200-901 · domain
scenario questions
Practise Cisco DevNet Associate 200-901 scenario questions practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice scenario questions questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about scenario questions
scenario questions questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common scenario questions exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All scenario questions questions (989)
Click any question to see the full explanation, or start a practice session above.
A developer is creating a Python script to retrieve interface statistics from a Cisco IOS XE device using RESTCONF. Which HTTP method should be used to get the data?
Medium2An application uses Cisco DNA Center APIs and needs to receive notifications when a new device is added. Which DNA Center API category should be used to set up event-driven notifications?
Medium3An application sends many requests to the Meraki API and receives HTTP 429 errors. The response includes a 'Retry-After' header. What does this status code indicate?
Medium4A company uses Ansible to automate configuration of its Cisco IOS XE routers. The network team recently upgraded the routers' software from IOS 15.x to IOS XE 17.x. Since the upgrade, the Ansible playbook fails intermittently with the message: 'Failed to connect to the host via ssh: timed out'. However, the team can SSH manually to the routers from the Ansible control node without issues. The playbook uses the 'cisco.ios.ios_config' module with default SSH options. The routers have been configured with SSH version 2 and local authentication. The Ansible control node runs Red Hat Enterprise Linux 8. Which action should the network engineer take to resolve the issue?
Medium5Which TWO practices help prevent hardcoded credentials in application code? (Choose TWO.)
Medium6A Python script uses the Cisco Webex API to list all rooms. The response includes pagination via the 'Link' header with 'rel="next"'. What is the correct way to retrieve the next page of rooms?
Easy7A network engineer attempts to modify the IP address of GigabitEthernet1/0/1 using the Cisco IOS-XE RESTCONF API. They send a PUT request with a modified JSON body but receive a 400 Bad Request error. What is the most likely cause?
Hard8A Webex bot needs to send a message to a room. The bot has the room ID. Which API endpoint should be used, and what is the correct HTTP method?
Medium9A CI/CD pipeline has a stage that runs security vulnerability scans on dependencies. Which tool is specifically designed to scan Python packages for known vulnerabilities?
Medium10In a microservices architecture, which communication pattern is typically asynchronous and decoupled?
Medium11Which tool can be used to explore YANG models locally?
Easy12A DevOps team manages network infrastructure using Infrastructure as Code (IaC). They store configuration files in a Git repository and use CI/CD to deploy changes. What is the best practice to ensure that only validated configurations are applied to production devices?
Hard13Which Cisco platform uses NX-API to allow programmatic access to CLI commands via JSON?
Easy14In an SDN architecture, which API is used by the controller to communicate with network devices to install forwarding rules?
Hard15A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?
Medium16A network administrator is configuring DNS for a corporate domain. An MX record is required to specify the mail server responsible for handling email. Which of the following is a correct example of an MX record?
Medium17A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?
Medium18Based on the NAT translation table, what type of NAT is being used?
Hard19A network engineer needs to automate the deployment of QoS policies across multiple campus switches using Cisco DNA Center. The engineer decides to use the Cisco DNA Center Intent API to create a policy tag and bind it to a group of devices. After sending the PUT request to /dna/intent/api/v1/policy-tag, the API returns a 202 Accepted status. However, the engineer notices that the policy is not being applied consistently across all devices. What is the most likely reason?
Medium20In Cisco IOS XE, a network engineer wants to retrieve the hostname of a device using RESTCONF. Which URI and method should be used? Assume RESTCONF is enabled and the base URL is https://device/restconf.
Hard21Which TWO Docker network drivers allow a container to communicate with the host's network stack directly?
Medium22A developer is using Cisco Meraki API to retrieve a list of networks. What is the correct HTTP method and endpoint path for listing networks in an organization?
Easy23A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?
Medium24A development team is implementing a microservices architecture. They need to ensure that services can discover each other dynamically without hardcoding IP addresses. Which technology should they use?
Medium25In a CI/CD pipeline for network automation, a change is rolled back using a Git revert commit that triggers a new pipeline. The rollback playbook fails because the 'previous' configuration snapshot is missing. What should be implemented to prevent this?
Hard26A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?
Easy27A large enterprise uses Cisco SD-Access with fabric automation. The network administrator wants to automate the process of adding a new user device to a specific virtual network (VN) based on its MAC address. Which API or tool should they use?
