingAfter/endingBefore parameters for cursor-based pagination.

Answer

offset and limit parameters

Answer

page and perPage query parameters

Answer

Retry-After header

Question 8

A network engineer is configuring a new switch and needs to ensure that frames from VLAN 10 and VLAN 20 are isolated on the same trunk link to another switch. Which IEEE standard should be configured on the trunk interfaces?

Accepted Answer

802.1Q. C is correct because 802.1Q is the IEEE standard that defines VLAN tagging, allowing multiple VLANs (such as VLAN 10 and VLAN 20) to be carried over a single trunk link while maintaining isolation between them. By inserting a 4-byte VLAN tag into the Ethernet frame, 802.1Q enables the receiving switch to identify which VLAN a frame belongs to, ensuring traffic from different VLANs remains separate.

Answer

802.3

Answer

802.11

Answer

802.1X

Question 9

A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?

Accepted Answer

pyATS allows writing reusable test scripts with built-in test libraries. PyATS is a test automation framework designed for network engineers, providing built-in test libraries (e.g., `pyats.aetest`) that enable writing reusable, modular test scripts. Unlike a simple ping script, pyATS supports structured test cases, data-driven testing, and integration with Cisco devices via libraries like `Genie`, allowing for comprehensive validation beyond basic reachability.

Answer

pyATS requires less code than a ping script

Answer

pyATS can test multiple devices in parallel

Answer

pyATS automatically generates test reports

Question 10

A network automation script uses the Python ncclient library to modify a device configuration. Which NETCONF operation should be used to apply configuration changes?

Accepted Answer

. The operation is used to modify configuration in NETCONF.

Answer

<close-session>

Answer

<get-config>

Answer

<get>