200-901 · domain
Understanding and Using APIs
Practise Cisco DevNet Associate 200-901 Understanding and Using APIs practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice Understanding and Using APIs questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Understanding and Using APIs
Understanding and Using APIs questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common Understanding and Using APIs exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All Understanding and Using APIs questions (98)
Click any question to see the full explanation, or start a practice session above.
What is the purpose of the Authorization header in a REST API call?
Easy2Which TWO authentication mechanisms are commonly used with Cisco REST APIs? (Choose two.)
Medium3An application needs to retrieve a list of network devices from Cisco DNA Center. Which HTTP method should be used against the /dna/intent/api/v1/network-device endpoint?
Easy4Which authentication flow is most appropriate for a native mobile app that needs to access the Webex API on behalf of a user?
Medium5Which two HTTP methods are considered idempotent? (Choose two.)
Easy6What is the correct URL path for retrieving the configuration of a network interface using RESTCONF on a Cisco device?
Medium7Which TWO HTTP methods are considered safe (idempotent and without side effects on the server)?
Medium8Which TWO of the following are commonly used when implementing pagination in REST APIs? (Select TWO)
Medium9A developer is using the Meraki Dashboard API and receives a 429 Too Many Requests error. The API documentation states a rate limit of 5 calls per second. What is the best practice to handle this?
Hard10Which header is used to pass an API key in Meraki Dashboard API requests?
Medium11Which Cisco platform provides an Intent API for network automation, including endpoints for network-device, topology, and site hierarchy?
Medium12In the context of Cisco Webex APIs, which mechanism allows an application to receive real-time notifications when a message is created in a space?
Hard13In gNMI, what is the difference between dial-in and dial-out streaming?
Hard14Which HTTP method is used to partially update an existing resource in a RESTful API?
Easy15Which three statements about Webex API webhooks are true? (Choose three.)
Hard16A developer needs to create a Postman collection that uses a variable for the base URL and a token variable for authentication. The token is obtained from a login request and must be reused across requests. Where should the token variable be defined to persist across all requests in the collection?
Medium17A developer wants to retrieve a list of network devices from Cisco DNA Center. Which HTTP method and URL structure should be used?
Easy18A developer is using Postman to test a Cisco Webex API that creates a room. After running the request, they want to verify that the response status is 200 and that the response body contains a non-null 'id' field. Which Postman test code accomplishes this?
Hard19Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required, such as a backend service calling Cisco API?
Medium20Which THREE of the following are characteristics of NETCONF? (Select THREE)
Hard21A developer is making a GET request to a REST API and needs to specify that the response should be in JSON format. Which HTTP header should be set?
Easy22A developer is using gRPC/gNMI for model-driven telemetry from a Cisco device. Which of the following best describes the difference between dial-in and dial-out streaming?
Medium23Which HTTP header is used to specify the format of the request body (e.g., application/json) when sending a POST request to a REST API?
Medium24A developer is implementing gRPC telemetry with dial-out streaming from a Cisco IOS XE device. Which component initiates the TCP connection to the collector?
Hard25Which THREE of the following are valid NETCONF operations? (Choose three.)
Hard26Which three statements are true about the Cisco Catalyst Center (formerly DNA Center) intent API? (Choose three.)
Hard27A developer is configuring a RESTCONF request to retrieve the configuration of an interface on a Cisco device. Which URL path and Content-Type header are correct?
Hard28Which pagination method uses a 'Link' header with 'rel="next"' to indicate the next page of results?
Medium29What does the Link header in a paginated API response typically contain?
Easy30A REST API uses offset and limit parameters for pagination. If the first request returns items 0-49 with limit=50 and offset=0, how should the next request be constructed to get the next page?
Medium31An application needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should be used?
Medium32In a Postman collection, a developer stores the base URL of a Meraki API as a variable. Which Postman feature allows this?
Easy33In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?
Hard34An application uses the Meraki Dashboard API and receives a 429 Too Many Requests error. What is the most likely cause, and how should the application adjust?
Medium35Which header is used in an HTTP request to tell the server the format of the request body?
Easy36Which HTTP method is used to partially update a resource in a RESTful API?
Easy37A developer is using NETCONF to retrieve the running configuration of a network device. Which operation should be used?
Hard38A Cisco Webex bot needs to receive real-time notifications when new messages are posted in a space. Which API feature should the bot use?
Medium39A developer needs to partially update a Meraki network's configuration, changing only the time zone. Which HTTP method should be used on the network resource?
Easy40A network automation engineer wants to retrieve a list of all network devices from Cisco DNA Center. Which HTTP method and URL path should be used with the DNAC intent API?
Easy41In the OAuth 2.0 authorization code flow, what does the client receive after the user grants authorization?
Medium42A network engineer wants to use NETCONF to change the hostname of a Cisco device. Which operation should be used?
Medium43A developer is using the ncclient library in Python to connect to a network device via NETCONF. Which operation should be used to modify the running configuration and commit the changes?
Hard44Which HTTP method should be used to partially update an existing resource in a REST API?
Easy45A developer is using the Meraki Dashboard API and notices that some requests return a 429 status code. What is the most likely cause?
Medium46Which HTTP method is idempotent and safe?
Easy47What HTTP method should be used to update only the description field of a network device resource via a REST API?
Easy48What is the correct Content-Type header value for a RESTCONF request using JSON encoding?
Medium49A developer is implementing OAuth 2.0 for a Cisco Webex integration that needs to send messages on behalf of a user. The integration runs on a server with no user interface. Which OAuth 2.0 flow should be used?
Hard50A developer needs to use Postman to test an API that uses Basic authentication. How should the credentials be configured in Postman?
