CCNA AI and Network Operations Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Because HTTPS encrypts the API traffic in transit.

  Why this is correct

  HTTPS wraps the API payload in TLS/SSL encryption, so any sensitive data transmitted over the network—such as passwords, tokens, or personal information—remains unreadable to anyone who intercepts the packets. This prevents eavesdropping and man-in-the-middle attacks, which is why secure communication is mandatory for sensitive operations. In contrast, HTTP sends all data as plaintext, leaving it exposed on shared networks.

• ✗

  Because HTTPS removes the need for tokens and credentials.

  Why it's wrong here

  HTTPS only secures the transport channel; it does not replace authentication or authorization mechanisms. APIs still require credentials like API keys, OAuth tokens, or certificates to verify the identity of the caller and enforce access control. The encryption simply shields those credentials from being captured while in transit, but the client must still present them for every request.

  When this WOULD be correct

  In a different question that asks about the advantages of HTTPS in a context where security measures are being discussed, and specifically mentions that HTTPS can eliminate the need for certain types of insecure credentials, this option could be correct. For example, if the question stated that HTTPS allows for secure session management without exposing tokens.

• ✗

  Because HTTPS is the only way JSON can be transmitted.

  Why it's wrong here

  JSON is a syntax for structuring data that is completely agnostic to the underlying network protocol. It can be serialized and transmitted over HTTPS, plain HTTP, WebSockets, or even stored in files without any reliance on TLS. HTTPS is just one of many transports capable of delivering JSON; it is neither a requirement nor unique to the format.

  When this WOULD be correct

  In a different exam scenario, if the question specifically stated that JSON can only be transmitted securely, or if it asked about protocols that support JSON exclusively, then this option could be correct. For example, a question could ask, 'Which protocol is exclusively used for transmitting JSON data?'

• ✗

  Because HTTP cannot carry API requests at all.

  Why it's wrong here

  HTTP is fully capable of transmitting API requests; in fact, many public APIs still offer HTTP endpoints for compatibility. The problem is that HTTP does not encrypt the request or response body, so any sensitive payload can be read or modified by an attacker on the network path. Thus, the limitation is a lack of confidentiality and integrity, not an inability to carry API traffic.

  When this WOULD be correct

  In a question that specifically asks about the capabilities of HTTP versus other protocols, such as when comparing HTTP to a protocol that does not support API requests at all, this option could be correct. For example, if the question stated, 'Which protocol cannot handle API requests?' then D would be the correct answer.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”