Courseiva

200-901 · domain

scenario questions

Practise Cisco DevNet Associate 200-901 scenario questions practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

989 questions264 easy433 medium292 hard

Focused practice

Practice scenario questions questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about scenario questions

scenario questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common scenario questions exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All scenario questions questions (989)

Click any question to see the full explanation, or start a practice session above.

1

A developer is creating a Python script to retrieve interface statistics from a Cisco IOS XE device using RESTCONF. Which HTTP method should be used to get the data?

Medium
2

An application uses Cisco DNA Center APIs and needs to receive notifications when a new device is added. Which DNA Center API category should be used to set up event-driven notifications?

Medium
3

An application sends many requests to the Meraki API and receives HTTP 429 errors. The response includes a 'Retry-After' header. What does this status code indicate?

Medium
4

A company uses Ansible to automate configuration of its Cisco IOS XE routers. The network team recently upgraded the routers' software from IOS 15.x to IOS XE 17.x. Since the upgrade, the Ansible playbook fails intermittently with the message: 'Failed to connect to the host via ssh: timed out'. However, the team can SSH manually to the routers from the Ansible control node without issues. The playbook uses the 'cisco.ios.ios_config' module with default SSH options. The routers have been configured with SSH version 2 and local authentication. The Ansible control node runs Red Hat Enterprise Linux 8. Which action should the network engineer take to resolve the issue?

Medium
5

Which TWO practices help prevent hardcoded credentials in application code? (Choose TWO.)

Medium
6

A Python script uses the Cisco Webex API to list all rooms. The response includes pagination via the 'Link' header with 'rel="next"'. What is the correct way to retrieve the next page of rooms?

Easy
7

A network engineer attempts to modify the IP address of GigabitEthernet1/0/1 using the Cisco IOS-XE RESTCONF API. They send a PUT request with a modified JSON body but receive a 400 Bad Request error. What is the most likely cause?

Hard
8

A Webex bot needs to send a message to a room. The bot has the room ID. Which API endpoint should be used, and what is the correct HTTP method?

Medium
9

A CI/CD pipeline has a stage that runs security vulnerability scans on dependencies. Which tool is specifically designed to scan Python packages for known vulnerabilities?

Medium
10

In a microservices architecture, which communication pattern is typically asynchronous and decoupled?

Medium
11

Which tool can be used to explore YANG models locally?

Easy
12

A DevOps team manages network infrastructure using Infrastructure as Code (IaC). They store configuration files in a Git repository and use CI/CD to deploy changes. What is the best practice to ensure that only validated configurations are applied to production devices?

Hard
13

Which Cisco platform uses NX-API to allow programmatic access to CLI commands via JSON?

Easy
14

In an SDN architecture, which API is used by the controller to communicate with network devices to install forwarding rules?

Hard
15

A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?

Medium
16

A network administrator is configuring DNS for a corporate domain. An MX record is required to specify the mail server responsible for handling email. Which of the following is a correct example of an MX record?

Medium
17

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

Medium
18

Based on the NAT translation table, what type of NAT is being used?

Hard
19

A network engineer needs to automate the deployment of QoS policies across multiple campus switches using Cisco DNA Center. The engineer decides to use the Cisco DNA Center Intent API to create a policy tag and bind it to a group of devices. After sending the PUT request to /dna/intent/api/v1/policy-tag, the API returns a 202 Accepted status. However, the engineer notices that the policy is not being applied consistently across all devices. What is the most likely reason?

Medium
20

In Cisco IOS XE, a network engineer wants to retrieve the hostname of a device using RESTCONF. Which URI and method should be used? Assume RESTCONF is enabled and the base URL is https://device/restconf.

Hard
21

Which TWO Docker network drivers allow a container to communicate with the host's network stack directly?

Medium
22

A developer is using Cisco Meraki API to retrieve a list of networks. What is the correct HTTP method and endpoint path for listing networks in an organization?

Easy
23

A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?

Medium
24

A development team is implementing a microservices architecture. They need to ensure that services can discover each other dynamically without hardcoding IP addresses. Which technology should they use?

Medium
25

In a CI/CD pipeline for network automation, a change is rolled back using a Git revert commit that triggers a new pipeline. The rollback playbook fails because the 'previous' configuration snapshot is missing. What should be implemented to prevent this?

Hard
26

A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?

Easy
27

A large enterprise uses Cisco SD-Access with fabric automation. The network administrator wants to automate the process of adding a new user device to a specific virtual network (VN) based on its MAC address. Which API or tool should they use?

Hard
28

An application requires reliable, ordered delivery of data with error checking. Which transport protocol should be used, and what is a key characteristic of this protocol?

Medium
29

Which TWO of the following are examples of application layer protocols?

Easy
30

A DevOps team is using Cisco NSO to manage network devices. They want to ensure that the configuration is compliant with corporate standards. Which NSO feature should they use?

Medium
31

A network automation engineer is writing a Python script to interact with the Cisco Meraki Dashboard API. The script currently makes GET requests to retrieve a list of networks and then makes subsequent requests for each network to get device details. However, the script is slow due to network latency. The engineer wants to improve performance without changing the API's functionality. Which approach best addresses the performance issue?

Easy
32

A network administrator notices that a host with IP 192.168.1.10/25 cannot communicate with a host at 192.168.1.200/25. What is the most likely reason?

Hard
33

When designing a REST API client for a Cisco DNA Center deployment, which authentication method should be used to obtain a token for subsequent API calls?

Easy
34

Which three configuration management tools can be used with Cisco devices for automation? (Choose three.)

Medium
35

Which Python exception would be raised by the following code? my_dict = {'a': 1} value = my_dict['b']

Hard
36

A Kubernetes pod has two containers: a main application and a sidecar proxy. They need to communicate via localhost. Which pod networking model allows this?

Hard
37

What is the purpose of the Authorization header in a REST API call?

Easy
38

You are writing a Dockerfile for a Python application. Which instruction should you use to install the dependencies from a requirements.txt file?

Easy
39

A developer is using Git for version control. After creating a new feature branch 'feature-login' from 'main', they make several commits. Meanwhile, another developer has merged changes into 'main'. The developer wants to incorporate the latest main changes into 'feature-login' without creating a merge commit. Which Git command should they use?

Hard
40

A network administrator is configuring OSPF on a router and wants to ensure that routes from area 0 are propagated to area 1, but area 1 should not see specific inter-area routes. Which OSPF feature should be used?

Medium
41

Which TWO authentication mechanisms are commonly used with Cisco REST APIs? (Choose two.)

Medium
42

A developer is writing a Python script that uses the Cisco Catalyst Center (formerly DNA Center) API to get the list of sites. The API returns a response with a 'response' key containing a list of sites. The developer wants to access the 'response' field from the JSON response. Which code snippet correctly extracts the list?

Easy
43

A developer is writing a Python script to interact with the Cisco DNA Center REST API. Which HTTP method should be used to retrieve a list of network devices?

Easy
44

An application needs to retrieve a list of network devices from Cisco DNA Center. Which HTTP method should be used against the /dna/intent/api/v1/network-device endpoint?

Easy
45

During a TCP three-way handshake, which sequence of flags is sent from the client to initiate the connection?

Hard
46

A developer is using the Meraki Dashboard API to list all organizations. The base URL is https://api.meraki.com/api/v1/. What is the correct endpoint and authentication method?

Medium
47

A developer needs to retrieve a list of all networks in a Meraki organization using the Dashboard API. Which API call should be made?

Easy
48

An application needs to discover the MAC address of another device on the same local network. Which protocol does it use?

Medium
49

A network engineer uses Ansible to apply a standard ACL to multiple routers. The playbook runs without errors, but the ACL is not applied on some routers. Upon checking, those routers have a different configuration revision due to a previous manual change. What is the best practice to ensure consistent application?

Hard
50

In the OSI model, which layer is responsible for logical addressing and routing of packets between networks?

Easy
51

A developer is designing a Python script that needs to make multiple REST API calls to different endpoints sequentially. The script must handle the following requirements: (1) Use a variable timeout for each request, (2) Include an authorization token in every request, (3) Parse JSON responses. Which TWO features of the requests library should be used? (Choose two.)

Medium
52

A developer needs to share a Docker image with a colleague. They decide to push the image to a registry. Which Docker command pushes an image to a registry?

Easy
53

Match each HTTP status code to its meaning.

Medium
54

A developer is using the Meraki Dashboard API to manage networks. Which two statements about pagination are correct?

Medium
55

Which TWO of the following protocols use UDP as the transport layer protocol? (Choose two.)

Easy
56

A security team wants to ensure that only signed Docker images are deployed in production. Which CI/CD pipeline step validates the image signature before deployment?

Medium
57

In the TCP three-way handshake, which sequence of flags is exchanged to establish a connection?

Medium
58

A developer is trying to access an internal corporate web API at http://api.internal.company.com from their workstation, which has the IP configuration: IP address 192.168.1.100, subnet mask 255.255.255.0, default gateway 192.168.1.1, and DNS server 192.168.1.2. The developer can ping the DNS server (192.168.1.2) successfully, but when they try to curl the API endpoint, the command times out. The developer also confirms that the API server is up and reachable from other devices on the same subnet. Which action should the developer take to resolve this issue?

Easy
59

Which authentication flow is most appropriate for a native mobile app that needs to access the Webex API on behalf of a user?

Medium
60

Which TWO of the following features are provided by Cisco DNA Center but NOT by Cisco Prime Infrastructure? (Choose two.)

Hard
61

Which two HTTP methods are considered idempotent? (Choose two.)

Easy
62

What is the correct URL path for retrieving the configuration of a network interface using RESTCONF on a Cisco device?

Medium
63

Which Docker network driver allows a container to share the host's network stack, giving it direct access to host interfaces?

Easy
64

You are a network engineer at a financial services company. The network uses OSPF as the IGP, and all routers are in area 0. The core network consists of four routers (R1, R2, R3, R4) connected in a full mesh with GigabitEthernet links. The OSPF cost is set to 1 on all interfaces. Recently, a new application was deployed that requires low jitter and deterministic paths between two servers: Server A connected to R1 and Server B connected to R4. During peak hours, you notice that traffic between the servers is using the path R1->R3->R4 instead of R1->R2->R4, causing higher latency due to congestion on R3. OSPF metrics reflect equal cost to both paths (cost 2 each). You need to enforce that traffic from Server A to Server B always uses the path through R2 without changing the topology or adding additional hardware. Which action should you take?

Hard
65

You are a junior network developer tasked with automating device inventory retrieval using the Cisco Meraki Dashboard API. You have already generated an API key with the appropriate scopes and have tested it successfully with simple GET requests. However, when you attempt to retrieve the list of all devices in your organization via the 'GET /organizations/{organizationId}/devices' endpoint, you receive a 403 Forbidden error. You verify that the API key is correctly included in the request header as 'X-Cisco-Meraki-API-Key'. You also confirm that the organization ID is correct. You are able to reach the Meraki Dashboard API server from your environment, as other endpoints (e.g., 'GET /organizations') work fine. What is the most likely cause of the 403 error, and what should you do to resolve it?

Easy
66

Which transport protocol is connection-oriented and ensures reliable delivery through acknowledgments and retransmissions?

Easy
67

A Python function needs to accept a variable number of keyword arguments. Which parameter syntax should be used?

Medium
68

What authentication method is required to obtain a token from Cisco DNA Center's API?

Easy
69

A Python function needs to handle both expected and unexpected errors during file I/O. Which THREE constructs are essential for robust exception handling? (Choose three.)

Easy
70

A developer is implementing exception handling in Python for a function that makes an HTTP request. Which THREE exception types should be caught to handle common network and HTTP errors? (Choose three.)

Hard
71

Which THREE steps are essential in a typical CI/CD pipeline for a containerized application? (Choose THREE.)

Hard
72

A developer is working on a Python application that automates the configuration of multiple Cisco IOS-XE devices using RESTCONF. The application uses the requests library. The developer notices that sometimes the PUT request to update the interface description returns a 409 Conflict error. Upon investigation, the developer finds that the issue occurs when two instances of the application are running concurrently and attempt to update the same interface. The developer wants to implement a strategy to avoid conflicts. Which approach is most effective?

Medium
73

During a security audit, an engineer discovers that a CI/CD pipeline is storing API keys in plain text in environment variables. Which best practice should be implemented to mitigate this risk?

Medium
74

Match each Python library to its typical use in network automation.

Medium
75

A network automation script uses RESTCONF to configure a router. The script receives an HTTP 409 Conflict response. What is the most likely cause?

Hard
76

Which TWO statements about REST API design best practices are true? (Choose two.)

Medium
77

A developer is integrating with Cisco Webex Teams. Which two resources can trigger a webhook?

Medium
78

An application is secured using OAuth 2.0 for Cisco Webex API access. Which three components are involved in the authorization code grant flow? (Choose three.)

Medium
79

An engineer is designing a CI/CD pipeline for a Python application. The pipeline should automatically run unit tests, build a Docker image, push it to a private registry, and deploy to a Kubernetes cluster. Which sequence of stages is correct?

Medium
80

Which THREE of the following are common tools used in a CI/CD pipeline for network automation? (Choose three.)

Medium
81

Which TWO HTTP methods are considered safe (idempotent and without side effects on the server)?

Medium
82

Which TWO statements are true about VXLAN? (Choose two.)

Medium
83

Which TWO Ansible modules are commonly used for automating Cisco IOS devices?

Easy
84

Which TWO of the following are commonly used when implementing pagination in REST APIs? (Select TWO)

Medium
85

An engineer wants to trigger an EEM applet when a specific syslog message appears. Which event detector should be used?

Hard
86

Which TWO of the following are valid ways to handle errors in a Python program that uses the Cisco Meraki API?

Hard
87

A developer is integrating with Cisco SD-WAN vManage using REST APIs. After successfully submitting credentials, the API returns a 401 Unauthorized error for subsequent requests. What is the most likely missing step?

Hard
88

A network engineer is using Cisco DNA Center to automate network changes. Which THREE operations are part of the 'Change your network' API category? (Choose three.)

Hard
89

Refer to the exhibit. A developer needs to authenticate to this router via NETCONF using the devuser credentials. Why might authentication fail?

Medium
90

A large enterprise uses Cisco DNA Center to manage its campus network. The network team has automated wireless SSID provisioning using the Intent API. Recently, a new SSID was created but it does not appear on the wireless LAN controllers. The Python script that calls the API returns a 200 OK response, but the SSID is not deployed. The script uses the POST /dna/intent/api/v1/ssid endpoint with a JSON body containing the SSID name and security settings. A day later, the SSID is still missing. The engineer checks the DNA Center GUI and sees the SSID in the 'Design' section but with a 'Provisioning Failed' status. Which step should the engineer take next to resolve the issue?

Hard
91

A developer is implementing a Cisco Intersight API solution to manage multiple UCS domains. They receive an HTTP 403 Forbidden response when trying to create an organization. What is the most likely issue?

Hard
92

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. After a successful request, the response includes a Link header with rel="next" pointing to the next page. What does this indicate about the API's pagination?

Hard
93

Which Git command is used to switch to an existing branch named 'feature-x' and update the working directory?

Medium
94

A network engineer is designing a wireless network for an office that requires high throughput and minimal interference. Which two channels should be used for the 2.4 GHz band to avoid overlap? (Choose two.)

Medium
95

A CI/CD pipeline uses GitHub Actions. The workflow should trigger only when a pull request is opened against the 'main' branch. Which 'on' trigger configuration is correct?

Hard
96

Which two statements about the Cisco DevNet Sandbox are true?

Hard
97

A developer is using the Meraki Dashboard API and receives a 429 Too Many Requests error. The API documentation states a rate limit of 5 calls per second. What is the best practice to handle this?

Hard
98

A DevOps engineer is automating network configuration using REST APIs. The engineer needs to choose between NETCONF and OpenFlow as southbound protocols. Which TWO statements are correct?

Hard
99

A Python script using the Cisco Meraki API must update the SSID settings for a network. Which HTTP method should be used to modify an existing SSID?

Easy
100

In a Kubernetes deployment, the container image pull policy is set to "Always". This causes performance issues during rollouts because the image registry is slow. What is the best practice to reduce pull time while maintaining security?

Medium
101

A Python script using ncclient to configure a Cisco IOS XE device fails with an error that the capability 'urn:ietf:params:xml:ns:netconf:base:1.0' is missing. What is the most likely cause?

Hard
102

A network engineer wants to automate the configuration of multiple Cisco IOS devices using Ansible. What is the minimum requirement on the control node to execute Ansible playbooks against these devices?

Easy
103

A network automation engineer uses Ansible to manage a group of Cisco IOS XE devices. The playbook fails with 'unreachable' for some devices. Which TWO actions should the engineer take to troubleshoot the connectivity?

Hard
104

Refer to the exhibit. This JSON response was received from the Cisco DNA Center API. A developer wants to extract the software version of the first device. Which Python expression correctly retrieves '16.12.5' from the variable `data`?

Hard
105

Which HTTP status code indicates that a POST request successfully created a new resource?

Medium
106

A developer is integrating a monitoring application with Cisco Meraki API to retrieve network health data. The application needs to ensure it doesn't exceed the API rate limit of 5 requests per second. What is the best practice for handling this limitation?

Easy
107

An application needs to authenticate to Cisco DNA Center. Which authentication method is used?

Medium
108

Which DNS record type is used to map a domain name to an IPv6 address?

Medium
109

A DevOps team is developing a CI/CD pipeline for a microservices application that uses Cisco NSO (Network Services Orchestrator) for network configuration. The application code is stored in a Git repository. The pipeline must automatically trigger a test suite when a pull request is merged to the main branch, but only if the tests pass, then deploy to a staging environment. The team is using Jenkins. A junior engineer suggests using a single Jenkinsfile with a declarative pipeline that includes all stages. However, a senior engineer notes that the pipeline should be designed for reusability and maintainability, especially as the number of microservices grows. Which approach best meets these requirements?

Hard
110

Drag and drop the steps to configure OSPF on a Cisco router into the correct order.

Medium
111

When implementing network automation with Cisco devices, which THREE practices help ensure idempotency? (Select THREE)

Hard
112

Which TWO of the following are southbound protocols in SDN?

Medium
113

An engineer needs to automate the backup of configuration files from multiple Cisco IOS devices to a central server. Which protocol is most appropriate for pushing configurations from the devices to the server?

Easy
114

What is the output of the following code? my_list = [1, 2, 3] for i in range(len(my_list)): my_list[i] += 1 print(my_list)

Easy
115

The exhibit shows a JSON response from a Cisco NX-OS API query for interface status. What is the operational state of interface Ethernet1/1?

Easy
116

A Docker container running a web application needs to be accessible on the host's port 8080. The application inside the container listens on port 80. Which docker run command achieves this?

Medium
117

Which of the following is a best practice for version controlling large binary files (e.g., network device firmware images) in a Git repository?

Medium
118

A network engineer is designing a data center network with leaf-spine topology. The requirement is to minimize latency and maximize bandwidth for east-west traffic. Which type of links should be used between leaf and spine switches?