Hard28An application requires reliable, ordered delivery of data with error checking. Which transport protocol should be used, and what is a key characteristic of this protocol?
Medium29Which TWO of the following are examples of application layer protocols?
Easy30A DevOps team is using Cisco NSO to manage network devices. They want to ensure that the configuration is compliant with corporate standards. Which NSO feature should they use?
Medium31A network automation engineer is writing a Python script to interact with the Cisco Meraki Dashboard API. The script currently makes GET requests to retrieve a list of networks and then makes subsequent requests for each network to get device details. However, the script is slow due to network latency. The engineer wants to improve performance without changing the API's functionality. Which approach best addresses the performance issue?
Easy32A network administrator notices that a host with IP 192.168.1.10/25 cannot communicate with a host at 192.168.1.200/25. What is the most likely reason?
Hard33When designing a REST API client for a Cisco DNA Center deployment, which authentication method should be used to obtain a token for subsequent API calls?
Easy34Which three configuration management tools can be used with Cisco devices for automation? (Choose three.)
Medium35Which Python exception would be raised by the following code? my_dict = {'a': 1} value = my_dict['b']
Hard36A Kubernetes pod has two containers: a main application and a sidecar proxy. They need to communicate via localhost. Which pod networking model allows this?
Hard37What is the purpose of the Authorization header in a REST API call?
Easy38You are writing a Dockerfile for a Python application. Which instruction should you use to install the dependencies from a requirements.txt file?
Easy39A developer is using Git for version control. After creating a new feature branch 'feature-login' from 'main', they make several commits. Meanwhile, another developer has merged changes into 'main'. The developer wants to incorporate the latest main changes into 'feature-login' without creating a merge commit. Which Git command should they use?
Hard40A network administrator is configuring OSPF on a router and wants to ensure that routes from area 0 are propagated to area 1, but area 1 should not see specific inter-area routes. Which OSPF feature should be used?
Medium41Which TWO authentication mechanisms are commonly used with Cisco REST APIs? (Choose two.)
Medium42A developer is writing a Python script that uses the Cisco Catalyst Center (formerly DNA Center) API to get the list of sites. The API returns a response with a 'response' key containing a list of sites. The developer wants to access the 'response' field from the JSON response. Which code snippet correctly extracts the list?
Easy43A developer is writing a Python script to interact with the Cisco DNA Center REST API. Which HTTP method should be used to retrieve a list of network devices?
Easy44An application needs to retrieve a list of network devices from Cisco DNA Center. Which HTTP method should be used against the /dna/intent/api/v1/network-device endpoint?
Easy45During a TCP three-way handshake, which sequence of flags is sent from the client to initiate the connection?
Hard46A developer is using the Meraki Dashboard API to list all organizations. The base URL is https://api.meraki.com/api/v1/. What is the correct endpoint and authentication method?
Medium47A developer needs to retrieve a list of all networks in a Meraki organization using the Dashboard API. Which API call should be made?
Easy48An application needs to discover the MAC address of another device on the same local network. Which protocol does it use?
Medium49A network engineer uses Ansible to apply a standard ACL to multiple routers. The playbook runs without errors, but the ACL is not applied on some routers. Upon checking, those routers have a different configuration revision due to a previous manual change. What is the best practice to ensure consistent application?
Hard50In the OSI model, which layer is responsible for logical addressing and routing of packets between networks?
Easy51A developer is designing a Python script that needs to make multiple REST API calls to different endpoints sequentially. The script must handle the following requirements: (1) Use a variable timeout for each request, (2) Include an authorization token in every request, (3) Parse JSON responses. Which TWO features of the requests library should be used? (Choose two.)
Medium52A developer needs to share a Docker image with a colleague. They decide to push the image to a registry. Which Docker command pushes an image to a registry?
Easy53Match each HTTP status code to its meaning.
Medium54A developer is using the Meraki Dashboard API to manage networks. Which two statements about pagination are correct?
Medium55Which TWO of the following protocols use UDP as the transport layer protocol? (Choose two.)
Easy56A security team wants to ensure that only signed Docker images are deployed in production. Which CI/CD pipeline step validates the image signature before deployment?
