200-901 Cisco Platforms and Development Practice Question
A developer is using the Cisco DNA Center REST API to retrieve a list of all network devices. The API requires authentication. The developer wants to avoid hardcoding credentials and instead use a token-based authentication mechanism. Which authentication method should the developer use?
⚠ Common exam trap
Test-takers frequently confuse DNA Center's token authentication with OAuth 2.0 or static API keys, which are not used by the platform.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Token-based authentication using the /dna/system/api/v1/auth/token endpoint
DNA Center's REST API uses a token-based authentication flow. The developer must first call the authentication endpoint with Basic Auth to obtain a token, then include that token in the X-Auth-Token header for all subsequent requests. This approach is more secure than sending credentials with every call and is the standard method for DNA Center automation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
API key passed in the X-Auth-Token header
Why it's wrong here
DNA Center does not use static API keys for its REST API authentication. The X-Auth-Token header is used after obtaining a token, but the token is not a pre-shared API key. This option misrepresents the authentication flow and would fail because there is no API key issuance process.
- ✗
Basic Authentication with base64-encoded username and password
Why it's wrong here
Basic Authentication sends credentials in every request, which is less secure and does not provide a token. While it works, it does not meet the requirement of token-based authentication and increases the risk of credential exposure. DNA Center supports it, but it is not the recommended method for automation.
- ✓
Token-based authentication using the /dna/system/api/v1/auth/token endpoint
Why this is correct
DNA Center provides a token endpoint at /dna/system/api/v1/auth/token. The developer sends a POST with Basic Auth credentials to receive a time-limited token, which is then used in the X-Auth-Token header for subsequent API calls. This is the correct token-based method and avoids hardcoding credentials in each request.
- ✗
OAuth 2.0 with client credentials grant
Why it's wrong here
OAuth 2.0 client credentials is used for third-party integrations, but DNA Center's native API authentication for direct REST calls uses a different token mechanism. OAuth 2.0 is not the standard method for DNA Center device inventory APIs; it would require additional configuration and is not the simplest token-based approach.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 975 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.