Medium
119

An engineer is configuring Cisco IOS XE for RESTCONF programmability. Which configuration is necessary to enable the RESTCONF API?

Hard
120

A network administrator is configuring SNMPv3 on a router for secure monitoring. Which combination of parameters is required to ensure authentication and encryption?

Medium
121

A network engineer wants to retrieve a list of all network devices from Cisco DNA Center using REST API. Which URL and HTTP method should be used?

Easy
122

In the context of microservices for network automation, which pattern ensures that each service has a separate database to avoid tight coupling?

Hard
123

A DevOps engineer is using the Cisco Meraki API to retrieve a list of networks. Which HTTP method should be used?

Easy
124

What is the primary function of a switch in a network?

Easy
125

A developer is automating network configuration using Cisco DNA Center. They want to deploy a configuration template to multiple devices. Which API category should they use?

Medium
126

Which wireless standard is commonly known as Wi-Fi 6 and operates in both 2.4 GHz and 5 GHz bands?

Easy
127

A developer wants to deploy a containerized application on a Cisco Container Platform (CCP) cluster. The application requires persistent storage. Which Kubernetes resource should be used to provision storage?

Medium
128

When making API calls to Cisco Meraki Dashboard, what header must be included for authentication?

Medium
129

Which TWO statements accurately describe characteristics of infrastructure as code (IaC) in network automation?

Hard
130

A developer wants to run a Docker container in detached mode, mapping host port 8080 to container port 80, and mounting a host directory for persistent data. Which command accomplishes this?

Medium
131

Which DNS record type is used to verify domain ownership for email security (SPF) and is stored as a text string?

Medium
132

In a Kubernetes deployment, a developer needs to expose a set of pods internally within the cluster on a stable IP address. The pods are stateless and serve HTTP traffic. Which Service type should be used?

Medium
133

A network engineer attempts to use RESTCONF to retrieve the running configuration of a Cisco IOS XE device. The GET request to '/restconf/data/Cisco-IOS-XE-native:native' returns a 405 Method Not Allowed error. What is the most likely cause?

Hard
134

A network administrator needs to verify that a switch port is configured as an access port and assigned to VLAN 30. Which command should be used on a Cisco IOS switch?

Easy
135

An engineer is configuring IOS XE for RESTCONF. Which YANG module must be enabled to use RESTCONF?

Medium
136

Which header is used to pass an API key in Meraki Dashboard API requests?

Medium
137

During a security audit, it is found that a microservice exposes its internal IP address in error responses. This could help attackers map the network. What is the BEST remediation?

Medium
138

A network administrator needs to assign IP addresses to devices on a subnet with a /25 prefix. How many usable host addresses are available?

Easy
139

During a network migration, an engineer needs to replace a legacy core switch with a new one without disrupting the existing STP topology. The new switch supports RSTP and will be connected via two trunk links. Which configuration should be applied to the new switch to prevent it from becoming the root bridge?

Hard
140

Which Cisco platform provides an Intent API for network automation, including endpoints for network-device, topology, and site hierarchy?

Medium
141

A developer wants to automate the configuration of multiple Cisco IOS-XE devices using Ansible. Which protocol should be used to ensure secure and idempotent configuration updates?

Easy
142

In the context of Cisco Webex APIs, which mechanism allows an application to receive real-time notifications when a message is created in a space?

Hard
143

A company uses Cisco DNA Center to manage their network. A developer wants to retrieve the overall health score of a specific site using the DNA Center REST API. Which API path should be used?

Medium
144

A company is deploying a new application that requires low-latency communication between servers in the same data center. The network team is designing a leaf-spine architecture. What is the primary advantage of this topology over a traditional three-tier design?

Medium
145

A company deploys a microservice using Kubernetes. The service must be accessible externally via a stable IP address and load-balanced across pods. Which Service type should be used?

Medium
146

An engineer is troubleshooting a Cisco DNA Center API call that returns a 401 error. What is the most likely cause?

Medium
147

In a microservices architecture, which of the following is a key characteristic compared to a monolithic architecture?

Hard
148

A developer is automating VLAN configuration on a Cisco switch using REST API. Which HTTP method should be used to create a new VLAN?

Easy
149

A Kubernetes deployment is configured with replicas: 3. During a rolling update, the deployment strategy is set to RollingUpdate with maxSurge: 1 and maxUnavailable: 0. What is the maximum number of pods that will be running during the update?

Hard
150

Which THREE of the following are features of HTTP/2?

Hard
151

In gNMI, what is the difference between dial-in and dial-out streaming?

Hard
152

An organization is planning to implement HTTPS for their web services. Which three statements accurately describe the HTTPS protocol? (Choose three.)

Hard
153

Refer to the exhibit. A router has the routing table shown. A packet arrives at GigabitEthernet0/0 with destination IP 8.8.8.8. What will the router do?

Hard
154

In the context of REST API design, which HTTP status code should be returned when a client sends a request that exceeds the API rate limit?

Medium
155

A developer is writing a Python script to interact with a Cisco device using NETCONF. Which library is most appropriate?

Medium
156

A company uses Cisco NSO to manage multiple network devices. They want to ensure that before deploying a configuration change, all devices are in sync with NSO's CDB. Which approach is the best practice?

Hard
157

What is the primary benefit of using HTTP/2 over HTTP/1.1?

Easy
158

Which HTTP method is used to partially update an existing resource in a RESTful API?

Easy
159

Which three statements about Webex API webhooks are true? (Choose three.)

Hard
160

Which THREE of the following are true about HTTP/2 compared to HTTP/1.1? (Select three.)

Hard
161

Which THREE of the following are typically included in a Cisco DevNet sandbox environment? (Choose three.)

Medium
162

Which TWO of the following are valid reasons to use a trunk link between two switches? (Select exactly two.)

Medium
163

A Python developer is working on a microservices project where one service needs to communicate with another service that exposes a GraphQL API. Which THREE statements about GraphQL compared to REST are accurate? (Choose three.)

Hard
164

An engineer needs to troubleshoot a RESTCONF request that returns a 409 Conflict error when trying to modify a YANG data node. What is the most likely cause?

Hard
165

A Python script using the ncclient library connects to a Cisco IOS-XE device to retrieve the running configuration. The script raises an exception: 'TimeoutError: Session timed out'. Which is the most likely cause?

Hard
166

A Python function is designed to fetch device data from multiple sources. It uses *args to accept variable number of API endpoints and **kwargs for optional parameters like timeout. Which function definition correctly implements this?

Medium
167

A network technician runs the command 'ping 8.8.8.8' from a workstation and receives 'Reply from 192.168.1.1: Destination host unreachable.' What does this indicate?

Easy
168

Which of the following is a private IPv4 address range as defined by RFC 1918?

Easy
169

A team is deploying a microservice that must scale independently. The service uses environment variables for configuration. Which Kubernetes resource should be used to store non-sensitive configuration data separate from the container image?

Medium
170

In Software-Defined Networking (SDN), which interface is used for communication between the controller and the network devices (e.g., switches) to forward traffic?

Medium
171

A Meraki dashboard API request to list networks returns a paginated response. The engineer notices a Link header in the response. What does this header typically contain?

Medium
172

A script is using the Cisco Meraki API to fetch a list of organizations. The script needs to authenticate with an API key. Where should the API key be included in the request?

Easy
173

A developer is using NX-API on a Cisco Nexus switch to execute CLI commands via JSON. Which endpoint and method should be used?

Hard
174

Which TWO of the following are characteristics of UDP compared to TCP? (Select two.)

Medium
175

Refer to the exhibit. A security audit requires that the container cannot run as root. Which part of the pod spec ensures this?

Medium
176

Given the following Python code snippet: with open('config.json', 'r') as f: data = json.load(f) print(data['interfaces'][0]['name']) What is the expected output if config.json contains {"interfaces": [{"name": "GigabitEthernet0/1"}]}?

Medium
177

A developer needs to create a Postman collection that uses a variable for the base URL and a token variable for authentication. The token is obtained from a login request and must be reused across requests. Where should the token variable be defined to persist across all requests in the collection?

Medium
178

A DevOps team manages a hybrid cloud environment with on-premises Cisco Nexus switches and AWS VPCs using Terraform. They have a configuration management tool that pushes VLAN and interface configurations to the Nexus switches. Recently, they noticed that after a Terraform run that updates the AWS VPC subnets, some on-premises switches lose connectivity to the cloud. The team suspects a mismatch between the VLAN configurations on the Nexus switches and the AWS VPC subnets. They have a centralized source of truth stored in a Git repository containing YAML files for network definitions. Which action should the team take first to resolve the issue and prevent future occurrences?

Easy
179

A developer is using Cisco Webex Teams REST API. Which two authentication methods are supported for bot accounts? (Choose two.)

Easy
180

A Python script using the Cisco ACI Toolkit (aciToolkit) fails with 'LoginError: unable to login to APIC'. The APIC is reachable via HTTPS. What is the most likely cause?

Hard
181

A developer wants to retrieve a list of network devices from Cisco DNA Center. Which HTTP method and URL structure should be used?

Easy
182

A developer is using the Meraki Dashboard API to list the organizations accessible by the API key. They send a GET request to https://api.meraki.com/api/v1/organizations. What is the correct way to pass the API key?

Medium
183

Which TWO of the following are commonly used HTTP methods for a RESTful API to retrieve and update a resource? (Select TWO)

Medium
184

A network engineer is designing a subnet that needs to support 30 usable hosts. Which subnet mask should be used?

Medium
185

A developer is building an integration with Cisco Webex and needs to retrieve information about the authenticated user. Which TWO APIs can be used? (Choose two.)

Medium
186

In a Kubernetes cluster, you need to store non-sensitive configuration data (e.g., database hostname) that can be consumed by pods as environment variables. Which resource should you use?

Hard
187

In a microservices architecture, a REST API must support idempotent updates. Which HTTP method and design practice should be used?

Hard
188

A developer uses Cisco Intersight API to manage UCS servers. Which authentication method is required for Intersight API calls?

Easy
189

A developer is building an integration with Cisco Meraki and needs to handle rate limiting. Which two responses indicate rate limiting and how should they be handled? (Choose two.)

Medium
190

Which TWO of the following are commonly used protocols for network automation?

Easy
191

A YANG module defines a leaf named 'bandwidth' of type 'uint32'. What does this represent in the context of a network device?

Easy
192

Which YANG model is commonly used as an open standard for interface configuration and is supported by many vendors?

Easy
193

A network engineer is automating the deployment of VLANs across multiple switches using Ansible. The playbook fails with an error indicating that the VLAN ID already exists on one of the switches. Which approach should the engineer use to ensure the playbook completes without errors?

Medium
194

In version control with Git, which command creates a new branch and switches to it in one step?

Medium
195

A developer is using Postman to test a Cisco Webex API that creates a room. After running the request, they want to verify that the response status is 200 and that the response body contains a non-null 'id' field. Which Postman test code accomplishes this?

Hard
196

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required, such as a backend service calling Cisco API?

Medium
197

A developer wants to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint should they use?

Easy
198

During an automation script run, a network device returns HTTP 429. What does this indicate?

Medium
199

Which TWO statements about Dockerfile best practices are correct? (Choose two.)

Medium
200

A network administrator is configuring subnetting for a new branch office that requires 50 usable host addresses per subnet. The available network is 192.168.10.0/24. What subnet mask should be used to meet the requirement with minimal waste?

Medium
201

A Python script sends a PUT request to update a resource. The API returns a response with status code 204. What does this indicate?

Medium
202

An application sends a packet with destination IP 10.0.0.10. The sending host's routing table has a default gateway of 10.0.0.1. The host's ARP cache is empty. What is the next step after the host determines the packet should go to the default gateway?

Hard
203

Which Cisco product provides end-to-end application visibility and performance monitoring across hybrid cloud environments?

Easy
204

Which THREE of the following are characteristics of NETCONF? (Select THREE)

Hard
205

A developer is making a GET request to a REST API and needs to specify that the response should be in JSON format. Which HTTP header should be set?

Easy
206

Which THREE of the following are common steps in a CI/CD pipeline for a Python application that manages Cisco devices?

Medium
207

A CI/CD pipeline for a Python project should run unit tests and check for known vulnerabilities in dependencies. Which tool can be integrated into the pipeline to perform dependency scanning?

Medium
208

A network administrator uses the Cisco IOS XE CLI to configure a router. They want to use a Python script to automate this configuration via the guest shell. Which library should they use to interact with the CLI from within the guest shell?

Medium
209

Which THREE of the following are best practices when using Git for a collaborative project? (Choose three.)

Hard
210

Refer to the exhibit. An Ansible playbook targeting a Cisco IOS device fails with this error. What is the most likely cause?

Easy
211

A developer is working with the Meraki Dashboard API to manage SSIDs. Which TWO statements about pagination are correct? (Choose two.)

Medium
212

Which THREE of the following are layers in the OSI model? (Select exactly three.)

Easy
213

A developer is writing a Python script using the Cisco Webex Teams API to send a message to a specific room. The script works for some rooms but fails for others with a 404 error. What is the most likely reason?

Hard
214

Given the JSON string: '{"name": "Alice", "scores": [90, 85, 92]}', which Python code correctly extracts the second score (85)?

Medium
215

An application exposes a REST API. To ensure that only authorized clients can access the API, the developer implements token-based authentication. Which HTTP header is typically used to transmit the bearer token?

Easy
216

At which layer of the OSI model do switches operate when forwarding frames based on MAC addresses?

Easy
217

A developer creates a Dockerfile for a Python web application. Which instruction should be used to define the working directory inside the container for subsequent commands?

Easy
218

Which TWO of the following are common methods for authenticating to Cisco REST APIs? (Choose two.)

Easy
219

Which TCP flag is set in the second step of the three-way handshake?

Medium
220

A developer is building a chatbot that retrieves interface status from a Cisco Catalyst 9000 switch using RESTCONF. Which authentication method is most appropriate for programmatic access?

Medium
221

A developer is working with a REST API that uses HTTP Basic Authentication. The developer needs to send a request with the username 'admin' and password 'secret'. Which HTTP header should be set?

Easy
222

Which TWO conditions are valid triggers for a webhook notification in Cisco Meraki?

Easy
223

A developer is using gRPC/gNMI for model-driven telemetry from a Cisco device. Which of the following best describes the difference between dial-in and dial-out streaming?

Medium
224

A developer is building a Cisco Webex bot that needs to automatically respond to messages. Which THREE resources/endpoints are essential for this functionality? (Choose three.)

Hard
225

Refer to the exhibit. A Python script using RESTCONF sends a GET request to retrieve the interface configuration. The response is shown. What is the VLAN assigned to GigabitEthernet1/0/1?

Medium
226

In a Cisco DNA Center environment, an application needs to retrieve the network device list using REST API. Which authentication method is required?

Medium
227

Which Cisco platform provides a cloud-managed dashboard with a REST API that uses an API key in the header and has a rate limit of 5 requests per second?

Easy
228

An organization has a web server that needs to be reachable via both 'www.example.com' and 'example.com'. Which DNS record type should be used to make 'example.com' an alias for 'www.example.com'?

Medium
229

An engineer notices that a switch port configured as an access port in VLAN 10 is not forwarding traffic. The switch shows the port is up/up. What is the most likely cause?

Easy
230

During a CI/CD pipeline for network changes, a Jenkins job runs an Ansible playbook that applies configuration to a device. The playbook fails with a timeout error. What is the most likely cause?

Medium
231

Which TWO of the following Git commands modify the commit history? (Select TWO)

Hard
232

Which HTTP header is used to specify the format of the request body (e.g., application/json) when sending a POST request to a REST API?

Medium
233

Which THREE of the following are constraints of the REST architectural style (as defined by Roy Fielding)?

Hard
234

A web application uses HTTPS to secure communications between client and server. What does HTTPS add on top of HTTP to provide encryption and authentication?

Easy
235

A developer is implementing gRPC telemetry with dial-out streaming from a Cisco IOS XE device. Which component initiates the TCP connection to the collector?

Hard
236

Which TWO Cisco platforms provide comprehensive REST APIs for network configuration and monitoring?

Easy
237

Which Docker command is used to build an image from a Dockerfile?

Easy
238

A company has two Cisco Catalyst switches, SW1 and SW2, connected via a trunk link using port GigabitEthernet0/1 on both switches. SW1 is the root bridge for all VLANs spanning tree. VLAN 10 users on SW1 report they can access the internet and resources in VLAN 10 on SW2, but cannot reach a critical server in VLAN 20 connected to SW2. The server in VLAN 20 has a static IP address and can communicate with other VLAN 20 devices on SW2. SW2's configuration for the trunk port includes 'switchport trunk allowed vlan 10,20'. SW1's trunk port configuration is 'switchport trunk allowed vlan 10'. The network administrator has verified that both switches have VLANs 10 and 20 created and that the default gateways are correct. What is the most likely cause of the issue?

Easy
239

A DevOps team is automating network configuration using Ansible. They want to push a new VLAN configuration to a switch but ensure that only one switch is updated at a time to avoid network disruption. Which Ansible strategy or feature should they use?

Hard
240

In a Kubernetes cluster, you need to expose a set of pods running a web application to external traffic on a specific port. Which Service type should you use to provide a stable external IP address?

Hard
241

A developer calls Cisco DNA Center API to get device details and receives the JSON response shown. The device 'Switch-A' is listed but the status is 'unreachable'. Which Cisco DNA Center API endpoint was most likely used?

Medium
242

A Python function is defined as: def process(*args, **kwargs): return sum(args) + kwargs.get('offset', 0) What is the result of process(1, 2, 3, offset=10)?

Medium
243

Which TWO functions are performed by the data plane in a network device? (Choose two.)

Easy
244

Which HTTP status code indicates that a POST request successfully created a new resource on the server?

Medium
245

A DevOps team is deploying a microservices application that requires both reliable data transfer and low-latency real-time communication. Which two protocols should be used for these respective requirements? (Choose two.)

Easy
246

A company runs a microservices application on a Kubernetes cluster with 10 worker nodes. The application consists of 3 services: frontend, backend, and database. The database service is stateful and uses persistent volumes. Recently, the operations team noticed that the backend service is experiencing intermittent failures with 'Connection refused' errors when trying to connect to the database. The database service is exposed via a ClusterIP service named 'database-service'. The backend service uses environment variable DB_HOST=database-service to connect. The pod logs show that the connection is attempted to an IP address that does not correspond to any database pod. Further investigation reveals that the database pod has been restarted multiple times due to OOMKilled errors. The backend service is configured with a liveness probe that checks the health endpoint every 10 seconds, and a readiness probe that checks the same endpoint every 5 seconds. The database pod has resource limits set to 512Mi memory and 500m CPU. The node running the database pod has 4Gi memory and 2 CPU cores. What is the most likely cause of the intermittent connection failures?

Hard
247

A Kubernetes administrator wants to use kubectl to troubleshoot a pod named 'my-pod' that is not starting. Which TWO commands are useful? (Choose two.)

Hard
248

Which protocol is commonly used to retrieve real-time telemetry data from network devices in a streaming fashion?

Easy
249

A network administrator is planning to use model-driven programmability on Cisco IOS XE devices. Which TWO are valid YANG model sources for configuration? (Choose two.)