Medium57In the TCP three-way handshake, which sequence of flags is exchanged to establish a connection?
Medium58A developer is trying to access an internal corporate web API at http://api.internal.company.com from their workstation, which has the IP configuration: IP address 192.168.1.100, subnet mask 255.255.255.0, default gateway 192.168.1.1, and DNS server 192.168.1.2. The developer can ping the DNS server (192.168.1.2) successfully, but when they try to curl the API endpoint, the command times out. The developer also confirms that the API server is up and reachable from other devices on the same subnet. Which action should the developer take to resolve this issue?
Easy59Which authentication flow is most appropriate for a native mobile app that needs to access the Webex API on behalf of a user?
Medium60Which TWO of the following features are provided by Cisco DNA Center but NOT by Cisco Prime Infrastructure? (Choose two.)
Hard61Which two HTTP methods are considered idempotent? (Choose two.)
Easy62What is the correct URL path for retrieving the configuration of a network interface using RESTCONF on a Cisco device?
Medium63Which Docker network driver allows a container to share the host's network stack, giving it direct access to host interfaces?
Easy64You are a network engineer at a financial services company. The network uses OSPF as the IGP, and all routers are in area 0. The core network consists of four routers (R1, R2, R3, R4) connected in a full mesh with GigabitEthernet links. The OSPF cost is set to 1 on all interfaces. Recently, a new application was deployed that requires low jitter and deterministic paths between two servers: Server A connected to R1 and Server B connected to R4. During peak hours, you notice that traffic between the servers is using the path R1->R3->R4 instead of R1->R2->R4, causing higher latency due to congestion on R3. OSPF metrics reflect equal cost to both paths (cost 2 each). You need to enforce that traffic from Server A to Server B always uses the path through R2 without changing the topology or adding additional hardware. Which action should you take?
Hard65You are a junior network developer tasked with automating device inventory retrieval using the Cisco Meraki Dashboard API. You have already generated an API key with the appropriate scopes and have tested it successfully with simple GET requests. However, when you attempt to retrieve the list of all devices in your organization via the 'GET /organizations/{organizationId}/devices' endpoint, you receive a 403 Forbidden error. You verify that the API key is correctly included in the request header as 'X-Cisco-Meraki-API-Key'. You also confirm that the organization ID is correct. You are able to reach the Meraki Dashboard API server from your environment, as other endpoints (e.g., 'GET /organizations') work fine. What is the most likely cause of the 403 error, and what should you do to resolve it?
Easy66Which transport protocol is connection-oriented and ensures reliable delivery through acknowledgments and retransmissions?
Easy67A Python function needs to accept a variable number of keyword arguments. Which parameter syntax should be used?
Medium68What authentication method is required to obtain a token from Cisco DNA Center's API?
Easy69A Python function needs to handle both expected and unexpected errors during file I/O. Which THREE constructs are essential for robust exception handling? (Choose three.)
Easy70A developer is implementing exception handling in Python for a function that makes an HTTP request. Which THREE exception types should be caught to handle common network and HTTP errors? (Choose three.)
Hard71Which THREE steps are essential in a typical CI/CD pipeline for a containerized application? (Choose THREE.)
Hard72A developer is working on a Python application that automates the configuration of multiple Cisco IOS-XE devices using RESTCONF. The application uses the requests library. The developer notices that sometimes the PUT request to update the interface description returns a 409 Conflict error. Upon investigation, the developer finds that the issue occurs when two instances of the application are running concurrently and attempt to update the same interface. The developer wants to implement a strategy to avoid conflicts. Which approach is most effective?
Medium73During a security audit, an engineer discovers that a CI/CD pipeline is storing API keys in plain text in environment variables. Which best practice should be implemented to mitigate this risk?
Medium74Match each Python library to its typical use in network automation.
Medium75A network automation script uses RESTCONF to configure a router. The script receives an HTTP 409 Conflict response. What is the most likely cause?
Hard76Which TWO statements about REST API design best practices are true? (Choose two.)
Medium77A developer is integrating with Cisco Webex Teams. Which two resources can trigger a webhook?
Medium78An application is secured using OAuth 2.0 for Cisco Webex API access. Which three components are involved in the authorization code grant flow? (Choose three.)
