Courseiva

200-901 · domain

Network Fundamentals

Network Fundamentals is 15% of the Cisco DevNet Associate 200-901 exam. It checks whether you understand how applications talk over networks: UDP versus TCP behavior, HTTP/1.1 versus HTTP/2 features such as multiplexing and HPACK header compression, REST API basics, and where protocols like NETCONF sit in SDN architecture layers.

125 questions30 easy59 medium36 hard

Focused practice

Practice Network Fundamentals questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Network Fundamentals

Be able to compare UDP and TCP behavior, list HTTP/2 features including HPACK header compression and multiplexing, and describe REST API request/response mechanics. The key skill is mapping protocols such as NETCONF and REST to the correct SDN architecture layer.

UDP connectionless, best-effort datagram behavior versus TCP reliability and handshakes

HTTP/2 features: binary framing, multiplexing, server push, and HPACK header compression

REST API concepts: HTTP methods, status codes, and stateless request/response interaction

NETCONF placement in SDN layers and its role configuring network devices via YANG models

Watch out for

Common Network Fundamentals exam traps

  • ▸Assuming UDP guarantees delivery or ordering; UDP is connectionless and does not retransmit lost packets or preserve sequence.
  • ▸Confusing HTTP/2 features with HTTP/1.1, such as claiming HTTP/2 removes TLS or that HPACK is a compression algorithm for bodies.
  • ▸Placing NETCONF in the application or infrastructure layer instead of the management/controller layer of SDN architecture.

Question index

All Network Fundamentals questions (125)

Click any question to see the full explanation, or start a practice session above.

1

In an SDN architecture, which API is used by the controller to communicate with network devices to install forwarding rules?

Hard
2

A network administrator is configuring DNS for a corporate domain. An MX record is required to specify the mail server responsible for handling email. Which of the following is a correct example of an MX record?

Medium
3

A network engineer is analyzing traffic patterns and wants to identify characteristics of UDP that affect real-time applications such as VoIP and video streaming. Which two characteristics of UDP make it suitable for these applications? (Choose two.)

Hard
4

An application requires reliable, ordered delivery of data with error checking. Which transport protocol should be used, and what is a key characteristic of this protocol?

Medium
5

During a TCP three-way handshake, which sequence of flags is sent from the client to initiate the connection?

Hard
6

An application needs to discover the MAC address of another device on the same local network. Which protocol does it use?

Medium
7

In the OSI model, which layer is responsible for logical addressing and routing of packets between networks?

Easy
8

Which TWO of the following protocols use UDP as the transport layer protocol? (Choose two.)

Easy
9

In the TCP three-way handshake, which sequence of flags is exchanged to establish a connection?

Medium
10

Which transport protocol is connection-oriented and ensures reliable delivery through acknowledgments and retransmissions?

Easy
11

A DevOps engineer is automating network configuration using REST APIs. The engineer needs to choose between NETCONF and OpenFlow as southbound protocols. Which TWO statements are correct?

Hard
12

A developer runs `python -c "import requests; r=requests.get('https://api.example.com/v1/status'); print(r.json())"` on a Linux host. The command returns a JSON payload instantly, but when the same request is sent to `http://api.example.com/v1/status` the client hangs and later times out with no response. Which network-layer behavior best explains why the HTTPS URL succeeds while the HTTP URL fails?

Medium
13

A developer runs a Python script that uses the requests library to call a REST API endpoint. The script receives an HTTP 401 Unauthorized response. The developer confirms the URL is correct and the server is reachable. Which action should the developer take to resolve the issue?

Easy
14

Which TWO of the following are southbound protocols in SDN?

Medium
15

What is the primary function of a switch in a network?

Easy
16

Which DNS record type is used to verify domain ownership for email security (SPF) and is stored as a text string?

Medium
17

A network engineer is deploying a new application that requires low-latency, high-throughput communication between two data centers. The engineer decides to use UDP instead of TCP for the application's transport protocol. Which two characteristics of UDP make it suitable for this scenario? (Choose two.)

Hard
18

A network administrator needs to assign IP addresses to devices on a subnet with a /25 prefix. How many usable host addresses are available?

Easy
19

Which THREE of the following are features of HTTP/2?

Hard
20

An organization is planning to implement HTTPS for their web services. Which three statements accurately describe the HTTPS protocol? (Choose three.)

Hard
21

What is the primary benefit of using HTTP/2 over HTTP/1.1?