Medium
250

A developer is using Git for a project with a feature branch strategy. They have completed work on a new feature in the branch 'feature-logging' and want to integrate it into the main development branch 'develop'. The team requires that all commits on the feature branch be squashed into a single commit before merging. Which sequence of Git commands achieves this?

Hard
251

A network engineer is automating the deployment of a new VLAN across multiple Cisco switches using Ansible. The engineer has written a playbook that uses the ios_vlan module to create VLAN 100 with name 'Users'. The playbook runs successfully on the first switch but fails on the second switch with the error message: 'VLAN name is already in use'. The engineer checks the second switch and confirms that VLAN 100 does not exist, but a different VLAN with the name 'Users' exists. The engineer wants to ensure that the playbook creates VLAN 100 with the exact name 'Users' only if it does not already exist, and without conflicting with existing VLANs. Which approach should the engineer take?

Medium
252

A developer is writing a Python script to iterate over a list of server hostnames. Which loop structure is most appropriate to process each hostname in the list?

Easy
253

Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)

Hard
254

Refer to the exhibit. A developer sent a POST request to https://apic-ip/api/mo/uni/tn-testtenant.json with a JSON body missing the name attribute. What should the correct JSON body include?

Medium
255

A Python script uses a list comprehension: [x**2 for x in range(20) if x % 2 == 0]. Which of the following is equivalent?

Hard
256

When using the Meraki Dashboard API, what HTTP header is used to pass the API key?

Easy
257

A NETCONF RPC reply indicates a validation failure. Based on the exhibit, what is the most probable reason for the failure?

Medium
258

A developer wants to use the Cisco Webex API to send a message to a specific person by email. Which parameter should be used in the POST /v1/messages request?

Medium
259

Which of the following is a private IPv4 address range as defined by RFC 1918?

Easy
260

An automation script uses the Cisco IOS XE REST API to modify the running configuration. The script sends a PUT request to /restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=1/0/1/ip/address. The response returns 405 Method Not Allowed. What is the most likely reason?

Hard
261

Which TWO methods are commonly used to discover network devices in an automation environment? (Select exactly 2.)

Medium
262

A network engineer is writing a Python script to interact with Cisco DNA Center. After successfully authenticating and receiving a token, what header must be included in subsequent API requests?

Easy
263

During a code review, a developer notices that a function has multiple nested if-else statements. Which refactoring technique would improve maintainability?

Hard
264

A Kubernetes pod runs two containers that need to share a filesystem. Which volume type should be used to enable file sharing between the containers within the same pod?

Medium
265

A network administrator is tasked with automating the deployment of a new VLAN configuration across a fabric of Cisco ACI switches. Which automation tool is best suited for interacting with the APIC REST API?

Medium
266

Which TWO statements about REST API design best practices are correct?

Hard
267

Which Cisco DNA Center API is used to retrieve a list of network devices?

Easy
268

Which THREE of the following are characteristics of the UDP protocol?

Medium
269

Which layer of the OSI model uses MAC addresses to deliver frames within the same network segment?

Easy
270

What is the default transport protocol for NETCONF sessions?

Easy
271

A developer is writing a web application and needs to prevent SQL injection attacks. Which coding practice is most effective?

Medium
272

Which THREE of the following are key characteristics of a RESTful API? (Choose three.)

Medium
273

A Python script sends a POST request to create a new network device resource. The API returns HTTP status code 201 and a JSON response with the device ID. How should the script correctly extract the device ID from the response?

Medium
274

Which non-overlapping channels are available in the 2.4 GHz band for Wi-Fi to minimize interference?

Easy
275

Which THREE of the following are valid NETCONF operations? (Choose three.)

Hard
276

A Python script uses the Cisco Meraki API to create a new network and then immediately attempts to configure an SSID on that network. The SSID creation fails with a 400 error indicating 'network is not ready'. What is the most likely cause?

Hard
277

During a migration from legacy to SD-Access, a network team wants to use Cisco DNA Center to automate policy deployment. They have defined a macro-level intent but need to ensure that the fabric devices are correctly configured. Which API call should they use to validate the fabric configuration?

Hard
278

A Python script using the Cisco Meraki SDK fails with 'APIError: 429 Too Many Requests'. What action should the developer take?

Easy
279

Which IP address is a valid host address in the 192.168.1.0/24 network?

Medium
280

A software-defined networking (SDN) controller is being deployed to manage network devices. Which two components are part of the SDN architecture? (Choose two.)

Medium
281

A company uses GitHub Actions for CI/CD. They want to automatically scan dependencies for known vulnerabilities on every push. Which action should be added to the workflow?

Hard
282

Which three statements are true about the Cisco Catalyst Center (formerly DNA Center) intent API? (Choose three.)

Hard
283

A developer is configuring a RESTCONF request to retrieve the configuration of an interface on a Cisco device. Which URL path and Content-Type header are correct?

Hard
284

A developer is working on a Python script that performs CRUD operations on devices via a REST API. Which HTTP method should be used to update an existing device's configuration partially?

Easy
285

An administrator wants to retrieve a list of all network devices from Cisco DNA Center using the REST API. Which authentication method must be used first to obtain a token?

Easy
286

Which TWO statements about VLAN trunking are true?

Medium
287

Which pagination method uses a 'Link' header with 'rel="next"' to indicate the next page of results?

Medium
288

A DevOps team is deploying a containerized application across multiple hosts. They need to ensure that traffic between containers on the same host is isolated from other tenants. Which network implementation best meets this requirement?

Hard
289

Which TWO tools are commonly used for automated network compliance checking against a desired state? (Select two)

Medium
290

Refer to the exhibit. A developer sends a PUT request to the RESTCONF endpoint with the above JSON payload. The device already has interface GigabitEthernet1/0/1 configured with IP address 10.10.10.1/24. What is the expected outcome?

Hard
291

An administrator wants to retrieve a list of all network devices from Cisco DNA Center using the REST API. Which authentication method is required to obtain the API token?

Easy
292

A network administrator is asked to reduce the size of the routing table on a core router. The router currently has many /24 routes learned via BGP. Which technique will most effectively reduce the number of routes without losing reachability to all subnets?

Medium
293

An application running on Kubernetes is experiencing intermittent 503 errors. The logs show 'upstream timed out'. The application is behind a Cisco Application Policy Infrastructure Controller (APIC) load balancer. What is the most likely cause?

Hard
294

Which TWO are valid capabilities advertised during a NETCONF session?

Easy
295

Refer to the exhibit. A Meraki network has a group policy 'Block Social Media' that references a content filtering rule. The policy is applied to VLAN 1. Users in that VLAN cannot access instagram.com but can access facebook.com. What is the most likely reason?

Hard
296

A CI/CD pipeline is configured to build a Docker image, run unit tests, and push the image to a registry. To ensure that only successfully tested images are pushed, which stage order is correct?

Hard
297

A developer needs to parse a JSON string received from a REST API into a Python dictionary. Which function should they use?

Medium
298

What does the Link header in a paginated API response typically contain?

Easy
299

A developer is troubleshooting an API call to Cisco SD-WAN vManage. The request fails with HTTP 400 status and the response body: '{"error": "Bad Request", "details": "Invalid JSON: unexpected token at position 42"}'. Which tool or technique should the developer use to quickly identify the syntax error?

Hard
300

A developer wants to get the current user's information from the Webex API. Which endpoint should they use?

Easy
301

A developer needs to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint and HTTP method should be used?

Easy
302

A large enterprise uses Cisco Meraki for their wireless and switching infrastructure. The network team has developed a Python script that uses the Meraki API to automatically update SSID configurations across all networks. The script has been running successfully for months, performing daily updates to SSID settings such as names, passwords, and VLAN assignments. Recently, the script started failing with the following error message: '{"errors":["This operation is not allowed for this network"]}'. The team has verified the following: the API key is still valid and has access to the full organization, the network IDs used in the script are correct and the networks are active, and no changes have been made to the script code. The script uses the PUT endpoint '/networks/{networkId}/wireless/ssids/{number}' to update SSIDs. What is the most likely cause of the failure?

Hard
303

When designing a RESTful API for a network automation tool, which status code indicates that a resource has been created successfully?

Easy
304

Refer to the exhibit. During a rolling update, a developer notices that the new pods are not passing the readiness probe and the update stalls. What is the most likely reason?

Medium
305

A web application is vulnerable to SQL injection. Which secure coding practice should the developer implement in the code to prevent this?

Medium
306

A network engineer is subnetting the network 192.168.1.0/24 into subnets that each support at least 50 hosts. What subnet mask should be used?

Hard
307

Which THREE of the following are best practices for writing Ansible playbooks for network automation? (Select exactly 3.)

Hard
308

An application running in a Kubernetes pod needs to access an external database securely. The database credentials are rotated every 24 hours. Which approach ensures that the pod always uses the current credentials without manual intervention?

Hard
309

A REST API uses offset and limit parameters for pagination. If the first request returns items 0-49 with limit=50 and offset=0, how should the next request be constructed to get the next page?

Medium
310

Which Docker networking mode provides the most isolation by not connecting the container to any network?

Easy
311

A Python script uses a try/except block to handle API errors. If the API returns a 429 status code, which mechanism should the script implement to handle the error appropriately?

Hard
312

Which TWO of the following are best practices for securely managing API tokens in a CI/CD pipeline?

Easy
313

An application needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should be used?

Medium
314

In Software-Defined Networking (SDN), the control plane is separated from the data plane. Which of the following best describes the function of the southbound API?

Hard
315

Which three actions can an EEM applet perform when triggered? (Choose three.)

Hard
316

A network engineer runs an Ansible playbook to backup a Cisco router configuration. The playbook fails with the error: 'ssh: connect to host 192.168.1.1 port 22: Connection timed out'. What is the most likely cause?

Easy
317

In the OSI model, which layer is responsible for session management, including establishing, maintaining, and terminating connections between applications?

Hard
318

A microservice application uses JWT for authentication. The JWT is signed with RS256. Which practice ensures that the public key used for verification is securely distributed to all services?

Hard
319

A developer has created a Webex Teams bot that listens for messages in a specific room and responds with information from an external database. The bot uses the Webex API's 'messages.create' method to post replies. During testing, the bot sometimes fails to respond, but no errors are logged. The developer checks the Webex Developer Portal and sees that the bot's rate limit is set to 10 requests per second. The bot's average load is 5 requests per second, but occasionally spikes to 15 requests per second for a few seconds. The developer wants to ensure the bot functions reliably without exceeding rate limits. Which approach should the developer implement?

Medium
320

A developer needs to securely store API keys for use in a CI/CD pipeline. Which best practice should be followed?

Easy
321

Which HTTP method is considered both safe and idempotent?

Easy
322

Which TWO of the following are characteristics of the YANG data modeling language that make it suitable for network automation? (Select two)

Easy
323

In a Postman collection, a developer stores the base URL of a Meraki API as a variable. Which Postman feature allows this?

Easy
324

A developer is building a dashboard that displays the health status of network devices managed by Cisco ACI. The developer uses the ACI REST API to query the APIC (Application Policy Infrastructure Controller). The developer sends a GET request to https://apic-ip/api/class/fabricHealthInst.json returns a JSON object with health scores. The dashboard works for a small set of devices, but when scaled to 500 devices, the API responses become slower and sometimes time out. The developer needs to optimize the data retrieval to keep the dashboard responsive. Which approach should the developer use?

Easy
325

Refer to the exhibit. What is the most effective action to eliminate both vulnerabilities in the container image?

Hard
326

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

Easy
327

A Kubernetes cluster runs a microservice that needs to read configuration values from a ConfigMap and sensitive database credentials from a Secret. The pod manifest references both resources. How should the Secret be mounted to avoid exposing sensitive data in logs or environment variables?

Hard
328

A developer has a Docker container running a database. They need to inspect the database logs to debug a connection issue. Which command will show the logs in real-time?

Hard
329

A developer wants to receive real-time notifications when a new message is posted in a Webex room. Which Webex API resource should they use?

Easy
330

A network engineer is configuring EtherChannel between two switches. The switches are connected via four links. The engineer wants to load balance traffic based on source and destination IP addresses. Which configuration command should be used on Cisco IOS?

Hard
331

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. The API returns a 429 error. What should the developer do to handle this correctly?

Hard
332

A company uses a blue/green deployment strategy for their web application. The current live version is blue, and a new version green is ready. The load balancer currently routes all traffic to blue. What is the correct next step to switch traffic to green with minimal downtime?

Medium
333

Which THREE are valid ways to expose ConfigMap data to a pod in Kubernetes?

Medium
334

In Cisco DNA Center, which API category includes the ability to deploy a configuration template to devices?

Hard
335

A developer is creating a Dockerfile for a Python Flask application. The application runs on port 5000. Which directive should be used to document that the container listens on this port?

Easy
336

A network engineer wants to automate a configuration change on a Cisco IOS XE device when a specific syslog message appears. Which tool should they use?

Hard
337

A Docker container needs to be started in detached mode with port mapping from host port 8080 to container port 80. Which command accomplishes this?

Easy
338

A network engineer writes a Python script to handle exceptions when making REST API calls. Which exception type should be caught to handle network connectivity issues (e.g., DNS failure, refused connection)?

Medium
339

Which THREE options are valid methods to expose a Kubernetes service to external traffic?

Hard
340

A developer is writing a Dockerfile for a Node.js application. Which TWO instructions are commonly used to define the command that runs when the container starts?

Medium
341

A network engineer is troubleshooting connectivity issues and wants to verify the path that packets take from a source to a destination IP address. Which OSI layer is primarily responsible for packet forwarding and routing?

Easy
342

An organization uses Cisco DNA Center and wants to programmatically deploy a configuration template to multiple devices. Which API category should be used?

Medium
343

A developer wants to ensure that a Docker container running a web application can only accept incoming traffic on port 443. Which Docker run option should be used?

Easy
344

Which Docker command is used to view the logs of a running container in real-time?

Easy
345

A developer needs to send a message to a Webex room using the API. Which HTTP method and endpoint should they use?

Easy
346

Which THREE of the following are valid JSON data types? (Choose three.)

Medium
347

Which TWO practices help prevent sensitive data exposure in a CI/CD pipeline? (Select two.)

Easy
348

An application developer is using a protocol that does not require a connection setup and has minimal header overhead. Which transport protocol is being used?

Easy
349

A DevOps team is deploying a microservices application on Cisco UCS using Docker containers. They need to ensure that secrets such as database credentials are securely managed without hardcoding them in the application code or container images. Which approach should they use?

Medium
350

A Kubernetes Service must expose a pod running a database to other pods in the same cluster, but not externally. Which Service type should be used?

Hard
351

A company uses a /24 subnet for its office LAN. The network must accommodate 30 hosts per VLAN. Which subnet mask would be most efficient for each VLAN while minimizing wasted IP addresses?

Medium
352

Which two Meraki Dashboard API features are used to paginate through large result sets? (Choose two.)

Medium
353

A network engineer is configuring a new switch and needs to ensure that frames from VLAN 10 and VLAN 20 are isolated on the same trunk link to another switch. Which IEEE standard should be configured on the trunk interfaces?

Easy
354

Refer to the exhibit. Based on the YANG model snippet, what is the data type of the 'mask' leaf?

Hard
355

A network administrator is deploying a new application that requires high availability and load balancing across multiple servers. The servers are connected to a pair of switches that use StackWise virtual technology. The application team requests that the servers be configured with NIC teaming in active-active mode. Which two requirements must be met for this configuration to work correctly? (Choose two.)

Easy
356

In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?

Hard
357

A network administrator is deploying a custom container application on a Cisco Catalyst 9300 switch running IOS XE 16.12. The application is packaged as a .tar file and installed using 'app-hosting install app myapp flash:myapp.tar'. The administrator configures the app-hosting context as follows: app-hosting app myapp app-default-gateway 192.168.1.1 app-vnic gateway0 guest-interface 0 guest-ipaddress 192.168.1.10 netmask 255.255.255.0 app-resource profile custom cpu 1000 memory 2048 storage 5000 The administrator also creates a virtual port group 'vg0' and assigns it to the management interface. The application fails to start with the error: 'Application failed to start: guest interface not ready'. The administrator verifies that the .tar file is valid, the resources are sufficient, and the gateway is reachable. What is the most likely cause of the failure?

Hard
358

An HTTP/2 connection uses multiple concurrent streams over a single TCP connection. Which feature of HTTP/2 enables this?

Hard
359

A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?

Medium
360

Which OSI layer is responsible for routing packets across different networks?

Easy
361

An application uses the Meraki Dashboard API and receives a 429 Too Many Requests error. What is the most likely cause, and how should the application adjust?

Medium
362

Which THREE are valid methods for managing Kubernetes application configuration?

Easy
363

A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?

Medium
364

A software developer is using the Cisco Webex REST API and wants to filter messages by date range. Which two query parameters should be included? (Choose two.)

Easy
365

Which of the following is a private IPv4 address range as defined by RFC 1918?

Medium
366

Which authentication method is used by the Cisco Meraki Dashboard API?

Medium
367

A developer is troubleshooting a CI/CD pipeline that automatically deploys configuration changes to network devices. The pipeline includes a stage that runs Python unit tests. Which of the following would be a valid test to include in that stage to validate the configuration before deployment?

Hard
368

An engineer needs to identify which hosts are reachable in a 10.0.0.0/24 network using an automated script that does not require any credentials on the target devices. Which protocol is best suited for this task?

Easy
369

An organization uses Cisco Intersight to manage UCS servers. They want to automate the firmware upgrade process. Which Intersight API should be used to trigger a firmware upgrade on a server?

Easy
370

A network automation solution uses YANG data models to describe network configurations. Which THREE statements about YANG are true? (Select THREE)

Medium
371

A network engineer needs to allow HTTPS traffic from the internet to an internal web server. Which type of firewall rule should be applied on the perimeter firewall?

Easy
372

A developer runs the command: docker run -d -p 8080:80 --name web nginx. Which of the following best describes what happens?

Easy
373

Which header is used in an HTTP request to tell the server the format of the request body?

Easy
374

A company has a three-tier data center architecture with access, aggregation, and core layers. The network team is migrating to a leaf-spine architecture to support increasing east-west traffic. The current network uses STP for loop prevention, and the team wants to eliminate STP in the new design. They plan to use VXLAN overlays with BGP EVPN for control plane. During a pilot deployment, the team notices that some legacy servers that rely on traditional VLANs are not reachable across the new fabric. The servers are connected to access switches that are part of the leaf layer. The access switches are configured as VXLAN tunnel endpoints (VTEPs) but the legacy servers are still using traditional VLANs. The team needs to ensure connectivity between the legacy VLAN-based servers and the new VXLAN-based network. What is the best approach to integrate these legacy servers without changing their configuration?

Hard
375

A DevOps engineer is automating network device configuration using Ansible. The playbook must retrieve the MAC address table from a Cisco switch. Which protocol should the engineer use to fetch this data?

Hard
376

Which TWO of the following are characteristics of TLS (Transport Layer Security) used in HTTPS? (Choose two.)