Medium79An engineer is designing a CI/CD pipeline for a Python application. The pipeline should automatically run unit tests, build a Docker image, push it to a private registry, and deploy to a Kubernetes cluster. Which sequence of stages is correct?
Medium80Which THREE of the following are common tools used in a CI/CD pipeline for network automation? (Choose three.)
Medium81Which TWO HTTP methods are considered safe (idempotent and without side effects on the server)?
Medium82Which TWO statements are true about VXLAN? (Choose two.)
Medium83Which TWO Ansible modules are commonly used for automating Cisco IOS devices?
Easy84Which TWO of the following are commonly used when implementing pagination in REST APIs? (Select TWO)
Medium85An engineer wants to trigger an EEM applet when a specific syslog message appears. Which event detector should be used?
Hard86Which TWO of the following are valid ways to handle errors in a Python program that uses the Cisco Meraki API?
Hard87A developer is integrating with Cisco SD-WAN vManage using REST APIs. After successfully submitting credentials, the API returns a 401 Unauthorized error for subsequent requests. What is the most likely missing step?
Hard88A network engineer is using Cisco DNA Center to automate network changes. Which THREE operations are part of the 'Change your network' API category? (Choose three.)
Hard89Refer to the exhibit. A developer needs to authenticate to this router via NETCONF using the devuser credentials. Why might authentication fail?
Medium90A large enterprise uses Cisco DNA Center to manage its campus network. The network team has automated wireless SSID provisioning using the Intent API. Recently, a new SSID was created but it does not appear on the wireless LAN controllers. The Python script that calls the API returns a 200 OK response, but the SSID is not deployed. The script uses the POST /dna/intent/api/v1/ssid endpoint with a JSON body containing the SSID name and security settings. A day later, the SSID is still missing. The engineer checks the DNA Center GUI and sees the SSID in the 'Design' section but with a 'Provisioning Failed' status. Which step should the engineer take next to resolve the issue?
Hard91A developer is implementing a Cisco Intersight API solution to manage multiple UCS domains. They receive an HTTP 403 Forbidden response when trying to create an organization. What is the most likely issue?
Hard92A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. After a successful request, the response includes a Link header with rel="next" pointing to the next page. What does this indicate about the API's pagination?
Hard93Which Git command is used to switch to an existing branch named 'feature-x' and update the working directory?
Medium94A network engineer is designing a wireless network for an office that requires high throughput and minimal interference. Which two channels should be used for the 2.4 GHz band to avoid overlap? (Choose two.)
Medium95A CI/CD pipeline uses GitHub Actions. The workflow should trigger only when a pull request is opened against the 'main' branch. Which 'on' trigger configuration is correct?
Hard96Which two statements about the Cisco DevNet Sandbox are true?
Hard97A developer is using the Meraki Dashboard API and receives a 429 Too Many Requests error. The API documentation states a rate limit of 5 calls per second. What is the best practice to handle this?
Hard98A DevOps engineer is automating network configuration using REST APIs. The engineer needs to choose between NETCONF and OpenFlow as southbound protocols. Which TWO statements are correct?
Hard99A Python script using the Cisco Meraki API must update the SSID settings for a network. Which HTTP method should be used to modify an existing SSID?
Easy100In a Kubernetes deployment, the container image pull policy is set to "Always". This causes performance issues during rollouts because the image registry is slow. What is the best practice to reduce pull time while maintaining security?
Medium101A Python script using ncclient to configure a Cisco IOS XE device fails with an error that the capability 'urn:ietf:params:xml:ns:netconf:base:1.0' is missing. What is the most likely cause?
Hard102A network engineer wants to automate the configuration of multiple Cisco IOS devices using Ansible. What is the minimum requirement on the control node to execute Ansible playbooks against these devices?
Easy103A network automation engineer uses Ansible to manage a group of Cisco IOS XE devices. The playbook fails with 'unreachable' for some devices. Which TWO actions should the engineer take to troubleshoot the connectivity?
Hard104Refer to the exhibit. This JSON response was received from the Cisco DNA Center API. A developer wants to extract the software version of the first device. Which Python expression correctly retrieves '16.12.5' from the variable `data`?
Hard105Which HTTP status code indicates that a POST request successfully created a new resource?
