hardMultiple ChoiceObjective-mapped
200-901 Practice Question: A Python script using the Cisco ACI Toolkit…
A Python script using the Cisco ACI Toolkit (aciToolkit) fails with 'LoginError: unable to login to APIC'. The APIC is reachable via HTTPS. What is the most likely cause?
⚠ Common exam trap
Cisco often tests the nuance that a reachable APIC via HTTPS does not guarantee successful login if the hostname in the script does not match the APIC's TLS certificate, leading candidates to overlook certificate validation as the root cause.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The script uses an incorrect APIC domain (e.g., 'apic' instead of the FQDN).
The Cisco ACI Toolkit (aciToolkit) requires the APIC domain to be specified as a fully qualified domain name (FQDN) or IP address that matches the APIC's certificate. Using a short name like 'apic' instead of the FQDN (e.g., 'apic.example.com') causes a TLS certificate hostname mismatch, leading to a login failure even though the APIC is reachable. The 'LoginError: unable to login to APIC' error typically indicates an authentication or connectivity issue, and in this scenario, the certificate validation fails because the toolkit verifies the server's hostname against the certificate's Subject Alternative Name (SAN).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The APIC has reached its maximum session limit.
Why it's wrong here
Session limit would produce a different error (e.g., 'max sessions reached'), and is less common than configuration errors.
- ✗
The script uses HTTP instead of HTTPS.
Why it's wrong here
The aciToolkit defaults to HTTPS and will raise a different error if HTTP is forced.
- ✓
The script uses an incorrect APIC domain (e.g., 'apic' instead of the FQDN).
Why this is correct
The aciToolkit's login() requires the correct APIC domain; an incorrect domain prevents proper authentication.
- ✗
The APIC is running an unsupported firmware version.
Why it's wrong here
Firmware version is not a direct cause of login failure; the toolkit supports a range of versions.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.