hardMultiple ChoiceObjective-mapped
200-901 Practice Question: A developer is using the Cisco Webex API to…
A developer is using the Cisco Webex API to create a room and add members. The API requires an access token with the appropriate scopes. The developer receives a 401 Unauthorized error when trying to create a room. What is the most likely cause?
⚠ Common exam trap
The distinction between 401 Unauthorized and 403 Forbidden is crucial: 401 indicates an authentication issue (missing or expired token), while 403 indicates an authorization issue (insufficient scopes). Candidates often incorrectly assume a 401 can be caused by scope problems, but in Cisco Webex APIs, scopes trigger a 403.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The access token has expired
A 401 Unauthorized error in Cisco Webex APIs indicates an authentication failure, such as a missing or expired access token. Insufficient scopes result in a 403 Forbidden error, not a 401. Since the developer is using an access token, the most likely cause is that the token has expired. A missing token would also cause a 401, but an expired token is a common and plausible scenario given the developer is actively using the API.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The access token only has the 'spark:rooms_read' scope
Why it's wrong here
Incorrect. The 'spark:rooms_read' scope would cause a 403 Forbidden when attempting to create a room, not a 401. A 401 is an authentication error, not an authorization error.
- ✗
The access token has the 'spark:memberships_write' scope but not 'spark:rooms_write'
Why it's wrong here
Incorrect. Missing the 'spark:rooms_write' scope is an authorization issue, which returns a 403 Forbidden, not a 401.
- ✗
The access token is not being sent in the Authorization header
Why it's wrong here
Incorrect. While a missing Authorization header would indeed cause a 401, the developer is using an access token, so an expired token is a more likely cause than a completely missing token.
- ✓
The access token has expired
Why this is correct
Correct. An expired access token results in a 401 Unauthorized error. Given the developer is using a token and receives a 401, expiration is the most plausible cause.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.