Medium106A developer is integrating a monitoring application with Cisco Meraki API to retrieve network health data. The application needs to ensure it doesn't exceed the API rate limit of 5 requests per second. What is the best practice for handling this limitation?
Easy107An application needs to authenticate to Cisco DNA Center. Which authentication method is used?
Medium108Which DNS record type is used to map a domain name to an IPv6 address?
Medium109A DevOps team is developing a CI/CD pipeline for a microservices application that uses Cisco NSO (Network Services Orchestrator) for network configuration. The application code is stored in a Git repository. The pipeline must automatically trigger a test suite when a pull request is merged to the main branch, but only if the tests pass, then deploy to a staging environment. The team is using Jenkins. A junior engineer suggests using a single Jenkinsfile with a declarative pipeline that includes all stages. However, a senior engineer notes that the pipeline should be designed for reusability and maintainability, especially as the number of microservices grows. Which approach best meets these requirements?
Hard110Drag and drop the steps to configure OSPF on a Cisco router into the correct order.
Medium111When implementing network automation with Cisco devices, which THREE practices help ensure idempotency? (Select THREE)
Hard112Which TWO of the following are southbound protocols in SDN?
Medium113An engineer needs to automate the backup of configuration files from multiple Cisco IOS devices to a central server. Which protocol is most appropriate for pushing configurations from the devices to the server?
Easy114What is the output of the following code? my_list = [1, 2, 3] for i in range(len(my_list)): my_list[i] += 1 print(my_list)
Easy115The exhibit shows a JSON response from a Cisco NX-OS API query for interface status. What is the operational state of interface Ethernet1/1?
Easy116A Docker container running a web application needs to be accessible on the host's port 8080. The application inside the container listens on port 80. Which docker run command achieves this?
Medium117Which of the following is a best practice for version controlling large binary files (e.g., network device firmware images) in a Git repository?
Medium118A network engineer is designing a data center network with leaf-spine topology. The requirement is to minimize latency and maximize bandwidth for east-west traffic. Which type of links should be used between leaf and spine switches?
Medium119An engineer is configuring Cisco IOS XE for RESTCONF programmability. Which configuration is necessary to enable the RESTCONF API?
Hard120A network administrator is configuring SNMPv3 on a router for secure monitoring. Which combination of parameters is required to ensure authentication and encryption?
Medium121A network engineer wants to retrieve a list of all network devices from Cisco DNA Center using REST API. Which URL and HTTP method should be used?
Easy122In the context of microservices for network automation, which pattern ensures that each service has a separate database to avoid tight coupling?
Hard123A DevOps engineer is using the Cisco Meraki API to retrieve a list of networks. Which HTTP method should be used?
Easy124What is the primary function of a switch in a network?
Easy125A developer is automating network configuration using Cisco DNA Center. They want to deploy a configuration template to multiple devices. Which API category should they use?
Medium126Which wireless standard is commonly known as Wi-Fi 6 and operates in both 2.4 GHz and 5 GHz bands?
Easy127A developer wants to deploy a containerized application on a Cisco Container Platform (CCP) cluster. The application requires persistent storage. Which Kubernetes resource should be used to provision storage?
Medium128When making API calls to Cisco Meraki Dashboard, what header must be included for authentication?
Medium129Which TWO statements accurately describe characteristics of infrastructure as code (IaC) in network automation?
Hard130A developer wants to run a Docker container in detached mode, mapping host port 8080 to container port 80, and mounting a host directory for persistent data. Which command accomplishes this?
Medium131Which DNS record type is used to verify domain ownership for email security (SPF) and is stored as a text string?
Medium132In a Kubernetes deployment, a developer needs to expose a set of pods internally within the cluster on a stable IP address. The pods are stateless and serve HTTP traffic. Which Service type should be used?
Medium133A network engineer attempts to use RESTCONF to retrieve the running configuration of a Cisco IOS XE device. The GET request to '/restconf/data/Cisco-IOS-XE-native:native' returns a 405 Method Not Allowed error. What is the most likely cause?
Hard134A network administrator needs to verify that a switch port is configured as an access port and assigned to VLAN 30. Which command should be used on a Cisco IOS switch?
Easy135An engineer is configuring IOS XE for RESTCONF. Which YANG module must be enabled to use RESTCONF?