Medium
377

A CI/CD pipeline for a microservice application includes stages: code commit, build Docker image, push to registry, deploy to staging, run integration tests, and deploy to production. The team wants to ensure that if integration tests fail, the pipeline stops and does not proceed to production. Which CI/CD concept is used to enforce this behavior?

Medium
378

A Kubernetes pod needs to read configuration data such as database hostname, which is non-sensitive and may change across environments. Which resource should be used to store this data and inject it into the pod?

Medium
379

A network administrator wants to use EEM on an IOS XE device to send a syslog message whenever a specific CLI command is entered. Which event detector should be used?

Hard
380

In a Docker Compose file, you want to ensure that the 'web' service starts only after the 'db' service is healthy. Which key should you use under the 'web' service?

Medium
381

An engineer is automating the configuration of SNMP on Cisco routers using Ansible. Which two modules are commonly used for this purpose? (Select TWO)

Easy
382

Which THREE are characteristics of OSPF? (Choose three.)

Medium
383

Which TWO commands are used to view information about Docker containers? (Select two.)

Medium
384

Refer to the exhibit. A Python script uses the YANG model to configure the interface. After applying this JSON payload via a PATCH request, what is the expected operational state of the interface?

Hard
385

Refer to the exhibit. A developer receives this response when making a POST request to the Cisco DNA Center API to create a new device. What is the most likely issue?

Hard
386

Refer to the exhibit. A developer is parsing the output of 'show ip route' using Python. Which regular expression would extract the prefix '10.0.1.0/24'?

Easy
387

Which HTTP method is used to partially update a resource in a RESTful API?

Easy
388

Match each YAML structure to its description.

Medium
389

Refer to the exhibit. A PC is connected to interface GigabitEthernet0/1 on a Cisco switch. The PC is in VLAN 10. What is the purpose of the 'spanning-tree portfast' command on this interface?

Easy
390

An engineer is configuring Cisco IOS XE device programmability using RESTCONF. Which THREE of the following are required to enable and use RESTCONF on the device?

Medium
391

You are deploying a new data center network using Cisco Nexus switches. The design uses Virtual Port Channel (vPC) to provide redundancy and increased bandwidth to servers with dual-homed NICs. The two vPC peer switches are NX1 and NX2, and they are connected via a peer-link. The servers are configured with active/standby NIC teaming. After the deployment, you notice that some ARP requests from servers are not being responded to, leading to connectivity issues. Analysis shows that when a server sends an ARP request for its default gateway (which is a virtual IP on the vPC), only one of the peer switches responds, but the response does not reach the server intermittently. The vPC is correctly configured, and the peer-gateway feature is enabled. What is the most likely cause?

Medium
392

A developer is using NETCONF to retrieve the running configuration of a network device. Which operation should be used?

Hard
393

A team uses Git for source control. They want to ensure that all code committed to the main branch passes unit tests and linting. Which Git workflow practice best ensures this?

Hard
394

In a CI/CD pipeline for network changes, which practice best ensures that a configuration push does not disrupt production traffic?

Hard
395

Match each CI/CD concept to its definition.

Medium
396

Which wireless security standard provides the strongest encryption and is recommended for enterprise networks as of 2023?

Hard
397

An administrator is configuring DNS records for a company's domain. Which three DNS record types are most commonly used to map hostnames to IP addresses or aliases? (Choose three.)

Medium
398

Which THREE of the following are common design patterns for microservices? (Choose three.)

Hard
399

In a docker-compose.yaml file, which key is used to define the container image to be built from a Dockerfile in the current directory?

Easy
400

A developer needs to ensure that microservice A can securely communicate with microservice B over HTTPS within a Kubernetes cluster. What is the simplest approach?

Easy
401

A developer is designing a microservices architecture for a network monitoring application. Which of the following is a key advantage of microservices over a monolithic architecture?

Medium
402

A Python script sends the above REST API request to a Cisco Catalyst 9000 switch running IOS XE. The response is a 400 Bad Request. Which field is most likely missing from the JSON payload?

Hard
403

Refer to the exhibit. A network engineer runs a script that queries the Cisco DNA Center site health API. The response shows Branch1 with a healthScore of 10. What is the most likely action to improve Branch1's health?

Medium
404

In HTTP/2, which feature allows multiple concurrent requests and responses to be interleaved on a single connection, improving performance?

Medium
405

Which TWO of the following are essential steps in a typical Git workflow when collaborating on a feature branch? (Choose two.)

Easy
406

A developer is designing an API that needs to support rate limiting per API key. The application is deployed on multiple instances. Which approach ensures consistent rate limiting across all instances?

Medium
407

In a Dockerfile, which instruction is used to set an environment variable that will be available at runtime?

Easy
408

Which TWO of the following are valid branching strategies in Git? (Choose two.)

Medium
409

A network administrator automates the provisioning of Meraki MX security appliances using the Meraki Dashboard API. The Python script reads a CSV file with site details and creates VLANs, firewall rules, and VPN settings. Recently, the script started throwing an HTTP 429 error. The script is single-threaded and makes fewer than 10 requests per second. Which of the following is the most likely cause of the 429 error?

Medium
410

A Cisco Webex bot needs to receive real-time notifications when new messages are posted in a space. Which API feature should the bot use?

Medium
411

A network engineer is planning to use model-driven programmability with YANG models. Which three statements about YANG models are correct?

Hard
412

Refer to the exhibit. The Docker image built from this Dockerfile is larger than expected. Which optimization should be recommended?

Easy
413

A developer needs to partially update a Meraki network's configuration, changing only the time zone. Which HTTP method should be used on the network resource?

Easy
414

A developer is using the NX-API on a Cisco Nexus switch to retrieve the configuration. The developer sends a POST request to /ins with a JSON payload. Which HTTP method and path are correct?

Hard
415

An organization uses a private Docker registry with TLS. A developer attempts to pull an image and receives the error: "x509: certificate signed by unknown authority". What is the most likely cause and solution?

Hard
416

A team uses GitHub for version control and wants Jenkins to automatically run tests when changes are pushed to the main branch. Which trigger should be configured in the Jenkins job?

Easy
417

A network automation engineer wants to retrieve a list of all network devices from Cisco DNA Center. Which HTTP method and URL path should be used with the DNAC intent API?

Easy
418

A DevOps engineer wants to automate the configuration of network devices using Ansible. Which file format is commonly used for Ansible playbooks?

Easy
419

Which of the following is a private IPv4 address range as defined by RFC 1918?

Easy
420

A team is designing a CI/CD pipeline that uses the Cisco ACI REST API to deploy tenant policies. Which best practice should be followed for secure credential management?

Hard
421

A developer is deploying a microservice to a Kubernetes cluster. The application needs to read a database password securely without hardcoding it in the image. Which Kubernetes resource should be used?

Easy
422

A Kubernetes Deployment manages a set of identical pods. You update the container image to a new version. The rollout gets stuck. Which kubectl command should you use to view the rollout status and determine the cause?

Hard
423

A developer writes a web application that accepts user input and displays it on a page. To prevent cross-site scripting (XSS), what is the most effective defense?

Medium
424

A developer is designing a Python script that uses the NSO (Network Services Orchestrator) northbound API. Which data format is natively supported by NSO's RESTCONF API?

Medium
425

A network application requires reliable, ordered delivery of data and uses a three-way handshake to establish a connection. Which transport protocol is being used?

Medium
426

A developer is using the Meraki Dashboard API and receives an HTTP 429 status code with a Retry-After header. What is the correct interpretation?

Hard
427

Which TWO of the following are features of the DNA Center 'Platform' API category?

Hard
428

A network administrator is troubleshooting BGP path selection for a route received from two different ISPs. The routes have the same local preference and AS-path length, but one route has a shorter MED value. Which route will be preferred?

Hard
429

A company is designing a new branch network. They want to segment traffic into separate broadcast domains to improve security and reduce broadcast traffic. Which technology should be used to achieve this?

Easy
430

A team is using Git for version control. A developer accidentally committed a sensitive file. Which Git command should be used to remove the file from the repository history while keeping it locally?

Medium
431

Refer to the exhibit. An engineer applied this configuration to a Cisco switch port connected to an application server. The server runs a critical business application that should not be disrupted. However, after applying the configuration, the port goes into errdisable state. What is the most likely cause?

Easy
432

A developer is using Git for source control. They have made changes to a file and want to temporarily save the changes without committing, then work on a different branch. Which Git command should they use?

Medium
433

A company is implementing an API gateway for its microservices. Which TWO security features should be enabled at the gateway to protect backend services?

Medium
434

Which TWO of the following are characteristics of Model-Driven Programmability with YANG models?

Medium
435

An engineer is tasked with automating the backup of running configurations from 50 routers. Which approach is most scalable?

Medium
436

A developer is deploying a containerized application using Docker Compose. Which TWO statements about Docker Compose are correct?

Medium
437

A developer needs to enforce HTTPS for a web application. Which security measure should be implemented in the application or reverse proxy?

Easy
438

A network engineer is using the Cisco DNA Center API to get site health. The API endpoint returns a large dataset with pagination. The response includes the header 'X-Page-Total-Count'. To retrieve all pages efficiently, what should the engineer implement?

Hard
439

Which TWO of the following Python exception handling statements are valid? (Choose two.)

Medium
440

A CI/CD pipeline includes stages for security scanning. Which TWO tools or services are specifically designed for dependency vulnerability scanning?

Medium
441

A developer is creating a REST API client that needs to authenticate using credentials passed in the HTTP header. Which header should be used?

Medium
442

A developer wants to use Cisco NX-API on a Nexus switch to execute a CLI command via JSON. What must be enabled on the switch first?

Medium
443

A junior developer is writing a Python script to gather interface statistics from a Cisco IOS-XE device using NETCONF. They use the 'ncclient' library and successfully connect. They want to retrieve the operational status of all interfaces. Which YANG model and XPATH expression should they use to get the operational data?

Easy
444

A network administrator is deploying a wireless network that supports the latest security standards and high throughput. Which TWO of the following are true regarding Wi-Fi 6 (802.11ax) compared to Wi-Fi 5 (802.11ac)?

Medium
445

An application requires reliable, ordered delivery of data. Which transport protocol should be used?

Medium
446

In the OAuth 2.0 authorization code flow, what does the client receive after the user grants authorization?

Medium
447

Which THREE practices help ensure idempotent network automation? (Select three)

Hard
448

An application requires reliable, ordered delivery of data with flow control and retransmission of lost segments. Which transport layer protocol should the developer choose and what is a key characteristic of this protocol?

Medium
449

A network engineer wants to use NETCONF to change the hostname of a Cisco device. Which operation should be used?

Medium
450

Refer to the exhibit. An engineer uses NETCONF to configure an interface. After applying this configuration, the interface is administratively up. However, the interface does not pass traffic. What is the most likely cause?

Easy
451

Which TWO are components of a REST API request? (Choose two.)

Hard
452

A company uses Cisco Meraki APs and an internal web application hosted on AWS. The application store customer payment data. The security team discovers that sensitive application logs are being transmitted in plaintext over the network to the SIEM. The DevOps team wants to improve security without changing the application code because it is proprietary and cannot be modified. Which solution should be recommended?

Easy
453

An administrator is using the Cisco Intersight API to manage server profiles. The API returns the following error: '{"error": "Forbidden", "message": "Insufficient privileges"}'. What is the most likely cause?

Easy
454

An automation engineer is using the Cisco DNA Center REST API to retrieve a list of network devices. The API call returns HTTP status code 200. What does this indicate?

Easy
455

A developer needs to retrieve the list of devices from a Meraki network using the Meraki Dashboard API. Which HTTP method and endpoint should be used?

Easy
456

A developer is designing a REST API that will be used by multiple client applications. The API must support versioning to ensure backward compatibility. Which approach should the developer use to implement API versioning?

Easy
457

You are a network automation engineer using the Cisco DNA Center REST API to retrieve health scores for all sites in your network. You call the 'GET /dna/intent/api/v1/site-health' endpoint with parameters to filter by time range. The response returns only the first 20 sites out of a total of 150 sites. You notice that the response includes a 'totalRecords' field showing 150, but only 20 objects are in the 'response' array. You recall that the API documentation mentions pagination support. To avoid manually looping through all pages, you want to implement a robust solution that efficiently retrieves all site health data. Which approach should you take?

Medium
458

A developer is using the ncclient library in Python to connect to a network device via NETCONF. Which operation should be used to modify the running configuration and commit the changes?

Hard
459

A network automation engineer is writing a Python script to configure multiple devices. Which library is most appropriate for SSH-based interactions?

Medium
460

An Ansible playbook fails with the error: "mapping values are not allowed here". The relevant YAML snippet is: --- - name: Configure interface ios_config: lines: - ip address 10.0.0.1 255.255.255.0 parents: interface GigabitEthernet0/1 What is the most likely cause of this error?

Medium
461

A system administrator wants to use the Cisco Intersight API to collect hardware inventory from a set of UCS servers managed by Intersight. The administrator needs to retrieve the serial numbers, memory, and CPU information. The administrator has an API key with the appropriate permissions. The administrator uses a Python script with the requests library to send a GET request to https://intersight.com/api/v1/compute/PhysicalSummaries. The request returns HTTP 200 with a list of objects. However, each object only contains the 'Moid' and 'Name' fields; the serial number and hardware details are missing. What should the administrator do to get the full inventory details?

Easy
462

Based on the exhibit, which interface is in a state that prevents it from sending or receiving IP traffic?

Medium
463

Which TWO of the following are characteristics of a declarative automation model? (Select exactly 2.)

Medium
464

Which TWO of the following are benefits of using NETCONF over SNMP for network automation? (Select exactly 2.)

Medium
465

An engineer needs to transfer a router configuration file to a server in the same network using a simple protocol that does not require authentication. Which protocol is best?

Medium
466

A Kubernetes environment has multiple teams sharing the same cluster. One team wants to deploy applications without interfering with other teams' resources. Which Kubernetes resource should be used to isolate the team's resources?

Medium
467

When using NETCONF to edit the configuration of a Cisco IOS XE device, an engineer receives an <rpc-error> with error-tag 'in-use' and error-app-tag 'data-exists'. What does this error indicate?

Hard
468

In a Docker Compose file with multiple services, one service depends on another to be healthy before starting. Which key should be used to express this dependency and ensure the dependent service is started first?

Hard
469

In software architecture, which pattern separates an application into three interconnected components: Model (data), View (UI), and Controller (input logic)?

Medium
470

A developer uses the requests library to call an API. The API returns 429 Too Many Requests. What is the best practice to handle this?

Hard
471

A developer is building a chat application that requires low-latency communication, and occasional packet loss is acceptable. Which transport protocol should the developer choose?

Hard
472

A team is deploying a new microservice on Cisco Container Platform. The microservice needs to access a database hosted on a separate VM. The security policy requires that only the microservice can communicate with the database, and all traffic must be encrypted. The team is using Kubernetes network policies and mutual TLS. During testing, the microservice cannot reach the database. The database team reports that the database is reachable from other services. What is the most likely cause?

Easy
473

A Python script uses the `requests` library to fetch device details from Cisco DNA Center. The API returns a JSON response with nested objects. To extract the management IP address from the response stored in variable `data`, which code snippet is correct? The JSON structure is: { "response": [ { "managementIpAddress": "192.168.1.1", "hostname": "router1" } ] }

Medium
474

Which HTTP method should be used to partially update an existing resource in a REST API?

Easy
475

A developer is using the Meraki Dashboard API and notices that some requests return a 429 status code. What is the most likely cause?

Medium
476

A university IT department manages a Cisco Meraki network with 200 MR access points and 50 MS switches. They use the Meraki dashboard API to automate network provisioning. A new student dormitory was added, and the team needs to create a new network and claim devices. They have a Python script that uses the Meraki API to create the network and then claim devices by serial numbers. The script successfully creates the network but fails when claiming devices with a 400 error: 'Device serial number is not valid or already claimed'. The serial numbers are correct and unused. The API key has full organization access. The script uses the endpoint 'POST /networks/{networkId}/devices/claim' with the correct body. What is the most likely cause of the failure?

Medium
477

A network automation team uses Ansible to manage Cisco ACI fabrics. They have a playbook that creates application profiles using the 'aci_ap' module. Recently, they started using a new Python script that directly uses the Cisco ACI REST API to perform the same tasks. The script often fails with a 403 Forbidden error, although the Ansible playbook works fine. The authentication method is the same: basic authentication over HTTPS. The API user has the same privileges. Which of the following is the most likely cause?

Hard
478

Which TWO of the following are valid private IPv4 address ranges? (Select two.)

Medium
479

When using the Cisco Meraki Dashboard API to create an HTTP webhook for network alerts, which authentication method is required in the request header?

Easy
480

Which design principle suggests that a module should be responsible for a single part of the functionality?

Easy
481

A DNS AAAA record is used to resolve a hostname to what type of address?

Medium
482

Refer to the exhibit. A switch has the VLAN configuration shown. If a device is connected to interface Gi0/3 and another to Gi0/5, can they communicate if the switch is not configured with any inter-VLAN routing?

Medium
483

A network engineer needs to create a new subnet that can support at least 50 usable host addresses for a development environment. Which TWO subnet masks would meet this requirement? (Choose two.)

Medium
484

Using the Cisco DNA Center API, which endpoint should be queried to retrieve the Layer 2 topology for a specific VLAN?

Easy
485

A developer is using a Dockerfile to build an image. The image must be based on a minimal Linux distribution to reduce attack surface. Which base image should be used?

Hard
486

A developer needs to update an existing resource via a REST API. The update should be partial, meaning only the fields provided in the request body should be changed. Which HTTP method should be used?

Medium
487

You manage a network that uses a mix of Cisco IOS and IOS-XE devices. The company wants to implement network automation using RESTCONF and YANG. You have configured RESTCONF on a branch router running IOS-XE 16.12. You can successfully retrieve the interface configuration using a GET request from a Python script. However, when you try to modify the description of an interface using a PATCH request, you receive a 405 Method Not Allowed error. The script uses basic authentication over HTTPS. The URL is correct, and the YANG data payload is valid. What is the most likely reason for the failure?

Medium
488

A developer wants to retrieve the current user's Webex profile information. Which API endpoint should be called?

Medium
489

Which THREE of the following are key principles of Infrastructure as Code (IaC) as applied to network automation?

Medium
490

A network engineer is troubleshooting an issue where hosts in VLAN 100 cannot reach a server at 10.1.1.100. The switch interfaces are configured as access ports in VLAN 100, and the default gateway is 10.1.1.1. The engineer checks the switch and finds that the ARP table does not contain the server's MAC address. Which two actions should the engineer take to resolve the issue? (Choose two.)

Medium
491

Which THREE of the following are benefits of using an SDN (Software-Defined Networking) architecture compared to traditional networking? (Choose three.)

Hard
492

Refer to the exhibit. An automation script expects the interface IP address to be configured via DHCP. Based on the output, what is the current configuration source for the IP address?

Medium
493

In a Python application that uses the ncclient library to manage Cisco devices via NETCONF, the developer encounters an error: 'ncclient.transport.errors.SessionCloseError: session closed on error'. Which of the following is the most likely cause?

Hard
494

Which HTTP method is idempotent and safe?