Easy
22

A network automation engineer is using the NETCONF protocol to configure a Cisco IOS XE device. The engineer sends an <edit-config> RPC with a candidate datastore, but the configuration does not take effect until a <commit> operation is performed. Which NETCONF capability must be supported by the device to allow this workflow?

Medium
23

Which THREE of the following are true about HTTP/2 compared to HTTP/1.1? (Select three.)

Hard
24

A network engineer is analyzing a packet capture and notices that a host is sending a TCP segment with the SYN flag set and the ACK flag not set. The destination port is 443. Which of the following best describes what the host is attempting to do?

Hard
25

In Software-Defined Networking (SDN), which interface is used for communication between the controller and the network devices (e.g., switches) to forward traffic?

Medium
26

Which TWO of the following are characteristics of UDP compared to TCP? (Select two.)

Medium
27

A developer is using a REST API to retrieve data from a network controller. The API requires the client to include an API key in the HTTP request header for authentication. Which HTTP header is typically used to carry the API key?

Easy
28

A network engineer is designing a subnet that needs to support 30 usable hosts. Which subnet mask should be used?

Medium
29

A network administrator is configuring subnetting for a new branch office that requires 50 usable host addresses per subnet. The available network is 192.168.10.0/24. What subnet mask should be used to meet the requirement with minimal waste?

Medium
30

A network administrator is configuring a switch and needs to segment traffic into multiple broadcast domains while also allowing communication between them. Which device or feature should be used to achieve this?

Hard
31

A network engineer is analyzing a packet capture and observes that a host sends a TCP segment with the SYN flag set, then receives a segment with both SYN and ACK flags set, and finally sends a segment with only the ACK flag set. Which TCP mechanism is being demonstrated?

Hard
32

A network engineer is configuring a switch and needs to assign an IP address to a VLAN interface for management purposes. The engineer wants to ensure that devices on different VLANs can communicate through the switch. Which feature must be enabled on the switch to allow inter-VLAN routing?

Easy
33

At which layer of the OSI model do switches operate when forwarding frames based on MAC addresses?

Easy
34

Which TCP flag is set in the second step of the three-way handshake?

Medium
35

An organization has a web server that needs to be reachable via both 'www.example.com' and 'example.com'. Which DNS record type should be used to make 'example.com' an alias for 'www.example.com'?

Medium
36

A web application uses HTTPS to secure communications between client and server. What does HTTPS add on top of HTTP to provide encryption and authentication?

Easy
37

A DevOps team is deploying a microservices application that requires both reliable data transfer and low-latency real-time communication. Which two protocols should be used for these respective requirements? (Choose two.)

Easy
38

A network engineer is configuring a new Cisco switch and needs to assign an IP address to a VLAN interface so that the switch can be managed remotely over the network. The engineer enters the commands: interface vlan 10, then ip address 192.168.10.2 255.255.255.0, then no shutdown. However, the interface remains down. What is the most likely cause?

Easy
39

Which of the following is a private IPv4 address range as defined by RFC 1918?

Easy
40

Which layer of the OSI model uses MAC addresses to deliver frames within the same network segment?

Easy
41

Which IP address is a valid host address in the 192.168.1.0/24 network?

Medium
42

A developer runs a Python script that calls a REST API on a remote server. The script hangs indefinitely with no response. The developer opens a terminal and runs `curl -v https://api.example.com/status`. The output shows that the TCP three-way handshake completes, but the TLS handshake never starts. Which of the following is the most likely cause?

Medium
43

A network engineer is subnetting the network 192.168.1.0/24 into subnets that each support at least 50 hosts. What subnet mask should be used?

Hard
44

A developer is configuring a new application server and needs to allow HTTP traffic from web clients. Which port should be opened on the firewall to permit standard unencrypted HTTP traffic?

Easy
45

In Software-Defined Networking (SDN), the control plane is separated from the data plane. Which of the following best describes the function of the southbound API?

Hard
46

In the OSI model, which layer is responsible for session management, including establishing, maintaining, and terminating connections between applications?

Hard
47

A network engineer is troubleshooting connectivity issues and wants to verify the path that packets take from a source to a destination IP address. Which OSI layer is primarily responsible for packet forwarding and routing?

Easy
48

An application developer is using a protocol that does not require a connection setup and has minimal header overhead. Which transport protocol is being used?

Easy
49

An HTTP/2 connection uses multiple concurrent streams over a single TCP connection. Which feature of HTTP/2 enables this?

Hard
50

A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?

Medium
51

Which OSI layer is responsible for routing packets across different networks?

