hardMultiple ChoiceObjective-mapped
200-901 Practice Question: A developer is integrating with Cisco SD-WAN…
A developer is integrating with Cisco SD-WAN vManage using REST APIs. After successfully submitting credentials, the API returns a 401 Unauthorized error for subsequent requests. What is the most likely missing step?
⚠ Common exam trap
Cisco often tests the distinction between session cookies and CSRF tokens, trapping candidates who assume that a successful login alone (cookie) is enough for all subsequent API calls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The session token (X-XSRF-TOKEN) must be obtained and included in subsequent requests.
Cisco SD-WAN vManage uses a two-step authentication process: first, credentials are submitted to obtain a session token (X-XSRF-TOKEN) and a JSESSIONID cookie. If subsequent API requests do not include the X-XSRF-TOKEN in the HTTP header, vManage rejects them with a 401 Unauthorized error, as the token is required for CSRF protection and session validation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The request URL must include an API key parameter.
Why it's wrong here
vManage uses session tokens, not API keys.
- ✗
The API call must use the HTTPS protocol.
Why it's wrong here
HTTPS is already used; not the missing step.
- ✗
The password must be sent in base64 encoding.
Why it's wrong here
Credentials are sent as form data, not base64.
- ✓
The session token (X-XSRF-TOKEN) must be obtained and included in subsequent requests.
Why this is correct
This is required after initial authentication.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.