Hard51Which TWO of the following are valid methods for authenticating to a Cisco REST API? (Select two.)
Medium52When using RESTCONF to configure a network device, what Content-Type header should be set in the HTTP request to indicate YANG data in JSON format?
Medium53When using the Cisco DNA Center intent API to retrieve issues, the response includes a Link header with rel="next" and a URL. What type of pagination is this?
Medium54When using OAuth 2.0 client credentials flow with a Cisco API, what is the typical purpose of the access token?
Hard55A developer is designing a REST API that requires pagination. Which two pagination methods are commonly used? (Choose two.)
Medium56Which THREE statements about NETCONF are correct?
Hard57A developer needs to retrieve a list of network devices from Cisco DNA Center with pagination. Which TWO URL components are typically used for offset/limit pagination?
Medium58A network engineer wants to stream telemetry data from a Cisco router using gRPC. Which gRPC service model is typically used for the router to push data to a collector?
Hard59Which TWO of the following HTTP methods are considered safe (idempotent and not modifying server state)? (Select two.)
Easy60What is the default rate limit for the Meraki Dashboard API?
Easy61Which TWO of the following are valid query parameter-based pagination methods used in REST APIs? (Select two.)
Medium62A developer is using the Meraki Dashboard API and needs to handle paginated responses. Which TWO ways does Meraki indicate pagination? (Choose two.)
Medium63A developer needs to retrieve a list of Webex teams that the authenticated user belongs to. Which HTTP request is correct?
Hard64A network automation engineer is using the Cisco DNA Center intent API to retrieve a list of network devices. Which API endpoint should be used?
Medium65A developer is designing a Cisco Catalyst Center integration that uses the intent API. Which THREE of the following are available via the intent API? (Select three.)
Hard66Which three HTTP methods are used for CRUD operations in REST APIs? (Choose three.)
Medium67In a RESTCONF API call to retrieve a specific interface configuration on a Cisco device, an engineer sends a GET request to /restconf/data/interfaces/interface=GigabitEthernet0/1. What Content-Type should be specified in the Accept header to receive YANG-defined JSON?
Hard68When using the Meraki Dashboard API, how should the API key be included in a request?
Medium69An application uses NETCONF to configure a Cisco device. It sends an <edit-config> operation with the target 'running' and the operation 'merge'. Which statement about this operation is correct?
Hard70When using gRPC/gNMI for model-driven telemetry, which mode allows the network device to push telemetry data to a collector without the collector initiating the connection?
Hard71In Postman, what feature allows you to reuse a value like a base URL or token across multiple requests?
Easy72A developer is making requests to the Meraki Dashboard API and receives a 429 Too Many Requests response. What is the default rate limit for this API?
Medium73In the Cisco DNA Center intent API, which HTTP method should be used to update a specific site's information?
Medium74What is the purpose of the 'Authorization' header in a REST API request?
Easy75A developer uses RESTCONF to configure a network device. What is the correct content-type header to send in the request?
Medium76An application uses OAuth 2.0 client credentials grant to authenticate with a Cisco API. Which of the following best describes this flow?
Medium77A developer is writing a Postman test to verify that a Meraki API response returns HTTP status 200 and contains a list of networks. Which code snippet correctly implements this test?
Medium78A Cisco Catalyst Center API uses OAuth 2.0 with the client credentials grant for server-to-server communication. Which token endpoint parameter should the client include to identify itself?
Hard79In Postman, you want to run a collection of API requests automatically and test responses. Which feature should you use?
Medium80In Cisco DNA Center's intent API, which endpoint would you use to retrieve the list of all network devices?
Easy81A developer is building a script to retrieve a list of network devices from Cisco DNA Center. The API response includes a 'nextToken' field in the body to indicate more results. What pagination method is being used?
Medium82A Webex API request returns a 401 Unauthorized error. The developer has already obtained an access token. What is the most likely cause?
Medium83A developer is using the Webex API to create a webhook that triggers when a new message is posted in a room. What information is typically included in the webhook payload sent by Webex to the callback URL?
Medium84Which THREE of the following are characteristics of RESTCONF compared to NETCONF? (Select three.)
Hard85Which TWO of the following are HTTP methods used for creating or updating resources in REST APIs? (Select TWO)
Easy86When using the Cisco Meraki Dashboard API with pagination, the Link header in the response contains <https://api.meraki.com/api/v1/organizations?perPage=10&startingAfter=123>; rel="next". What does this indicate?
Medium87Which HTTP method should be used to replace an entire existing resource in a RESTful API?
Easy88Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required?
Medium89A network automation script uses the Python ncclient library to modify a device configuration. Which NETCONF operation should be used to apply configuration changes?
Easy90When using RESTCONF to configure a network device, which URL path prefix and content-type header should be used?
Medium91A developer wants to use Postman to test a REST API that requires a Bearer token. Where should the token be placed in the request?
Easy92A developer needs to retrieve a list of network devices from Cisco DNA Center. Which API endpoint should be used?
Medium93Which two authentication methods are commonly used with Cisco REST APIs? (Choose two.)
Medium94An IoT device streams telemetry data to a collector using gNMI. Which mode allows the collector to initiate the subscription?
Hard95A Webex bot needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should the bot implement?
Medium96When using the Meraki Dashboard API, what is the correct method to authenticate requests?
Medium97Which NETCONF operation is used to retrieve the entire configuration datastore from a network device?
Medium98Which TWO of the following are valid OAuth 2.0 grant types? (Select TWO)
MediumOther domains
All 200-901 exam domains
Frequently asked questions
- What does the Understanding and Using APIs domain cover on the 200-901 exam?
- Understanding and Using APIs questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 98 Understanding and Using APIs questions in the 200-901 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Understanding and Using APIs questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.