Easy
52

A developer is writing a script that uses the Cisco SD-WAN vManage REST API to retrieve a list of devices. The script uses the GET method to https://vmanage.example.com/dataservice/device. The API returns a 401 Unauthorized status code. Which of the following should the developer do to resolve the issue?

Medium
53

Which TWO of the following are characteristics of TLS (Transport Layer Security) used in HTTPS? (Choose two.)

Medium
54

Which wireless security standard provides the strongest encryption and is recommended for enterprise networks as of 2023?

Hard
55

An administrator is configuring DNS records for a company's domain. Which three DNS record types are most commonly used to map hostnames to IP addresses or aliases? (Choose three.)

Medium
56

In HTTP/2, which feature allows multiple concurrent requests and responses to be interleaved on a single connection, improving performance?

Medium
57

A network application requires reliable, ordered delivery of data and uses a three-way handshake to establish a connection. Which transport protocol is being used?

Medium
58

A developer is creating a REST API client that needs to authenticate using credentials passed in the HTTP header. Which header should be used?

Medium
59

A developer is writing a script that must resolve a hostname to an IPv4 address before making an HTTP request. The script uses a DNS resolver library and needs to query for the appropriate record type. Which DNS record type should the script query to obtain the IPv4 address?

Easy
60

An application requires reliable, ordered delivery of data. Which transport protocol should be used?

Medium
61

An application requires reliable, ordered delivery of data with flow control and retransmission of lost segments. Which transport layer protocol should the developer choose and what is a key characteristic of this protocol?

Medium
62

A network engineer is analyzing a packet capture of a TCP session establishment between a client and a server. The engineer observes a packet with the SYN flag set and another with both the SYN and ACK flags set. Which flag will be set in the next packet sent by the client to complete the three-way handshake?

Easy
63

A developer runs `curl -I http://api.example.com/health` and receives `HTTP/1.1 301 Moved Permanently` with a `Location: https://api.example.com/health` header. They want to follow the redirect automatically and print the final response body. Which curl option should they add?

Easy
64

A developer is writing a Python script to interact with a REST API. The script must handle HTTP responses correctly. Which two HTTP status code ranges indicate a successful request and a client error, respectively? (Choose two.)

Medium
65

Which TWO of the following are valid private IPv4 address ranges? (Select two.)

Medium
66

A DNS AAAA record is used to resolve a hostname to what type of address?

Medium
67

A developer's application opens a TCP connection to a REST API, sends a request, and receives a response. The developer then wants to reuse the same connection for several subsequent requests to the same host instead of opening a new socket each time. Which HTTP behavior makes this reuse possible?

Medium
68

A developer is writing a script to interact with a REST API. The API documentation states that the base URL is https://api.example.com/v1/ and that the resource for users is /users. The developer needs to retrieve a list of all users. Which HTTP request should the developer send to the correct endpoint?

Medium
69

A developer is building a Python script that must resolve a hostname to an IPv4 address and then connect to a specific TCP port. The script uses `socket.getaddrinfo(host, port, family=socket.AF_INET, type=socket.SOCK_STREAM)`. What does the returned list contain?

Medium
70

Which THREE of the following are benefits of using an SDN (Software-Defined Networking) architecture compared to traditional networking? (Choose three.)

Hard
71

A developer is writing a Python script that uses the requests library to interact with a REST API. The script must handle common HTTP status codes appropriately. Which two actions should the developer take to ensure robust error handling? (Choose two.)

Medium
72

A developer is troubleshooting an HTTP API call that returns a 404 status code. Which of the following is the most likely cause?

Medium
73

A network engineer is troubleshooting a connectivity issue between two subnets. The engineer uses the traceroute command and observes that packets are reaching the destination but with high latency. Which of the following is the most likely cause of the high latency?

Medium
74

At which layer of the OSI model do MAC addresses operate?

Easy
75

A network administrator is configuring a wireless network and wants to minimize interference. In the 2.4 GHz band, which set of channels are non-overlapping?

Hard
76

An engineer is troubleshooting a network issue where a client cannot reach a server. The client uses HTTPS. Which TWO factors are essential for a successful TLS handshake?

Hard
77

Which TWO of the following are benefits of using UDP over TCP for real-time applications?

Medium
78

A network engineer is troubleshooting an issue where a client cannot reach a web server at 203.0.113.10. The engineer runs a traceroute from the client and sees that the path stops at a router with IP 198.51.100.1, which is the last hop before the destination. The engineer suspects that the router is dropping packets due to an ACL. Which command should the engineer use on the router to verify if an ACL is blocking traffic to the web server?