Easy
495

What HTTP method should be used to update only the description field of a network device resource via a REST API?

Easy
496

A company is implementing a secure CI/CD pipeline. Which THREE practices are essential for securing the pipeline?

Hard
497

During a network outage, a technician notices that hosts in VLAN 10 cannot reach the default gateway at 192.168.10.1, but hosts in VLAN 20 can. The switch interfaces are up, and the router is configured with subinterfaces. What is the most likely cause?

Medium
498

A developer is using the Meraki Dashboard API to list all networks in an organization. Which TWO of the following are valid methods for pagination?

Medium
499

Refer to the exhibit. A service engineer runs a 'check-sync' action on the NSO service 'vpn1'. The result shows 'out-of-sync' for device 'pe1'. What does this indicate?

Hard
500

A network engineer is designing a REST API using Python Flask to allow provisioning of VPN tunnels. The API must support multiple clients and must be secure. Which approach is most appropriate for authenticating and authorizing API requests?

Hard
501

A developer is using Cisco NSO to create a service. They are evaluating whether to use Python or Java for plan callbacks. Which consideration is most important?

Hard
502

A developer receives HTTP 409 Conflict when updating a network configuration via Cisco NX-OS API. Which two scenarios could cause this error?

Medium
503

A developer uses Kubernetes and wants to expose a deployment named 'web-app' externally via a cloud load balancer. Which Service type should be used?

Hard
504

In a Kubernetes cluster, a developer needs to ensure that a set of pods can be accessed by other pods using a stable IP address and DNS name, even if pods are recreated. Which resource should be created?

Medium
505

Based on the exhibit, which interface is in a down/down state (both Status and Protocol are down)?

Easy
506

A network automation script using NX-API on a Nexus switch fails intermittently with HTTP 500 errors. Which two troubleshooting steps are most effective in diagnosing the issue? (Choose two.)

Hard
507

Which TWO of the following are valid Python data types?

Easy
508

What is the correct Content-Type header value for a RESTCONF request using JSON encoding?

Medium
509

Which TWO of the following are recommended practices for securing a CI/CD pipeline in a DevOps environment? (Choose two.)

Medium
510

A developer is troubleshooting an HTTP API call that returns a 404 status code. Which of the following is the most likely cause?

Medium
511

A developer wants to run a container in the background with port mapping and a named volume. Which command accomplishes this?

Easy
512

A developer is implementing OAuth 2.0 for a Cisco Webex integration that needs to send messages on behalf of a user. The integration runs on a server with no user interface. Which OAuth 2.0 flow should be used?

Hard
513

Which Git branching strategy typically involves a long-lived 'develop' branch where feature branches are merged, and releases are created from a 'release' branch?

Medium
514

A network engineer is configuring a wireless network for a hospital that requires high throughput and minimal interference from neighboring networks. Which set of 2.4 GHz channels should be used for non-overlapping coverage?

Hard
515

A developer needs to use Postman to test an API that uses Basic authentication. How should the credentials be configured in Postman?

Hard
516

A developer is deploying a containerized application to a Kubernetes cluster. To ensure that the application can securely access a third-party API, what is the best practice for storing the API key?

Easy
517

A Kubernetes pod needs to run a database that requires persistent storage. Which volume type should be used to store data that persists beyond the pod lifecycle?

Hard
518

A developer is using the Cisco Webex API to send a message to a specific room. They have the room ID. Which endpoint and method should they use?

Medium
519

A developer is writing an application that needs to send a large amount of data reliably over a network. Which transport layer protocol should the developer use?

Medium
520

A developer is using Python requests library to interact with a Cisco IOS XE device's REST API. The call returns a 400 Bad Request status. The payload is correctly formatted JSON. What is the most likely cause?

Medium
521

A developer wants to automate the provisioning of a UCS server using Cisco Intersight. Which authentication method is recommended for programmatic access?

Hard
522

A network team uses an Ansible playbook to automate the configuration of multiple Cisco IOS XE devices. The playbook includes the 'ios_config' module. Which of the following best describes the purpose of the 'provider' parameter in the ios_config module?

Medium
523

An engineer needs to automate the deployment of a new VLAN across multiple switches. Which tool is best suited for this task?

Easy
524

A Kubernetes cluster is configured with a NetworkPolicy that allows ingress traffic only from pods with label 'app: frontend'. A new backend service needs to communicate with the database pod. What must be done to allow this?

Hard
525

Which tool is specifically designed for model-driven programmability using YANG data models?

Easy
526

A network engineer is troubleshooting a Kubernetes deployment where pods are failing to start with the error 'CrashLoopBackOff'. The pod log shows 'bind: address already in use'. The deployment runs multiple replicas of a container that listens on port 8080. What is the most likely cause?

Hard
527

A Python script reads a JSON configuration file named 'config.json' and needs to extract the value of a nested key 'api_key' under 'authentication'. The file structure is: {"authentication": {"api_key": "abc123", "method": "token"}, "timeout": 30}. Which code snippet correctly opens the file and retrieves the api_key value?

Medium
528

A developer needs to retrieve the current user's details from Webex API. Which endpoint should they call?

Medium
529

Which TWO of the following are valid methods for authenticating to a Cisco REST API? (Select two.)

Medium
530

A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?

Easy
531

Match each JSON data type to its example.

Medium
532

Which Meraki API response header provides information for paginating through a large result set?

Easy
533

A company has multiple subnets. A device in subnet 192.168.1.0/24 needs to communicate with a device in subnet 192.168.2.0/24. What is required for this communication?

Medium
534

An engineer is using EEM on an IOS XE device. They want to trigger an applet when a specific syslog message appears. Which event trigger type should they use?

Hard
535

A network automation engineer is developing a Python script that uses the NETCONF protocol to retrieve the running configuration from a Cisco IOS XE device. They use the ncclient library. The script works on the test device but fails on a production device with an error: "ncclient.transport.errors.AuthenticationError: Authentication exception". The engineer verifies that the SSH credentials (username and password) are correct and that the production device is reachable via SSH on port 830. What is the most likely issue?

Hard
536

A developer is designing a Python script to parse the output of 'show ip interface brief' from a Cisco IOS device. The output is stored in a string variable. The developer wants to extract only the interfaces that are up/up. The current code uses regular expressions but often fails because the interface names contain special characters (e.g., GigabitEthernet1/0/1). Which approach should the developer use to reliably parse the output?

Medium
537

When using RESTCONF to configure a network device, what Content-Type header should be set in the HTTP request to indicate YANG data in JSON format?

Medium
538

A developer is writing a Dockerfile for a Node.js application. The application uses environment variables for configuration. Which Dockerfile instruction should be used to set a default value for the NODE_ENV variable?

Medium
539

When using the Cisco DNA Center intent API to retrieve issues, the response includes a Link header with rel="next" and a URL. What type of pagination is this?

Medium
540

A developer writes a Python script using ncclient to retrieve the running configuration from a Cisco IOS XE device. The script fails with an XML parsing error. What is the most likely cause?

Medium
541

Which THREE of the following are valid methods to handle API rate limiting in a Python automation script? (Select exactly 3.)

Hard
542

Which THREE are best practices for securing a CI/CD pipeline?

Hard
543

A developer needs to store a database password securely in a Kubernetes cluster. Which resource should be used?

Medium
544

A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?

Hard
545

A team uses Chef to manage network device configurations. Which component of Chef is responsible for storing configuration policy and distributing it to nodes?

Medium
546

A network automation script uses Git for version control. The developer wants to revert the last two commits on the current branch but keep the changes in the working directory for further modification. Which TWO Git commands can achieve this? (Choose two.)

Hard
547

Refer to the exhibit. Which statement correctly describes this subscription configuration?

Medium
548

A Kubernetes pod contains two containers that need to share a local filesystem. Which volume type should be used to enable this?

Medium
549

Refer to the exhibit. A network engineer applies this JSON-based QoS policy to a Cisco device using NETCONF/YANG. Which statement best describes the expected behavior for traffic from 10.0.0.0/24 with DSCP EF?

Hard
550

At which layer of the OSI model do MAC addresses operate?

Easy
551

You are a DevNet engineer responsible for automating configuration management across a Cisco SD-WAN fabric. You have been using the vManage REST API to retrieve device inventory and template lists. You generate an API token with read/write scope and successfully execute GET requests to /dataservice/device and /dataservice/template/device to list devices and templates. Now you want to attach a specific template to a device using POST /dataservice/template/device/config/attach. Your Python script uses the correct URL and includes the token in the Authorization header. The request body contains the device UUID and template UUID retrieved earlier. However, the API returns an HTTP 403 Forbidden error. You have verified that the device UUID and template UUID are correct and that the template exists. The vManage server logs indicate no high resource usage. What is the most likely cause of the 403 error?

Hard
552

An application uses the Meraki Dashboard API to fetch the list of networks for an organization. The API response includes a Link header with rel='next' pointing to the next page. Which pagination method is the API using?

Medium
553

A CI/CD pipeline uses GitLab CI. The pipeline must build a Docker image and then run security scans on the image before pushing. Which GitLab CI keyword allows defining a sequence of jobs that must run in order?

Medium
554

A developer creates a Dockerfile for a Python web application. Which instruction should be used to copy the application source code into the container image?

Easy
555

Refer to the exhibit. A switch is configured with the shown trunk port. After connecting the uplink, the switch logs show repeated 'errdisable' state transitions on this port. The core switch is configured with the same allowed VLAN list. Which configuration change is most likely to resolve the issue?

Hard
556

What does the Git command 'git log --oneline' display?

Easy
557

A Kubernetes cluster has a deployment named 'frontend' that needs to be updated to a new image version. The update should be performed with zero downtime. Which three kubectl commands or approaches can achieve this? (Choose three.)

Medium
558

A network administrator is configuring a wireless network and wants to minimize interference. In the 2.4 GHz band, which set of channels are non-overlapping?

Hard
559

Which data format is most commonly used in REST API requests and responses in modern network automation?

Easy
560

In a Docker Compose file, a service 'web' depends on 'db'. The 'db' service uses a volume to persist data. Which compose key ensures that the database starts before the web service?

Medium
561

An engineer is configuring a new IPv4 subnet with the address 172.16.5.0/25. Which three statements are true about this subnet? (Choose three.)

Hard
562

An engineer is troubleshooting a network issue where a client cannot reach a server. The client uses HTTPS. Which TWO factors are essential for a successful TLS handshake?

Hard
563

A network automation engineer is using Ansible to manage Cisco IOS devices. The playbook includes a task that executes a 'show version' command and registers the output. The engineer then wants to parse the output to extract the IOS version. Which approach should be used?

Medium
564

Drag and drop the steps to set up a Python virtual environment for a DevNet project into the correct order.

Medium
565

Which TWO of the following are benefits of using UDP over TCP for real-time applications?

Medium
566

An automation engineer wants to programmatically retrieve the interface configuration of a Cisco Nexus switch using NX-API. Which API call method is most appropriate?

Easy
567

A developer needs to view the logs of a running Docker container with ID 'abc123'. Which command should be used?

Medium
568

A developer needs to register a Webex webhook that triggers when a new message is posted in any room the bot is a member of. Which resource and event should be specified?

Hard
569

A network engineer is tasked with segmenting a large broadcast domain into smaller ones using VLANs. In the OSI model, at which layer does a VLAN operate?

Hard
570

An application uses UDP. Which characteristic is true about this application's communication?

Medium
571

A developer is building a web application and wants to implement security best practices. Which TWO actions should be taken? (Choose two.)

Medium
572

A developer is creating an application that uses the Cisco Webex Teams API to send messages. What authentication method is typically used?

Easy
573

When using OAuth 2.0 client credentials flow with a Cisco API, what is the typical purpose of the access token?

Hard
574

A network engineer is configuring a wireless network for a new office. To maximize performance and minimize interference, the engineer decides to use the 5 GHz band. Which of the following is a key advantage of 5 GHz over 2.4 GHz?

Medium
575

Which IPv6 address type is equivalent to a private IPv4 address?

Easy
576

An automation tool uses RESTCONF to configure a Cisco device. The device returns a 404 error for a PUT request. What does this indicate?

Medium
577

A developer is designing a REST API that requires pagination. Which two pagination methods are commonly used? (Choose two.)

Medium
578

A developer is designing a system that requires high reliability and ordered data delivery. The developer chooses TCP. Which THREE features are provided by TCP?

Medium
579

In a Jenkins declarative pipeline, a stage named 'Deploy to Production' should only run after manual approval. Which directive should be used to achieve this?

Hard
580

Which THREE of the following are valid event triggers for an EEM applet on Cisco IOS XE? (Choose THREE.)

Medium
581

A network administrator needs to assign IP addresses to 50 hosts in a subnet. Which subnet mask provides the minimum required number of usable addresses while minimizing waste?

Easy
582

Which three components are required to set up a Webex webhook for message creation events? (Choose three.)

Hard
583

A network developer wants to quickly prototype an application that interacts with a Cisco Catalyst 9000 switch using REST APIs. What is the most appropriate resource to use?

Easy
584

Which THREE statements about NETCONF are correct?

Hard
585

A DevOps team wants to version control their network configurations. Which tool should they use?

Easy
586

Refer to the exhibit. What will be the result of running this Ansible playbook against the 'switches' group?

Medium
587

A developer needs to retrieve a list of network devices from Cisco DNA Center with pagination. Which TWO URL components are typically used for offset/limit pagination?

Medium
588

A network engineer wants to stream telemetry data from a Cisco router using gRPC. Which gRPC service model is typically used for the router to push data to a collector?

Hard
589

An engineer is troubleshooting a VoIP call quality issue. The call uses UDP and experiences packet loss. Which characteristic of UDP most likely contributes to the problem?

Medium
590

Which TWO of the following HTTP methods are considered safe (idempotent and not modifying server state)? (Select two.)

Easy
591

A Python script using the requests library to query the Cisco Meraki API returns a 403 Forbidden error. The API key is correctly set in the header. What is the most likely cause?

Medium
592

A network automation engineer is writing an Ansible playbook to configure interface descriptions on Cisco IOS-XE devices. The playbook uses the ios_config module. Which attribute should be used to ensure idempotency and only apply changes when the interface does not already have the desired description?

Medium
593

A developer is working with Meraki API to list all clients on a network. The response is paginated. Which parameter allows the developer to specify the starting point for the next page?

Hard
594

An engineer is troubleshooting a NETCONF session that fails to establish with a Cisco IOS XE device. The SSH connection succeeds, but NETCONF capabilities are not exchanged. What is the most likely cause?

Hard
595

Drag and drop the steps to use Git to commit and push code changes to a remote repository into the correct order.

Medium
596

An engineer is writing a Python script using the Cisco DevNet sandbox to configure OSPF on a CSR1000v via RESTCONF. What authentication method is typically used for RESTCONF requests?

Medium
597

What is the default rate limit for the Meraki Dashboard API?

Easy
598

A developer needs to retrieve interface configuration from a Cisco IOS XE device using NETCONF. Which operation should be used?

Medium
599

A network automation script uses the Cisco DNAC Python SDK (dnacentersdk) to retrieve devices. Which method correctly lists all devices?

Medium
600

A network administrator is managing a small office with 10 Cisco 9200 switches. They want to automate the deployment of a standard base configuration (VLANs, STP, management access) to all switches. They have a Linux server with Ansible installed. The administrator writes a playbook that uses the 'ios_config' module to apply configuration blocks. However, when they run the playbook against the first switch, it fails with an authentication error. The administrator can SSH to the switch manually using the same credentials. What is the most likely cause of the failure?

Easy
601

Refer to the exhibit. A developer builds this Docker image and runs it. The container starts but cannot be accessed on port 5000 from the host. What is the most likely cause?

Easy
602

A developer needs to ensure that environment variables containing database credentials are not hardcoded in the application code. Which approach is most secure for managing secrets in a CI/CD pipeline?

Medium
603

Which TWO of the following are valid query parameter-based pagination methods used in REST APIs? (Select two.)

Medium
604

A developer is using the Meraki Dashboard API and needs to handle paginated responses. Which TWO ways does Meraki indicate pagination? (Choose two.)

Medium
605

A developer is building a Webex Teams bot that monitors network alerts from Cisco DNA Assurance. The bot must authenticate to the Webex API. Which authentication method should be used?

Hard
606

A DevOps team uses Ansible to configure Cisco Nexus switches for a new data center. They have a playbook that uses the nxos_vlan module to create VLANs and nxos_interface module to assign access VLANs. The playbook runs successfully on the first Nexus switch but fails on the second with error: 'module_stderr: ntclib: error: unable to connect to switch'. Both switches are reachable via ping and SSH from the Ansible control node. The inventory file has the same SSH credentials for both switches. What is the most likely cause of the connection failure on the second switch?

Medium
607

When using RESTCONF on Cisco IOS XE, which URL retrieves the hostname configuration?

Medium
608

An engineer is using the Cisco Intersight API to manage UCS servers. The API response returns a paginated list. What is the proper way to retrieve all items?

Hard
609

An automation script needs to update the hostname of a Cisco IOS-XE device via RESTCONF. Which HTTP method is appropriate?

Easy
610

A Cisco DevNet engineer is configuring model-driven telemetry on a Cisco IOS-XE device. The telemetry subscription includes the following path: 'Cisco-IOS-XE-native:native/interface/GigabitEthernet[Name='1/0/1']/ip/address'. Which part of this path identifies a specific list instance?

Hard
611

A DevOps team is implementing a CI/CD pipeline for network services using Cisco NSO (Network Services Orchestrator). They have a Python script that uses the NSO RESTCONF API to create a new VPN service instance. The script passes all integration tests in the staging environment, but when deployed to production, the 'POST' request to /api/run/vpn-service returns a 500 Internal Server Error. The team checks the NSO logs and finds the error 'Error: No such device: device-xr-1'. The production NSO instance manages multiple devices, and device-xr-1 is one of them. The team confirms device-xr-1 is reachable and managed by NSO in the production environment. What is the most likely cause of this error?

Hard
612

Drag and drop the steps to deploy a Python script to a Cisco device via RESTCONF into the correct order.

Medium
613

Which THREE are common best practices for implementing CI/CD in network automation?

Medium
614

Which API is used to execute CLI commands on Cisco IOS XE devices using on-device programmability?

Easy
615

A network engineer needs to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint should they use?

Easy
616

A Meraki API request is receiving HTTP 429 responses. According to the Meraki rate limit, what should the developer do?

Medium
617

A network automation script using Ansible with the cisco.ios.ios_config module fails with "Unsupported parameters for (cisco.ios.ios_config) module: src." What is the most likely issue?

Hard
618

Refer to the exhibit. A developer executes this Python script against a Cisco device. Assuming valid credentials and network connectivity, what is printed to the console?

Hard
619

A developer is creating a Helm chart for a stateless web application. Where should the application's configuration settings (like log level and feature flags) be stored?

Easy
620

A network engineer runs the Ansible playbook shown in the exhibit, but it fails. The error indicates the module 'cisco.ios.ios_vlan' does not exist. What is the most likely cause?

Medium
621

A developer wants to send a message to a Webex room using the API. Which HTTP method and endpoint should they use?

