200-901 Infrastructure and Automation Practice Question
A network administrator is tasked with automating the deployment of a new VLAN configuration across a fabric of Cisco ACI switches. Which automation tool is best suited for interacting with the APIC REST API?
⚠ Common exam trap
Cisco often tests the misconception that any scripting tool (like Bash with curl) is sufficient for automation, but the key is choosing a tool with native, purpose-built modules for the specific API, not just the ability to make HTTP requests.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ansible
Ansible is the best-suited tool because it provides a dedicated module (cisco.aci.aci_rest) that directly interacts with the APIC REST API, allowing declarative automation of VLAN and other ACI configurations. Unlike generic scripting, Ansible abstracts the HTTP requests and handles idempotency, authentication, and error handling natively for the ACI fabric.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Bash scripting with curl
Why it's wrong here
Bash with curl issues raw HTTP calls, leaving authentication token handling, JSON payload construction and error retries to hand-written shell code, which does not scale across a fabric. It is tempting because curl is the correct choice for quick one-off API tests or troubleshooting, not repeatable multi-switch automation.
- ✗
Chef
Why it's wrong here
Chef converges nodes by pulling cookbooks from a Chef server; it has no native APIC REST API client, so VLAN deployment would need custom Ruby HTTP code. It is tempting because Chef is the correct choice for configuration management of servers and network devices via agents, not for direct API-driven fabric provisioning.
- ✗
Puppet
Why it's wrong here
Puppet manages desired state through its own agent and manifest model, requiring a custom resource or module to translate manifests into APIC REST calls. It is tempting because Puppet is the correct choice for enforcing ongoing configuration state on managed nodes, not for direct imperative API interaction with the APIC.
- ✓
Ansible
Why this is correct
Ansible provides a native Cisco ACI module that interacts directly with the APIC REST API, letting the administrator declaratively push VLAN configuration across the fabric. It satisfies the automation requirement without bespoke scripting, unlike manual CLI or generic tools lacking ACI-aware modules.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 975 original 200-901 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.