Hard
79

A network engineer is tasked with segmenting a large broadcast domain into smaller ones using VLANs. In the OSI model, at which layer does a VLAN operate?

Hard
80

An application uses UDP. Which characteristic is true about this application's communication?

Medium
81

A network engineer is configuring a wireless network for a new office. To maximize performance and minimize interference, the engineer decides to use the 5 GHz band. Which of the following is a key advantage of 5 GHz over 2.4 GHz?

Medium
82

A developer is designing a system that requires high reliability and ordered data delivery. The developer chooses TCP. Which THREE features are provided by TCP?

Medium
83

A developer is writing a Python script using requests to retrieve a large JSON payload from an API. The server responds with headers including Content-Encoding: gzip, and the response body appears as binary data. The script must automatically decompress the payload to parse it as JSON. Which requests library behavior should the developer rely on?

Medium
84

An engineer is troubleshooting a VoIP call quality issue. The call uses UDP and experiences packet loss. Which characteristic of UDP most likely contributes to the problem?

Medium
85

A network automation engineer is using `ncclient` to configure a Cisco IOS XE device via NETCONF. The engineer wants to retrieve the running configuration using the `<get-config>` operation with a source of `<running/>`. Which XML element must be included in the RPC to specify the data store?

Hard
86

A network automation engineer must ensure that a Python script running on a management workstation can resolve internal service names such as `inventory.corp.local` and `billing.corp.local`. The workstation currently resolves public names correctly but fails on the internal ones. The engineer inspects `/etc/resolv.conf` and sees a single `nameserver 8.8.8.8` entry. Which change most directly resolves the problem?

Hard
87

A developer is building a Python application that must discover the IP address of a service registered in DNS. The application needs to resolve a domain name to an IPv4 address. Which DNS record type should the application query?

Medium
88

A network engineer is analyzing a packet capture and notices that a TCP session between a client and server is experiencing performance issues. The capture shows that the client sends a segment with the Push (PSH) flag set, but the server's acknowledgment does not immediately follow; instead, the server waits and sends a single acknowledgment for multiple segments. Which TCP mechanism is the server using to optimize network efficiency?

Hard
89

A network operations team is deploying a new application that requires guaranteed bandwidth and low latency between two data centers. The team decides to use MPLS Layer 3 VPN. Which component of MPLS is responsible for forwarding packets based on labels rather than traditional IP routing lookups?

Hard
90

Which wireless standard operates in both 2.4 GHz and 5 GHz bands and is commonly known as Wi-Fi 6?

Medium
91

In an SDN architecture, which layer is responsible for making decisions about where traffic should be forwarded?

Medium
92

An engineer is troubleshooting a connectivity issue between two devices on different VLANs. The switch connecting the devices is configured with 802.1Q trunking. At which OSI layer do VLANs operate?

Medium
93

Which DNS record type is used to verify domain ownership for email security (SPF)?

Medium
94

In a wireless network using 802.11ac, which frequency band does the standard primarily operate in to achieve higher throughput?

Hard
95

Which transport layer protocol is used by HTTP and guarantees reliable delivery?

Easy
96

Which DNS record type is used to map a domain name to an IPv6 address?

Easy
97

A developer is writing a Python script to interact with a REST API. The API requires a JSON payload to create a new resource. Which HTTP method should be used?

Medium
98

A developer is building a Python application that must connect to a REST API hosted on a server. The API requires a persistent connection and the ability to send multiple requests without re-establishing a TCP handshake each time. The developer wants to minimize latency. Which HTTP feature should the application leverage?

Medium
99

A network administrator is configuring a new subnet on a Cisco switch. The subnet uses the address 192.168.10.0/24. The administrator needs to assign an IP address to the switch's management interface so it can be reached from a remote management station on the same subnet. Which of the following IP addresses should be assigned to the switch?

Easy
100

A network administrator is configuring a switch and needs to ensure that devices connected to the same VLAN can communicate with each other. The administrator wants to verify that the switch is correctly forwarding frames within the VLAN. Which of the following best describes the switch's primary function in this scenario?

Medium
101

A network engineer configures an HTTP/2 server. Which feature of HTTP/2 reduces overhead by compressing headers using HPACK?

Hard
102

A developer is building a real-time video streaming application that must minimize delay, even if some packets are lost. Which transport protocol is most appropriate, and why?

Hard
103

In the context of SDN, which API is used between the SDN controller and the network devices to configure forwarding behavior?