Easy
622

A developer is implementing a Python function that makes an HTTP GET request to an API and returns the response time. Which code snippet correctly measures the elapsed time?

Medium
623

What does a TTL of 128 indicate about the destination host?

Easy
624

A developer writes a Python script to read a configuration file. Which code snippet correctly opens the file 'config.json' for reading and ensures the file is closed after use?

Easy
625

A CI/CD pipeline using GitHub Actions needs to build a Docker image and push it to Docker Hub. Which event trigger should be used to run the workflow only when code is pushed to the main branch?

Hard
626

Which TWO of the following are best practices when using REST APIs in Cisco networking environments?

Medium
627

Drag and drop the steps to troubleshoot a network connectivity issue using the OSI model from bottom to top.

Medium
628

Which Python list comprehension correctly creates a list of squares for even numbers from 0 to 10?

Medium
629

A developer is building a REST API for a Cisco DNA Center application. The API must allow external partners to retrieve network device inventory. Which security mechanism should be implemented to ensure that only authorized partners can access the API while maintaining the ability to revoke access for a specific partner without affecting others?

Medium
630

A developer needs to share a Docker image built from a Dockerfile with team members. Which command correctly builds the image and tags it as 'myapp:v1'?

Medium
631

A developer wants to send a message to a Webex room using the API. The message should contain a simple text body. Which endpoint and parameter are required?

Medium
632

A developer needs to authenticate to the Cisco SD-WAN vManage API. Which two steps are required to obtain a session token?

Hard
633

A developer wants to ensure that a containerized application restarts automatically if it exits with a non-zero code. The application is run using Docker. Which flag should be used?

Hard
634

A developer needs to retrieve a list of Webex teams that the authenticated user belongs to. Which HTTP request is correct?

Hard
635

A Cisco SD-WAN vManage API call to retrieve device inventory returns a 401 error. Which step is most likely missing?

Medium
636

A developer uses the Cisco DNA Center API to retrieve device inventory. The JSON response is shown. Which Python code snippet correctly extracts the serial number?

Easy
637

A developer is building a REST API client in Python using the requests library. They need to send a JSON payload with authentication. Which code snippet correctly sends a POST request with a JSON body and a Bearer token?

Medium
638

A Kubernetes Deployment is configured with rolling update strategy. A new version of the image is pushed, and the deployment is updated. During the rollout, the new pods are failing health checks. Which command can be used to pause the rollout and prevent further updates?

Hard
639

A developer wants to send a message to a specific room in Webex using the API. The developer already has the room ID. Which API call is correct?

Medium
640

Which wireless standard operates in both 2.4 GHz and 5 GHz bands and is commonly known as Wi-Fi 6?

Medium
641

In an SDN architecture, which layer is responsible for making decisions about where traffic should be forwarded?

Medium
642

A developer wants to use Cisco DNA Center to change the network configuration. Which TWO API categories provide capabilities to modify the network? (Choose two.)

Medium
643

Refer to the exhibit. A DevOps engineer is using NETCONF to retrieve the OSPF configuration. The <get> response is missing the network statements. What is the most likely cause?

Hard
644

An engineer retrieves the list of devices in a Meraki network via the Dashboard API. The API returns HTTP 200 OK with an empty array. What is the most likely reason?

Medium
645

A Kubernetes Deployment is updated with a new image tag, but the rollout fails. Which kubectl command should be used to view the rollout status and troubleshoot?

Medium
646

A developer wants to process a list of server hostnames and create a new list containing only hostnames that start with 'web'. Which Python list comprehension correctly accomplishes this?

Easy
647

An automation engineer is writing a Python script to interact with a REST API that requires authentication. The API returns a 403 Forbidden status. Which scenario best explains this response?

Hard
648

Which THREE of the following are common stages in a continuous integration pipeline? (Select THREE)

Easy
649

A DevOps team uses GitLab CI to deploy a containerized application to a Kubernetes cluster. The deployment pipeline fails at the 'deploy' stage with an error: 'unable to connect to server'. What is the most likely cause?

Medium
650

A developer is building a chatbot that needs to send a direct message to a user on Webex. Which TWO fields are required in the POST /v1/messages request? (Choose TWO.)

Hard
651

An engineer is troubleshooting a connectivity issue between two devices on different VLANs. The switch connecting the devices is configured with 802.1Q trunking. At which OSI layer do VLANs operate?

Medium
652

A developer wants to create a new room in Cisco Webex using the API. Which HTTP request is appropriate?

Medium
653

A large enterprise uses Cisco DNA Center to manage their campus network. They have deployed fabric technology for SD-Access. The network team wants to use the DNA Center REST API to automate the addition of new wireless users to a specific virtual network (VN) based on their location (building). They have identified the API endpoint for creating a user device in the fabric. However, when they send a POST request with the appropriate JSON body, they receive a 400 Bad Request error. The JSON payload includes the mandatory fields for hostname, MAC address, and VN name. What is the most likely cause of the error?

Medium
654

Which Cisco platform provides a cloud-managed networking solution with a RESTful API that uses an API key in the X-Cisco-Meraki-API-Key header?

Easy
655

A network automation engineer is using the Cisco DNA Center intent API to retrieve a list of network devices. Which API endpoint should be used?

Medium
656

A developer is designing a Cisco Catalyst Center integration that uses the intent API. Which THREE of the following are available via the intent API? (Select three.)

Hard
657

Based on the routing table, what is the administrative distance of the route to 192.168.1.0/24?

Medium
658

A developer is working with the Webex API to receive real-time notifications when a message is posted. Which resource should they create?

Hard
659

Drag and drop the steps to configure a new VLAN on a Cisco switch into the correct order.

Medium
660

Which THREE of the following are valid methods to automatically assign IP addresses to network hosts?

Hard
661

An administrator wants to receive real-time notifications when a new message is posted to a Webex room. Which Webex API resource should be used to configure this?

Medium
662

Which of the following is a private IPv4 address range as defined by RFC 1918?

Medium
663

A network administrator wants to use Ansible to automate the configuration of a Cisco IOS-XE device. Which module is designed for this purpose?

Medium
664

In DNA Center, which API category is used to deploy templates to devices?

Easy
665

An automation engineer runs a Python script using the Cisco NXOS NX-API to retrieve the interface configuration. The JSON response shows the 'switchport access vlan' as '10'. However, VLAN 10 does not exist in the VLAN database. What is the expected behavior of the switch regarding this interface?

Medium
666

Which TWO of the following are common causes of VLAN connectivity issues?

Medium
667

A developer is writing a Dockerfile for a Node.js application. They want to set a build-time variable for the application version that can be changed without modifying the Dockerfile. Which instruction should be used?

Medium
668

Which TWO of the following are valid branching strategies in Git? (Choose two.)

Medium
669

An engineer uses Ansible to push a configuration change to 100 switches. The playbook fails on 5 switches. What is the most efficient way to apply the change only to those 5?

Hard
670

Which three HTTP methods are used for CRUD operations in REST APIs? (Choose three.)

Medium
671

An engineer is developing an EEM applet on a Cisco IOS XE device to run a CLI command when a specific syslog message appears. Which event trigger should be used?

Hard
672

A developer notices that after a new deployment, the application is not receiving traffic. The Service selector does not match the pod labels. Which kubectl command can be used to inspect the Service's selector?

Hard
673

A financial services company deploys a multi-tier application on Cisco UCS with separate VMs for web, app, and database tiers. The security team runs a vulnerability scan and finds that the web server is vulnerable to SQL injection. The development team cannot fix the code immediately because of a pending third-party library update. The company needs to deploy a security control to mitigate the vulnerability as soon as possible without changing the application. Which of the following is the best immediate mitigation?

Hard
674

In a RESTCONF API call to retrieve a specific interface configuration on a Cisco device, an engineer sends a GET request to /restconf/data/interfaces/interface=GigabitEthernet0/1. What Content-Type should be specified in the Accept header to receive YANG-defined JSON?

Hard
675

Which TWO HTTP methods are considered safe according to HTTP/1.1 specification?

Easy
676

Refer to the exhibit. A developer is writing an Ansible playbook to configure this interface on a Cisco IOS XE device. Which Ansible module should be used to set the IP address?

Medium
677

A network engineer is configuring a Cisco switch to support LLDP-MED for VoIP phones. Which command is required to enable LLDP globally on the switch?

Hard
678

A developer is designing a REST API for managing network devices. The API should support idempotent operations for updating device configuration. Which HTTP method should be used for the update operation?

Medium
679

When using the Meraki Dashboard API, how should the API key be included in a request?

Medium
680

An application uses NETCONF to configure a Cisco device. It sends an <edit-config> operation with the target 'running' and the operation 'merge'. Which statement about this operation is correct?

Hard
681

When using gRPC/gNMI for model-driven telemetry, which mode allows the network device to push telemetry data to a collector without the collector initiating the connection?

Hard
682

Which tool is designed for infrastructure as code, uses a declarative language, and can automate configuration management across multiple devices?

Easy
683

A network engineer is troubleshooting slow connectivity between two sites connected via a WAN link. The engineer suspects packet loss due to collisions. Which interface counter should be examined to confirm this?

Medium
684

A team uses a Jenkins declarative pipeline to deploy a microservice. The pipeline includes stages: Checkout, Build Docker Image, Run Unit Tests, Push to Registry, Deploy to Staging, and Deploy to Production. Which stage should run immediately after 'Build Docker Image' to ensure code quality before the image is pushed?

Medium
685

A developer is using the Cisco Webex Teams API to create a room and add members. The API returns a 400 error. What is the most likely cause?

Medium
686

An engineer needs to automate the deployment of VLAN configurations on a fleet of Cisco Catalyst 9000 switches running IOS-XE. The team uses Ansible Tower for automation. Which Ansible module should be used to push VLAN configuration idempotently?

Medium
687

Which DNS record type is used to verify domain ownership for email security (SPF)?

Medium
688

A developer is designing a microservices-based network management system. One requirement is that when a new device is discovered, multiple other services must be notified asynchronously to perform tasks like inventory update, monitoring setup, and log collection. Which architectural pattern best fits this requirement?

Hard
689

Which THREE of the following are characteristics of GraphQL compared to REST? (Choose three.)

Hard
690

In a wireless network using 802.11ac, which frequency band does the standard primarily operate in to achieve higher throughput?

Hard
691

Which transport layer protocol is used by HTTP and guarantees reliable delivery?

Easy
692

A network engineer is using Cisco IOS XE RESTCONF to retrieve the hostname of a device. The YANG module used is 'Cisco-IOS-XE-native'. Which URL path is correct?

Hard
693

A network engineer wants to use model-driven programmability on IOS XE devices. Which two YANG model types are commonly used? (Choose two.)

Hard
694

When using the Cisco DNA Center API, which three steps are typically involved in making a successful API call? (Choose three.)

Medium
695

A network developer is using Cisco NSO to manage multi-vendor devices. Which three are valid approaches to handle device-specific differences? (Choose three.)

Hard
696

A developer is using the Cisco DNA Center API and receives a token. How is this token typically used in subsequent API requests?

Medium
697

You are writing a Dockerfile. Which instruction should you use to set the working directory for subsequent RUN, CMD, ENTRYPOINT, COPY, and ADD instructions?

Easy
698

A developer wants to retrieve the list of network devices from Cisco DNA Center. Which API endpoint should be used?

Easy
699

A network engineer is automating the deployment of new branch offices using Cisco DNA Center REST API. The script creates a new site under a parent site using the POST /dna/intent/api/v1/site API endpoint. The script runs successfully but when checking the DNA Center UI, the new site appears under the incorrect parent site. The script uses the following JSON payload: { "parentId": "0a1b2c3d-4e5f-6789-0ab1-2c3d4e5f6789", "name": "Branch-Office-42", "type": "area", "latitude": 34.0522, "longitude": -118.2437 } The parentId is obtained from a GET request to /dna/intent/api/v1/site that returns a list of all sites. The engineer verified that the parentId matches the UUID of a site named 'HQ', which the engineer believes is an area. However, 'HQ' is actually a building site. The engineer is not aware that the site type is different because the GET response does not display the type field prominently. What is the most likely cause of the new site being placed under the wrong parent?

Hard
700

Which DNS record type is used to map a domain name to an IPv6 address?

Easy
701

When making API calls to Cisco DNA Center, a developer receives a 401 Unauthorized error. The token was obtained using the token API endpoint. What is the most likely reason?

Medium
702

Which TWO actions are best practices for managing secrets in a CI/CD pipeline?

Medium
703

A developer is implementing error handling in a script that makes multiple API calls to Cisco ACI. Which approach is best practice for handling transient network failures?

Medium
704

Which TWO are benefits of using model-driven programmability (e.g., NETCONF/RESTCONF) over traditional CLI scripting for network automation?

Medium
705

Which command enables the NX-API feature on a Cisco NX-OS device?

Medium
706

A team is implementing a CI/CD pipeline using Jenkins. The pipeline must build a Docker image and push it to a private registry. Which Jenkins plugin is specifically designed to handle Docker builds and pushes?

Easy
707

A DevOps team uses a CI/CD pipeline to deploy network configurations. They want to ensure that only authorized network engineers can trigger changes to production devices. Which integration is most appropriate?

Hard
708

An application authenticates to Cisco Webex API using OAuth2 client credentials grant. Which three pieces of information must the application include in the token request?

Medium
709

Which TWO of the following are functions of the transport layer in the OSI model? (Choose two.)

Easy
710

A Python script uses the Cisco Meraki API to fetch the list of organizations. The script fails with a 401 HTTP status. What is the most likely cause?

Easy
711

A developer is using Docker Compose to run a multi-service application. Which THREE keys are valid top-level keys in a docker-compose.yml file? (Choose three.)

Medium
712

A developer is writing a Python script to interact with a REST API. The API requires a JSON payload to create a new resource. Which HTTP method should be used?

Medium
713

A developer needs to read a JSON configuration file and parse it into a Python dictionary. The file contains nested objects. Which code snippet correctly accomplishes this?

Medium
714

A company uses a CI/CD pipeline to deploy network configurations. The pipeline includes a stage that runs automated tests against a simulated network environment. Which testing strategy does this represent?

Medium
715

An organization uses Ansible for configuration management and wants to secure the automation secrets (e.g., SSH keys, API tokens). The secrets are currently stored in plaintext in inventory files. The security team requires that secrets be encrypted at rest and decrypted only at runtime by authorized users. Which solution should be implemented?

Easy
716

A developer is designing a REST API for a network automation tool. Which HTTP method should be used to retrieve the current configuration of a network device?

Easy
717

A network automation engineer is using a Python script with the requests library to configure VLAN 100 on a Cisco Catalyst 9300 switch via the REST API. The script sends a PUT request to https://switch-ip/restconf/data/Cisco-IOS-XE-native:native/vlan. The response returns a 201 Created, but subsequent checks show VLAN 100 is not present in the running configuration. The switch's management interface is in VLAN 99 with IP 10.10.99.10/24, and the engineer's workstation is on a different subnet (10.10.88.0/24). The switch has the following relevant configuration: ip default-gateway 10.10.99.1, and a route for 10.10.88.0/24 via 10.10.99.1. The engineer also verified that the REST API credentials are correct and that the switch's HTTP server is enabled. Which action should the engineer take to resolve the issue?

Hard
718

You are a network automation engineer at a large enterprise. The network consists of 200 Cisco Catalyst switches distributed across five data centers. Each switch runs IOS-XE and supports NETCONF. Your team uses a centralized Ansible control node to manage configurations. Recently, the security team mandated that all management access must use SSH keys instead of passwords. You updated the Ansible inventory to use SSH keys and tested on a few switches successfully. However, when you run the playbook against all switches, about 30 switches fail with the error: 'Authentication failed.' You verify that the SSH public key is correctly deployed on those switches via the console. What is the most likely cause of the failure?

Hard
719

A developer is using the Meraki Dashboard API to list all networks in an organization. The response includes a Link header with rel="next". What does this indicate?

Medium
720

Which TWO of the following are true about NETCONF capabilities as defined in RFC 6241?

Hard
721

A developer needs to apply a Kubernetes deployment manifest from a file named 'deployment.yaml'. Which kubectl command should be used?

Medium
722

In Postman, what feature allows you to reuse a value like a base URL or token across multiple requests?

Easy
723

In Python, which keyword is used to define a function that does not return any value?

Easy
724

A junior network developer is tasked with writing a Python script that uses the Cisco NX-API to retrieve the current VLAN configuration from a Nexus switch. The script should output the VLAN IDs in a JSON format. The developer wrote the following code: import requests import json url = "https://192.168.1.1/api/aaaLogin.json" payload = {"aaaUser":{"attributes":{"name":"admin","pwd":"cisco123"}}} r = requests.post(url, json=payload, verify=False) token = r.json()["imdata"][0]["aaaLogin"]["attributes"]["token"] After authentication, the developer attempts to get VLANs using a GET request to "https://192.168.1.1/api/mo/sys/vlan.json" but receives a 401 error. Which of the following should the developer do to fix the issue?

Medium
725

An organization implements zero-touch provisioning (ZTP) for new Cisco routers using DHCP and TFTP. The provision script is not being executed even though the device obtains an IP address. The DHCP server logs show the option 67 (bootfile-name) and option 150 (tftp-server) are set. What is the most probable reason?

Hard
726

A developer commits code to a GitHub repository and wants automated tests to run, followed by building a Docker image and pushing it to Docker Hub only if tests pass. Which CI/CD tool can be configured using a YAML file placed in the .github/workflows directory?

Medium
727

Which TWO statements about Cisco Meraki API pagination are correct? (Choose two.)

Medium
728

An automation script using Ansible tries to configure IP address 192.168.1.2 on GigabitEthernet0/1. After running, the interface remains administratively down. What is the first thing to check?

Easy
729

A developer needs to run a temporary container that executes a command and then exits. Which Docker command should be used?

Medium
730

Refer to the exhibit. Which key-value pair indicates whether this Meraki MR is currently connected to the cloud?

Easy
731

A large enterprise uses Cisco DNA Center to manage over 500 network devices across multiple sites. The network operations team wants to automate the validation of device compliance with a baseline configuration. They have a Python script that uses the Cisco DNA Center REST API to retrieve the device configuration and compare it against a golden configuration stored in a local file. Recently, the script started failing with a 401 HTTP response code when trying to authenticate. The team confirmed the username and password are correct and that the DNA Center server is reachable. The script uses the /api/system/v1/auth/token endpoint to obtain a token. Which of the following is the most likely cause of the 401 error?

Hard
732

Drag and drop the steps to configure a Cisco IOS device for NETCONF access into the correct order.

Medium
733

A network administrator wants to use Cisco Webex APIs to automate sending messages to a specific room. Which THREE pieces of information are required to send a message using POST /v1/messages?

Easy
734

In Python, which data type is used to represent an unordered collection of unique elements?

Easy
735

In Python, which of the following is a valid way to define a function that accepts a variable number of positional arguments?

Easy
736

Which authentication method does Cisco DNA Center use to obtain an API token?

Easy
737

A developer is making requests to the Meraki Dashboard API and receives a 429 Too Many Requests response. What is the default rate limit for this API?