Medium
104

An engineer sees that a DNS query for 'www.example.com' returns a CNAME record. What does this mean?

Hard
105

A network administrator is configuring a new subnet for a branch office that requires 50 usable host addresses. The corporate network uses the 192.168.10.0/24 block. Which subnet mask should be used to meet the requirement with minimal waste?

Medium
106

A developer is writing a Python script that will call a REST API. The API documentation states that the service listens on TCP port 443 and requires an encrypted channel. The developer wants to confirm from the command line that the remote host is reachable on that specific port before writing any code. Which command best accomplishes this?

Easy
107

Which THREE of the following are characteristics of HTTP/2 compared to HTTP/1.1?

Hard
108

An engineer is troubleshooting a network issue and needs to verify the MAC address of the next-hop router on a directly connected segment. Which layer of the OSI model does the engineer need to examine to find this information?

Easy
109

A developer is troubleshooting an application that uses HTTP/2. The developer notices that multiple requests are being sent concurrently over a single TCP connection, and the responses are being received out of order. Which HTTP/2 feature allows this behavior?

Medium
110

Which DNS record type is used to verify domain ownership for email security protocols like SPF and DKIM?

Hard
111

A developer is designing a microservices architecture where services need to discover each other using DNS. The team wants to map a service name 'payment-service.example.com' to its IPv6 address. Which DNS record type should be used?

Hard
112

A network engineer is analyzing traffic and needs to identify which applications use UDP. Which three applications commonly use UDP as their transport protocol? (Choose three.)

Hard
113

A network automation script on a Cisco IOS XE device needs to retrieve the current running configuration and then compare it against a known-good baseline stored on a Git server. The script must use a protocol that encrypts all data in transit and supports programmatic, structured retrieval of the configuration without screen-scraping. Which approach should the script use?

Medium
114

Which of the following is a non-overlapping channel in the 2.4 GHz Wi-Fi band?

Easy
115

A network administrator configures a switch port to belong to VLAN 10. Which OSI layer is primarily involved in VLAN tagging?

Medium
116

A network engineer is troubleshooting a connectivity issue between two hosts on different subnets. The engineer suspects a problem with the default gateway configuration. Which two statements about default gateways are correct? (Choose two.)

Hard
117

Which HTTP method is idempotent and used to update a resource by sending the full representation?

Medium
118

An engineer is comparing TCP and UDP for a new telemetry service that sends small, frequent datagrams from thousands of IoT sensors to a collector. The design prioritizes low overhead and does not require retransmission of lost readings. Which two characteristics apply to UDP in this scenario? (Choose two.)

Medium
119

A network administrator is configuring a new subnet for a branch office that requires at least 50 usable host addresses. Which subnet mask would meet this requirement while minimizing address waste?

Medium
120

In the context of SDN, which API allows a network controller to communicate with the forwarding plane of network devices?

Hard
121

A network engineer is designing a subnetting scheme for a company that requires 5 subnets from the 192.168.1.0/24 network. What subnet mask should be used, and how many usable hosts per subnet will be available?

Hard
122

A network engineer captures traffic between a client and a server. The client sends a TCP segment with the SYN flag set. The server responds with a segment that has both SYN and ACK flags set. Which field in the server's response acknowledges the client's initial sequence number?

Medium
123

A network engineer is using a REST API to retrieve a list of network devices from a controller. The API requires authentication using a token. Which HTTP header should be used to include the token in the request?

Medium
124

A developer is writing a Python script that must retrieve the current operational state of a Cisco IOS XE device through its RESTCONF API. The device uses YANG models, and the script must read interface statistics without altering the configuration. Which HTTP method should the script use, and what is the correct URL structure?

Medium
125

A developer is using the Python requests library to call a REST API on a Cisco DNA Center controller. The API requires a token for authentication. The developer writes code to obtain the token and then call the network-device endpoint. Which HTTP header must be included in the second request to authenticate using the token?

Easy

Frequently asked questions

What does the Network Fundamentals domain cover on the 200-901 exam?
Be able to compare UDP and TCP behavior, list HTTP/2 features including HPACK header compression and multiplexing, and describe REST API request/response mechanics. The key skill is mapping protocols such as NETCONF and REST to the correct SDN architecture layer.
How many questions are in this domain?
This page lists all 125 Network Fundamentals questions in the 200-901 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Network Fundamentals questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
cisco-devnet-associate CISCO-DEVNET-ASSOCIATE devnet network fundamentals Practice Questions