Medium
738

You are troubleshooting connectivity for a remote branch office. The branch router (BR) connects to the head office router (HQ) via a point-to-point T1 link. The HQ router is also connected to the internet via a separate interface. Users at the branch can access the internet but cannot reach servers at the head office (subnet 10.10.10.0/24). You run 'show ip route' on BR and see a default route pointing to HQ's IP address, but no specific route for 10.10.10.0/24. The HQ router has a connected route for that subnet. On HQ, you see that the interface towards BR is up/up, and you can ping the BR's interface IP. What is the most likely cause of the issue?

Easy
739

Match each Cisco DevNet Associate exam topic to its description.

Medium
740

In the Cisco DNA Center intent API, which HTTP method should be used to update a specific site's information?

Medium
741

Which TWO of the following are categories of Cisco DNA Center APIs? (Choose two.)

Medium
742

A developer needs to prevent SQL injection in a web application. Which coding practice should be used when constructing database queries?

Medium
743

Which TWO statements correctly describe differences between model-driven telemetry and traditional SNMP polling?

Hard
744

A CI/CD pipeline includes stages for code commit, build, unit test, integration test, staging deploy, and production deploy. Which change would best prevent a faulty build from reaching production?

Medium
745

When using the requests library in Python to send a POST request, which parameter should be used to send a JSON payload in the request body?

Easy
746

An application uses OAuth 2.0 for authorization. The developer receives an access token but needs to know the user's identity. Which OAuth flow should be used to also obtain an ID token that contains user claims?

Hard
747

A network engineer wants to retrieve a list of all network devices from Cisco DNA Center using the REST API. Which authentication method is required to obtain an access token?

Easy
748

Which HTTP status code indicates a successful POST request that created a resource?

Easy
749

An application developer is designing a microservice that communicates over HTTP. The service must guarantee that the request is processed exactly once. Which HTTP method should be used to ensure idempotency?

Medium
750

Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.

Medium
751

Which TWO are benefits of using VLANs in a network? (Choose two.)

Easy
752

A developer is writing a CI/CD pipeline using Jenkins Declarative Pipeline. They want to ensure that sensitive credentials (e.g., API keys) are never exposed in console logs. Which two security practices should be implemented? (Choose two.)

Hard
753

What is the purpose of the 'Authorization' header in a REST API request?

Easy
754

An engineer needs to authenticate to the Cisco DNA Center API to obtain a token. What is the correct authentication method and endpoint?

Medium
755

A developer is using a REST API and receives HTTP status codes. Which two codes indicate a client-side error that the developer should fix? (Choose two.)

Hard
756

A developer is deploying a Python web application on Cisco UCS servers using a CI/CD pipeline that runs on Jenkins. The application uses a PostgreSQL database. The security team mandates that all database credentials must be rotated every 30 days. Currently, credentials are stored as plaintext in a configuration file in the application repository. Which approach should the developer take to meet the rotation requirement without storing secrets in the repository?

Medium
757

A developer wants to perform a rolling update of a Kubernetes Deployment. Which command will update the image and initiate the rollout?

Medium
758

A developer uses RESTCONF to configure a network device. What is the correct content-type header to send in the request?

Medium
759

A network engineer configures an HTTP/2 server. Which feature of HTTP/2 reduces overhead by compressing headers using HPACK?

Hard
760

A developer is building a real-time video streaming application that must minimize delay, even if some packets are lost. Which transport protocol is most appropriate, and why?

Hard
761

An application uses OAuth 2.0 client credentials grant to authenticate with a Cisco API. Which of the following best describes this flow?

Medium
762

A developer is using the Meraki Dashboard API to retrieve a list of clients for a given network. The initial GET request returns a 429 HTTP status. What should the developer do to handle this response appropriately?

Medium
763

A team uses Ansible Tower for network automation. They need to restrict a user to only view job results without making any changes. Which Tower role should be assigned?

Medium
764

A DevOps engineer runs a container using 'docker run -d -p 8080:80 nginx'. The host firewall blocks incoming traffic on port 8080 from external networks but allows from the local host. Which command would allow the engineer to test the container's web server from the same machine?

Medium
765

In the context of SDN, which API is used between the SDN controller and the network devices to configure forwarding behavior?

Medium
766

Match each Cisco platform to its primary use case.

Medium
767

A developer is using the Meraki Dashboard API to retrieve a list of devices in an organization. The API response is paginated. Which HTTP header does Meraki use to indicate the next page of results?

Medium
768

A company has a DHCP server that assigns IP addresses from a scope of 192.168.10.0/24. A new device receives IP 192.168.10.100/24 but cannot access the internet. The default gateway is 192.168.10.1. What is the most likely issue?

Medium
769

An engineer sees that a DNS query for 'www.example.com' returns a CNAME record. What does this mean?

Hard
770

Which YANG model type is defined by industry standards and supported by multiple vendors, offering interoperability?

Easy
771

An engineer is using the Cisco Meraki Dashboard API to retrieve a list of all network clients for a specific network. Which TWO of the following are required to successfully make this API call?

Medium
772

A developer is designing a data model for network device configurations using YANG. They need to represent a list of interfaces where each interface has a name (string) and speed (enumeration). Which YANG statement correctly defines this structure?

Hard
773

An organization uses Cisco ISE for network access control. A user reports inability to access the network. The switch port shows the authenticator state as 'connecting'. What does this indicate?

Hard
774

A developer is writing a Postman test to verify that a Meraki API response returns HTTP status 200 and contains a list of networks. Which code snippet correctly implements this test?

Medium
775

A network engineer needs to automate the configuration of VLANs across 50 switches. Which approach best follows Cisco’s recommended practices for programmability?

Easy
776

In DNA Center, which API endpoint is used to retrieve a list of current network issues?

Medium
777

A Python script uses the requests library to authenticate to Cisco DNA Center. The script receives a 401 Unauthorized error even though the credentials are correct. Which of the following is a likely cause?

Hard
778

Refer to the exhibit. Which Cisco DNA Center Intent API request produced this response?

Medium
779

A network engineer needs to automate the configuration of VLANs on a set of Cisco switches using Ansible. Which API should be targeted to ensure idempotent configuration updates?

Easy
780

A Cisco Catalyst Center API uses OAuth 2.0 with the client credentials grant for server-to-server communication. Which token endpoint parameter should the client include to identify itself?

Hard
781

In Postman, you want to run a collection of API requests automatically and test responses. Which feature should you use?

Medium
782

A developer is using Cisco DNA Center API to add a new device to the inventory. Which HTTP method should be used for this operation?

Easy
783

A developer is writing a Python script that uses the Cisco Meraki API to retrieve a list of networks for an organization. The API returns a JSON array. The developer wants to filter networks where the 'tags' field contains 'production'. Which code snippet correctly filters the results?

Hard
784

A network administrator is configuring a new subnet for a branch office that requires 50 usable host addresses. The corporate network uses the 192.168.10.0/24 block. Which subnet mask should be used to meet the requirement with minimal waste?

Medium
785

In Cisco DNA Center's intent API, which endpoint would you use to retrieve the list of all network devices?

Easy
786

A DevOps team manages a multi-site Cisco Meraki network with 50 MX appliances and 200 MR access points. They use a Python script that calls the Meraki API to collect device utilization data every hour and stores it in a CSV file. Recently, the script started failing intermittently with HTTP 429 status codes. The team suspects rate limiting but notices that the failures occur even when only one script instance runs. The script uses a single API key and makes requests to the /devices/{serial}/uplink endpoint for each MX and the /devices/{serial}/wireless/status endpoint for each MR. The script is scheduled via cron and runs sequentially. The team wants to resolve the rate limiting while minimizing changes to the script. Which course of action should the team take?

Hard
787

A network engineer is developing a Python script to automate the collection of interface statistics from multiple Cisco Catalyst switches using NETCONF. The engineer uses the 'ncclient' library to connect to each switch. The script works for most switches, but for one switch, the connection consistently fails with an authentication error. The engineer has verified that the username and password are correct and that the switch has NETCONF enabled. The engineer suspects the issue might be related to SSH host key checking. The engineer wants to modify the script to bypass host key checking for this specific switch. Which approach should the engineer use?

Medium
788

Which Cisco platform provides an API to retrieve a list of issues affecting the network?

Medium
789

Which THREE are valid Kubernetes Service types? (Select three.)

Hard
790

Refer to the exhibit. An application is deployed on a server at 192.168.1.10, listening on TCP port 8080. The ACL is applied inbound on the server's network interface. Which clients will be able to access the application?

Medium
791

A developer runs 'docker run -d -p 8080:80 --name web nginx:alpine'. The container fails to start. Which command is the most appropriate to investigate the issue?

Medium
792

Which Git command is used to create a new branch and switch to it in one step?

Medium
793

Refer to the exhibit. A security audit reveals that the authentication mechanism is vulnerable. Which attack is most likely possible?

Hard
794

Which TWO of the following are valid security considerations when deploying an application to a Kubernetes cluster managed by Cisco Intersight? (Choose two.)

Hard
795

A company has a microservices application deployed on Kubernetes. There are three services: frontend, backend, and database. The frontend is exposed via an Ingress. The API gateway is used for authentication. Recently, after updating the backend service, users are experiencing 401 Unauthorized errors when accessing endpoints that previously worked. The authentication mechanism uses JWT tokens issued by an external identity provider. The JWT tokens are validated by the API gateway. The backend service itself does not validate tokens; it relies on the gateway to forward user identity via headers. The development team checked the logs and found that the backend is receiving requests with the correct JWT from the gateway but still returning 401. What is the most likely cause?

Hard
796

Which THREE of the following are characteristics of HTTP/2 compared to HTTP/1.1?

Hard
797

An engineer wants to verify that a switch port is configured as an access port in VLAN 10. Which command provides this information?

Easy
798

A Python script uses the 'requests' library to make a POST request to create a new resource. Which HTTP status code indicates successful creation?

Easy
799

Refer to the exhibit. A developer receives this response when attempting to send a PATCH request to modify a YANG data node via RESTCONF. What is the most likely cause?

Hard
800

A developer wants to use Cisco Webex Teams API to send a message to a specific room. Which of the following request JSON body fields is required?

Easy
801

A large enterprise is migrating to a DevOps model and needs to automate the provisioning of network devices. The team has chosen Ansible for configuration management and is using a Git repository for version control. The network includes Cisco IOS routers, Catalyst switches running IOS-XE, and ASA firewalls. The team has written Ansible playbooks for each device type. The goal is to have a CI/CD pipeline that automatically deploys configuration changes to the production network after the changes are merged into the main branch. However, during a recent deployment, a misconfiguration was pushed to a core router, causing a 10-minute outage. The root cause was that the playbook that was executed was not the correct one for that device model. The team wants to implement a mechanism to prevent similar incidents. Which approach should the team adopt?

Hard
802

Which THREE statements about RESTful APIs are true?

Hard
803

A DevOps engineer is designing a REST API for a custom network automation tool. Which principle is essential for a RESTful design?

Medium
804

Match each network automation tool to its primary purpose.

Medium
805

A network engineer wants to programmatically enable an interface using the YANG model shown. Which XPath expression correctly targets the 'shutdown' leaf for GigabitEthernet0/1?

Hard
806

In a Python script using the 'requests' library to interact with Cisco DNA Center API, which function call is used to send a POST request with JSON data?

Easy
807

A developer needs to retrieve the hostname of a Cisco IOS XE device using RESTCONF. Which URI path is correct?

Hard
808

A developer is building a script to retrieve a list of network devices from Cisco DNA Center. The API response includes a 'nextToken' field in the body to indicate more results. What pagination method is being used?

Medium
809

Refer to the exhibit. A Python script parses this JSON response to check if NetFlow is enabled on the network. Which code snippet correctly checks the NetFlow status?

Medium
810

A network administrator is troubleshooting a connectivity issue. A PC with IP address 192.168.1.10/24 cannot ping a server at 192.168.1.20/24. Both are on the same VLAN and connected to the same switch. What is the most likely cause of the issue?

Easy
811

An engineer uses the Cisco Webex Teams API to send a message to a room. The API returns HTTP 403 Forbidden. What is the most likely cause?

Medium
812

In Docker, which command is used to build an image from a Dockerfile and tag it as 'myapp:v1'?

Easy
813

Which THREE of the following are benefits of using event-driven architecture in a distributed system? (Choose three.)

Hard
814

Refer to the exhibit. A developer is trying to access the REST API on a Cisco IOS XE device but receives a 401 Unauthorized error. What is the most likely cause?

Easy
815

Which TWO HTTP status codes indicate client errors?

Medium
816

Based on the routing table, what type of OSPF route is the default route (0.0.0.0/0)?

Hard
817

An engineer is troubleshooting a network issue and needs to verify the MAC address of the next-hop router on a directly connected segment. Which layer of the OSI model does the engineer need to examine to find this information?

Easy
818

A company has a web application running on Cisco DNA Center. The application uses OAuth 2.0 for authentication with an external identity provider (IdP). Recently, users have reported that they are being logged out unexpectedly after a few minutes of inactivity, even though the IdP token has a 1-hour expiration. The application developer wants to maintain usability while keeping security controls. What is the most likely cause and solution?

Medium
819

A developer wants to use Cisco Modeling Labs (CML) API to control a lab session. Which base URL structure is correct for the CML REST API?

Easy
820

An administrator is automating the deployment of a new switch using Cisco DNA Center. Which API category should they use to provision the device with a configuration template?

Medium
821

When designing a REST API for managing network devices, which two principles should be followed to ensure statelessness?

Medium
822

A Webex API request returns a 401 Unauthorized error. The developer has already obtained an access token. What is the most likely cause?

Medium
823

Refer to the exhibit. Both switches are configured with EtherChannel. Which statement is true about VLAN traffic across the trunk?

Hard
824

A developer is using the Webex API to create a webhook that triggers when a new message is posted in a room. What information is typically included in the webhook payload sent by Webex to the callback URL?

Medium
825

Which DNS record type is used to verify domain ownership for email security protocols like SPF and DKIM?

Hard
826

Refer to the exhibit. A Python script uses the Cisco IOS-XE RESTCONF API to retrieve the device configuration. The returned JSON is shown. What must be done to enable the GigabitEthernet0/1 interface using the API?

Medium
827

Which THREE of the following are characteristics of RESTCONF compared to NETCONF? (Select three.)

Hard
828

A docker-compose.yml defines a web service with environment variables. Which key in the service definition should be used to set environment variables?

Medium
829

A developer needs to create a Python script that makes a GET request to a REST API to retrieve a list of network devices. The API uses query parameters to filter by device type and status. Which TWO code snippets correctly include query parameters using the requests library? (Choose two.)

Easy
830

A security policy requires that all container images in a registry are scanned for vulnerabilities before deployment. Which approach best integrates this into a CI/CD pipeline without slowing down the pipeline?

Hard
831

A developer needs to send a diagnostic request to a network device to verify if it supports a specific MIB object. Which protocol and operation should be used?

Easy
832

During a security audit of a microservices application deployed on Cisco Container Platform, the auditor discovers that some containers are running with privileged access. The development team argues that certain containers need to modify kernel parameters. Which security best practice should be recommended to minimize risk while allowing necessary kernel adjustments?

Hard
833

A developer is writing a Python script to interact with a Cisco device using RESTCONF. The script sends a PUT request to modify an interface configuration. Which HTTP response code indicates that the resource was successfully created?

Easy
834

Based on the exhibit, what is the most likely reason for the connection timeout?

Hard
835

Refer to the exhibit. An Ansible playbook is intended to set the description on GigabitEthernet0/1. However, the playbook fails because the device does not have that interface. What is the most likely reason?

Easy
836

During a CI/CD pipeline, a security scan reveals that a Docker image contains a vulnerability in a base layer. Which action BEST addresses the issue?

Medium
837

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Easy
838

A developer is exploring YANG models on yangcatalog.org. They want to find a standard model for interface configuration that is vendor-neutral. Which model should they look for?

Medium
839

A NETCONF manager sends a get-config request to a Cisco device and receives the above reply. The automation script expected the interface to be enabled. Which of the following is the best course of action to remediate the issue?

Hard
840

A network engineer is developing a Python application that uses the Cisco Meraki Dashboard API. The API responses are in JSON format. Which Python module is most commonly used to parse JSON responses?

Medium
841

A team is using Python scripts with netmiko to back up configurations from a large number of network devices. What is the primary advantage of using netmiko over direct paramiko for this task?

Easy
842

Which TWO of the following are HTTP methods used for creating or updating resources in REST APIs? (Select TWO)

Easy
843

A developer is designing a microservices architecture where services need to discover each other using DNS. The team wants to map a service name 'payment-service.example.com' to its IPv6 address. Which DNS record type should be used?

Hard
844

A DevOps team is building a CI/CD pipeline that configures Cisco NX-OS switches. They want to use model-driven telemetry to stream operational data. Which protocol should they use for on-change telemetry?

Medium
845

Which TWO of the following are true about REST API design principles?

Easy
846

A DevOps engineer is configuring a CI/CD pipeline that uses Cisco DNA Center API to deploy network configurations. Which two best practices should be followed? (Choose two.)

Medium
847

A developer is integrating a Webex Teams bot with an external system using the Webex API. The bot receives an HTTP POST callback from Webex every time a message is posted in a monitored space. The developer notices that sometimes the callback includes a 'data' object with 'actorId', but other times the 'actorId' is missing. The bot needs to log the identity of the person who posted the message. What should the developer do to reliably obtain the sender's identity?

Hard
848

When using the Cisco Meraki Dashboard API with pagination, the Link header in the response contains <https://api.meraki.com/api/v1/organizations?perPage=10&startingAfter=123>; rel="next". What does this indicate?

Medium
849

Which of the following best describes the purpose of a unit test in software development?

Easy
850

A developer is using Git to manage automation code. What is the primary advantage of using 'rebase' instead of 'merge' to integrate changes from a feature branch into the main branch?

Medium
851

A team is building a CI/CD pipeline for network automation. They want to use Cisco Modeling Labs (CML) to validate configuration changes before production. What is the best approach to integrate CML into the pipeline?

Hard
852

When designing a REST API endpoint to update a network device's configuration, which HTTP method should be used?

Easy
853

A developer is deploying a containerized application with Docker Compose. The application requires environment variables for database credentials that should not be hardcoded in the docker-compose.yml file. Which two methods securely provide these credentials? (Choose two.)

Medium
854

Which HTTP method should be used to replace an entire existing resource in a RESTful API?

Easy
855

Which THREE of the following are direct benefits of using version control in software development?

Medium
856

A developer is using the Meraki Dashboard API to programmatically change the SSID name of a wireless network. The developer successfully authenticates with an API key and sends a PUT request to /networks/{networkId}/wireless/ssids/{number} with a JSON body containing the updated name. The API returns a 200 OK response, but the SSID name does not change in the Meraki Dashboard. The developer double-checks the networkId and SSID number, and they are correct. The developer also confirms that the API key has full write access to the network. What additional step is most likely required?

Medium
857

Which Docker command is used to view the logs of a running container in real-time?

Medium
858

A network engineer is analyzing traffic and needs to identify which applications use UDP. Which three applications commonly use UDP as their transport protocol? (Choose three.)

Hard
859

A user reports that they can ping the IP address of the default gateway but cannot ping a server on a different subnet. The administrator checks the ARP table on the user's PC and sees an incomplete entry for the server's IP. What is the most likely cause?

Medium
860

An Ansible playbook using the ios_config module fails with the error 'unable to open connection'. The network device is reachable via SSH from the Ansible control node. What is the most likely cause?

Medium
861

A developer is writing a web application and wants to prevent SQL injection attacks. Which coding practice should be followed when constructing SQL queries?

Medium
862

Which TWO Kubernetes resources are used to provide configuration data to pods? (Choose TWO.)

Medium
863

A university campus network uses Cisco switches with 802.1X for wired authentication. Recently, users in a dormitory report intermittent connectivity: they can connect initially but are disconnected after a few minutes. The network team checks the switch logs and sees messages like 'Authentication failure for MAC address xxxx.xxxx.xxxx on port GigabitEthernet1/0/5' but the users claim they are using valid credentials. The same users can connect from other ports without issues. The port configuration for Gi1/0/5 is: switchport mode access, authentication port-control auto, dot1x pae authenticator, authentication periodic, authentication timer reauthenticate 3600. The team suspects a misconfiguration. What is the most likely cause of the intermittent disconnections?

Medium
864

A network automation script uses the requests library to retrieve device information from a REST API. The API requires authentication via a bearer token. Which code example correctly sets the Authorization header?

Medium
865

A developer is writing a Python script that processes a large CSV file. The script uses 'with open(file, 'r') as f' to read the file. Why is this approach preferred over calling f = open(file) and then f.close()?

Hard
866

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required?

Medium
867

A developer is writing a Kubernetes Deployment YAML and wants to set a CPU limit of 500 millicores. Which of the following is the correct YAML snippet?

Hard
868

Refer to the exhibit. A developer receives this response from Cisco DNA Center API. What is the most likely cause and solution?

Hard
869

A large enterprise operates a multi-vendor network with Cisco routers and switches, as well as Juniper devices. The network team uses Ansible for automation, with a centralized control node running RHEL. They have been using the 'ios_config' module for Cisco devices and 'junos_config' for Juniper devices. Recently, they added a new Cisco Catalyst 9300 switch to the network. They wrote a playbook to configure VLAN 100 on the switch, but the task fails with the error: 'module_stderr: Could not find platform module for Cisco IOS XE'. The playbook uses the 'cisco.ios.ios_config' module. The control node has the 'cisco.ios' collection installed (version 2.0.0). The target switch runs IOS XE 16.12.3. The control node can SSH to the switch successfully. Which action will most likely resolve the issue?

Hard
870

A developer wants to send a message to a specific Webex Teams room using the REST API. Which HTTP method and endpoint should be used?

Easy
871

A developer creates a Dockerfile with the following content: FROM python:3.9-slim, COPY app.py /app/, RUN pip install flask, EXPOSE 5000, CMD ["python", "/app/app.py"]. When building the image with 'docker build -t myapp .', what is the purpose of the EXPOSE instruction?

Easy
872

A developer wants to create a Docker image that runs a Python application. Which instruction should be placed at the end of the Dockerfile to specify the command that runs when the container starts?

Easy
873

In a CI/CD pipeline using Jenkins, which stage is typically executed immediately after the build stage to ensure code quality before deployment?

Medium
874

A script using the Meraki Python library fails with an error 'Rate limit exceeded'. The developer needs to handle this. Which approach is correct?

Hard
875

A network automation engineer is using Cisco DNA Center APIs. Which TWO of the following are valid API categories? (Choose two.)

Medium
876

A company uses Ansible to automate network configuration. They have an Ansible control node that must reach all network devices. Which transport protocol does Ansible use by default to connect to Cisco IOS devices?

Medium
877

A network team is implementing automation to provision new switchports across a campus network. They decide to use a controller-based approach with Cisco DNA Center. What is the primary advantage of using DNA Center for this task?

Medium
878

A team uses GitHub Actions for CI/CD. Their workflow includes a job that builds a Docker image and pushes it to a private registry. The job needs to authenticate to the registry using secrets stored in GitHub. Which approach is most secure for passing credentials?

Hard
879

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

Hard
880

Which of the following is a non-overlapping channel in the 2.4 GHz Wi-Fi band?

Easy
881

A network automation script uses the Python ncclient library to modify a device configuration. Which NETCONF operation should be used to apply configuration changes?

Easy
882

A security team is developing an application that collects network alerts from Cisco Firepower Management Center (FMC) API. The API requires OAuth2 authorization code grant flow. After obtaining an authorization code, what must the application do to get an access token?

Hard
883

Which THREE of the following are characteristics of IPv6? (Select exactly three.)

Hard
884

A network administrator is using Cisco DNA Center APIs to automate network changes. Which two API categories are used to perform configuration deployments? (Choose two.)

Medium
885

A developer runs 'docker-compose up -d' for a multi-service application. What does the '-d' flag do?

Easy
886

A network automation engineer is tasked with creating a Python script to automatically back up the running configuration of all IOS XE devices in a data center using the Cisco IOS XE REST API. The engineer has credentials for each device and knows the IP addresses. The script uses the requests library and sends a GET request to https://<device-ip>/restconf/data/Cisco-IOS-XE-native:native?content=config. The script runs successfully for some devices but fails with a 401 Unauthorized error for others. The engineer confirms the credentials are correct and the devices are reachable. The working devices are running IOS XE 16.9, while the failing ones are running IOS XE 16.6. The engineer checks the API documentation and finds that RESTCONF is enabled on all devices. However, the engineer notices that the failing devices require a different authentication method. What should the engineer do to fix the authentication for the IOS XE 16.6 devices?

Hard
887

A developer is using the Meraki Dashboard API to list all organizations. Which TWO of the following are true regarding pagination in the Meraki API? (Choose TWO.)

Medium
888

A network administrator configures a switch port to belong to VLAN 10. Which OSI layer is primarily involved in VLAN tagging?

Medium
889

When using RESTCONF to configure a network device, which URL path prefix and content-type header should be used?

Medium
890

A network administrator is configuring a DNS server. Which TWO DNS record types are used for IPv6 address resolution?

Medium
891

Match each Git command to its function.

Medium
892

An application needs to retrieve all network clients from a specific Meraki network. The API response may be paginated. Which query parameters can be used to implement cursor-based pagination with the Meraki Dashboard API?

Hard
893

In a CI/CD pipeline, a code quality check fails due to a security vulnerability in a third-party library. What is the best practice to address this?

Hard
894

Using the Cisco DNA Center API, an engineer wants to create a new site with building and floor information. Which HTTP method and endpoint should be used?

Hard
895

A Python script uses the ncclient library to connect to a Cisco NX-OS device over NETCONF. After establishing the session, the script executes an editing operation with candidate datastore. Which additional step is required to make the changes take effect immediately on the running configuration?

Medium
896

A developer is writing a Python script to back up Cisco router configurations via SSH. Which two libraries are appropriate for this task? (Choose two.)

Easy
897

An administrator is configuring a Cisco Meraki Dashboard API integration. After receiving a 429 HTTP response, what header should be examined to determine when the request can be retried?

Medium
898

A developer wants to use Postman to test a REST API that requires a Bearer token. Where should the token be placed in the request?

Easy
899

Which TWO statements about the MVC pattern are correct? (Choose two.)

Medium
900

In a Docker Compose file, which key is used to define the dependency order between services?

Easy
901

Which of the following is a private IPv4 address range as defined by RFC 1918?

Easy
902

A developer is implementing secure coding practices to prevent SQL injection. Which approach is most effective when building a SQL query with user input?

Hard
903

Which YANG model is an OpenConfig model commonly used for interface configuration?

Easy
904

Which YANG model is an OpenConfig model used for interface configuration?

Medium
905

A developer needs to retrieve a list of network devices from Cisco DNA Center. Which API endpoint should be used?

Medium
906

Which HTTP method is idempotent and used to update a resource by sending the full representation?

Medium
907

An administrator needs to retrieve the hostname of an IOS XE device using RESTCONF. Which URL and data path should they use?

Medium
908

A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)

Medium
909

Which tool is used to explore and validate YANG models?

Easy
910

A network engineer is using Cisco IOS XE RESTCONF to retrieve the hostname of a device. The device has already enabled netconf-yang and restconf. Which URL path should be used?

Hard
911

Which data structure in Python would be most appropriate for storing a collection of unique items and performing fast membership tests?

Easy
912

When using the NX-API on Cisco NX-OS, which HTTP method is used to send CLI commands in JSON format?

Medium
913

A Kubernetes Deployment has replicas: 3. The team updates the container image to a new version. The rollout gets stuck because the new pod fails readiness probes. Which kubectl command will display the rollout status and help diagnose the issue?

Hard
914

Which two authentication methods are commonly used with Cisco REST APIs? (Choose two.)

Medium
915

A technician needs to verify the IP address of a remote server using DNS. Which command should be used on a Cisco IOS device?

Easy
916

Which THREE of the following are common security vulnerabilities listed in the OWASP Top 10? (Choose three.)

Easy
917

An engineer configures a trunk port as shown. A device connected to this port sends an untagged frame. Which VLAN will the switch associate the frame with?

Medium
918

Which NX-OS API method allows sending CLI commands in JSON format without enabling any additional features?

Medium
919

Which two statements are true about Cisco DevNet Sandboxes?

Easy
920

A developer is using Git for version control of a Python library. A colleague accidentally committed a large sensitive file. Which Git command sequence should be used to remove the file from history without losing subsequent changes?

Hard
921

An IoT device streams telemetry data to a collector using gNMI. Which mode allows the collector to initiate the subscription?

Hard
922

Based on the exhibit, what is the frequency of the telemetry subscription?

Easy
923

Which TWO are valid methods to secure a REST API? (Choose two.)

Easy
924

In a CI/CD pipeline using Jenkins, which plugin is commonly used to integrate with Cisco Container Platform for deploying containers?

Medium
925

Which THREE security measures should be implemented in a CI/CD pipeline to protect against supply chain attacks? (Choose three.)

Hard
926

A developer is creating a YANG data model for a new interface feature. The model must allow the user to choose from a predefined set of values for the 'duplex' leaf. Which YANG statement should be used to restrict the values to 'full', 'half', and 'auto'?

Hard
927

You are automating the deployment of a new software image on a fleet of Cisco Nexus switches using Ansible. The switches are in a production environment and must have minimal downtime. You have a maintenance window of 30 minutes per switch. Your playbook performs the following steps: 1) Copy the image to the switch via SCP, 2) Set the boot variable to the new image, 3) Save the configuration, 4) Reload the switch. During a dry run on a test switch, you notice that the reload step takes 8 minutes, but the copy step takes 15 minutes due to slow link speed. For the production rollout, you need to reduce the overall time per switch. Which approach should you take?

Hard
928

In a CI/CD pipeline for a network automation project, which stage is responsible for validating the syntax of YAML configuration files?

Hard
929

A developer is building a RESTful API with Python Flask. Which TWO are recommended security best practices for exposing the API over HTTPS?

Easy
930

A network engineer notices that after a link failure, traffic to a server on a different VLAN is intermittent. The network uses Rapid PVST+. The switch connecting the server is a root bridge for that VLAN. What is the most likely cause of the intermittent connectivity?

Medium
931

A DevOps team is securing a CI/CD pipeline that deploys containerized applications to Kubernetes. Which THREE practices enhance security?

Hard
932

Which of the following is a best practice for securing API keys in a CI/CD pipeline?

Easy
933

In a Docker bridge network, two containers can communicate with each other using which identifier by default?

Medium
934

A Webex bot needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should the bot implement?

Medium
935

A network administrator is configuring a new subnet for a branch office that requires at least 50 usable host addresses. Which subnet mask would meet this requirement while minimizing address waste?

Medium
936

A network engineer needs to automate the deployment of a new VLAN on multiple Cisco switches using RESTCONF. Which URL structure should be used to create a VLAN with ID 100?

Medium
937

A company is adopting DevSecOps practices. Which THREE practices should be implemented to secure application deployment?

Hard
938

A Python script used for network automation requires storing an API secret. Which approach is the most secure and recommended best practice?

Easy
939

A developer is designing a REST API for managing network devices. Which three best practices should be followed for the API design? (Choose three.)

Medium
940

A Python script uses a dictionary to store device configuration parameters. Which key, if any, will raise a KeyError if it does not exist in the dictionary?

Easy
941

Which data serialization format is most commonly used for configuration files in Cisco automation tools like Ansible?

Easy
942

A DevOps engineer is implementing Infrastructure as Code (IaC) for network devices. Which of the following practices is most critical to ensure that the environment state matches the desired configuration defined in code?

Medium
943

Match each HTTP method to its typical use case in REST APIs.

Medium
944

A network automation engineer is evaluating options for model-driven programmability on Cisco devices. Which THREE are valid YANG model sources or tools? (Choose three.)

Hard
945

Which two of the following are valid ways to authenticate to the Cisco DNA Center API?

Medium
946

When using the Meraki Dashboard API, what is the correct method to authenticate requests?

Medium
947

Which Python data type is mutable and unordered?

Easy
948

In the MVC (Model-View-Controller) pattern, which component is responsible for handling user input and updating the model?

Hard
949

A developer wants to create a Webex webhook that triggers when a new message is posted in any room the bot is in. Which resource event should they subscribe to?

Medium
950

Which three capabilities are offered by the Cisco DNA Center REST API?

Medium
951

In the context of SDN, which API allows a network controller to communicate with the forwarding plane of network devices?

Hard
952

Which EEM applet action is used to execute a CLI command when an event triggers?

Medium
953

Which NETCONF operation is used to retrieve the entire configuration datastore from a network device?

Medium
954

Refer to the exhibit. A developer is building a Docker image for a Node.js application. The Dockerfile contains: ``` FROM node:14 WORKDIR /usr/src/app COPY package*.json ./ RUN npm install COPY . . CMD ["node", "app.js"] ``` When building, the error shown occurs. What is the most likely cause?

Hard
955

Which two authentication methods are commonly used with Cisco APIs? (Choose two.)

Easy
956

A developer is using the Cisco Webex API to create a room and add members. The API requires an access token with the appropriate scopes. The developer receives a 401 Unauthorized error when trying to create a room. What is the most likely cause?

Hard
957

A developer is working with the Cisco SD-WAN vManage API to monitor overlay tunnels. They need to retrieve a list of all devices with their site IDs and IP addresses. Which API endpoint is most appropriate?

Hard
958

An engineer is exploring YANG models for network interfaces. They need a vendor-neutral model that can be used across multiple device types. Which YANG model should they use?

Hard
959

A network engineer is designing a subnetting scheme for a company that requires 5 subnets from the 192.168.1.0/24 network. What subnet mask should be used, and how many usable hosts per subnet will be available?

Hard
960

A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?

Medium
961

A DevOps engineer is managing a Git repository and wants to discard local changes to a file and revert it to the last committed state. Which TWO commands can accomplish this? (Choose two.)

Medium
962

A developer needs to send a message to a specific room in Webex using the API. What is the correct endpoint and required body parameter for the room destination?

Hard
963

Drag and drop the steps to set up a basic DHCP server on a Cisco router into the correct order.

Medium
964

A developer needs to create a Python function that accepts any number of keyword arguments and prints them. Which function definition correctly uses **kwargs?

Medium
965

In a network automation workflow, a developer needs to ensure idempotency. What does idempotency mean in this context?

Hard
966

An IPv6-enabled host is trying to discover the MAC address of another host on the same link. The host knows the destination IPv6 address but does not have a corresponding entry in the neighbor cache. Which protocol and message type does the host use?

Hard
967

A Python script uses the Cisco Meraki API to list networks in an organization. The API returns HTTP 403 Forbidden. What is the most likely cause?

Easy
968

A REST API returns a 500 Internal Server Error when a client sends a malformed JSON payload. What is the most appropriate HTTP response code to indicate a client-side error?

Medium
969

In a microservices architecture, which of the following is a primary advantage over a monolithic architecture?

Hard
970

Which three of the following are common data formats used with REST APIs on Cisco platforms?

Medium
971

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

Easy
972

Which TWO are valid methods to secure a Docker container?

Easy
973

An engineer is troubleshooting packet loss between two hosts on different subnets. The traceroute shows that packets reach the first hop router but then stop. The router's ARP table shows an incomplete entry for the next-hop IP address. What is the most likely cause?

Hard
974

When using Cisco Intersight API to manage UCS servers, a script must invoke an API that triggers a firmware upgrade. Which HTTP method and endpoint pattern should be used?

Medium
975

An EEM applet is triggered when a specific syslog message pattern appears. Which action should be used to send a custom syslog message?

Hard
976

A company wants to implement a zero-trust model for API access between microservices. What is the most effective way to authenticate service-to-service communication?

Easy
977

A network automation engineer needs to retrieve the Layer 2 topology for a specific VLAN from Cisco DNA Center. Which API endpoint should be used?

Medium
978

A network automation team uses a CI/CD pipeline. Which practice best ensures that configuration changes are validated before deployment to production?

Medium
979

Refer to the exhibit. A developer from subnet 10.10.10.0/24 cannot reach the RESTCONF API on the IOS-XE device. What is the most likely cause?

Medium
980

A network engineer is troubleshooting a connectivity issue between two hosts in different VLANs on the same switch. The hosts are in VLAN 10 and VLAN 20, respectively. The switch has an SVI for each VLAN and IP routing is enabled. Which command should be used to verify that the switch is forwarding traffic between the VLANs?

Easy
981

Which THREE factors influence the convergence time of OSPF in a large enterprise network? (Choose three.)

Hard
982

A CI/CD pipeline for network automation includes a stage that runs Ansible playbooks against a staging environment. The pipeline is triggered by Git commits. After a commit, the pipeline fails because the Ansible inventory file is missing. What is the most likely reason?

Hard
983

A developer is building an application that interacts with the Webex API to create rooms and send messages. The application needs to receive real-time notifications when a new message is posted in any room. Which TWO actions should the developer take? (Choose two.)

Medium
984

Which TWO are common authentication methods used when interacting with Cisco APIs?

Easy
985

Which THREE are valid reasons to use Cisco DNA Center's Assurance APIs in an enterprise network?

Hard
986

A Python script needs to iterate over a dictionary of network interfaces and print each interface name and its IP address. The dictionary is structured as: {'GigabitEthernet1/0/1': '10.1.1.1', 'GigabitEthernet1/0/2': None}. Which THREE code snippets correctly iterate and print the key-value pairs, skipping entries with None? (Choose three.)

Medium
987

An organization uses Cisco DNA Center and wants to use its Intent API to retrieve the health score of all wireless clients. Which API endpoint and method should be used?

Hard
988

Which TWO of the following are valid OAuth 2.0 grant types? (Select TWO)

Medium
989

Given the Python list comprehension: result = [x*2 for x in range(10) if x > 5] What is the value of result?

Hard

Frequently asked questions

What does the scenario questions domain cover on the 200-901 exam?
scenario questions questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 989 scenario questions questions in the 200-901 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only scenario questions questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.