Medium136Which header is used to pass an API key in Meraki Dashboard API requests?
Medium137During a security audit, it is found that a microservice exposes its internal IP address in error responses. This could help attackers map the network. What is the BEST remediation?
Medium138A network administrator needs to assign IP addresses to devices on a subnet with a /25 prefix. How many usable host addresses are available?
Easy139During a network migration, an engineer needs to replace a legacy core switch with a new one without disrupting the existing STP topology. The new switch supports RSTP and will be connected via two trunk links. Which configuration should be applied to the new switch to prevent it from becoming the root bridge?
Hard140Which Cisco platform provides an Intent API for network automation, including endpoints for network-device, topology, and site hierarchy?
Medium141A developer wants to automate the configuration of multiple Cisco IOS-XE devices using Ansible. Which protocol should be used to ensure secure and idempotent configuration updates?
Easy142In the context of Cisco Webex APIs, which mechanism allows an application to receive real-time notifications when a message is created in a space?
Hard143A company uses Cisco DNA Center to manage their network. A developer wants to retrieve the overall health score of a specific site using the DNA Center REST API. Which API path should be used?
Medium144A company is deploying a new application that requires low-latency communication between servers in the same data center. The network team is designing a leaf-spine architecture. What is the primary advantage of this topology over a traditional three-tier design?
Medium145A company deploys a microservice using Kubernetes. The service must be accessible externally via a stable IP address and load-balanced across pods. Which Service type should be used?
Medium146An engineer is troubleshooting a Cisco DNA Center API call that returns a 401 error. What is the most likely cause?
Medium147In a microservices architecture, which of the following is a key characteristic compared to a monolithic architecture?
Hard148A developer is automating VLAN configuration on a Cisco switch using REST API. Which HTTP method should be used to create a new VLAN?
Easy149A Kubernetes deployment is configured with replicas: 3. During a rolling update, the deployment strategy is set to RollingUpdate with maxSurge: 1 and maxUnavailable: 0. What is the maximum number of pods that will be running during the update?
Hard150Which THREE of the following are features of HTTP/2?
Hard151In gNMI, what is the difference between dial-in and dial-out streaming?
Hard152An organization is planning to implement HTTPS for their web services. Which three statements accurately describe the HTTPS protocol? (Choose three.)
Hard153Refer to the exhibit. A router has the routing table shown. A packet arrives at GigabitEthernet0/0 with destination IP 8.8.8.8. What will the router do?
Hard154In the context of REST API design, which HTTP status code should be returned when a client sends a request that exceeds the API rate limit?
Medium155A developer is writing a Python script to interact with a Cisco device using NETCONF. Which library is most appropriate?
Medium156A company uses Cisco NSO to manage multiple network devices. They want to ensure that before deploying a configuration change, all devices are in sync with NSO's CDB. Which approach is the best practice?
Hard157What is the primary benefit of using HTTP/2 over HTTP/1.1?
Easy158Which HTTP method is used to partially update an existing resource in a RESTful API?
Easy159Which three statements about Webex API webhooks are true? (Choose three.)
Hard160Which THREE of the following are true about HTTP/2 compared to HTTP/1.1? (Select three.)
Hard161Which THREE of the following are typically included in a Cisco DevNet sandbox environment? (Choose three.)
Medium162Which TWO of the following are valid reasons to use a trunk link between two switches? (Select exactly two.)
Medium163A Python developer is working on a microservices project where one service needs to communicate with another service that exposes a GraphQL API. Which THREE statements about GraphQL compared to REST are accurate? (Choose three.)
Hard164An engineer needs to troubleshoot a RESTCONF request that returns a 409 Conflict error when trying to modify a YANG data node. What is the most likely cause?
Hard165A Python script using the ncclient library connects to a Cisco IOS-XE device to retrieve the running configuration. The script raises an exception: 'TimeoutError: Session timed out'. Which is the most likely cause?
Hard166A Python function is designed to fetch device data from multiple sources. It uses *args to accept variable number of API endpoints and **kwargs for optional parameters like timeout. Which function definition correctly implements this?
Medium167A network technician runs the command 'ping 8.8.8.8' from a workstation and receives 'Reply from 192.168.1.1: Destination host unreachable.' What does this indicate?
Easy168Which of the following is a private IPv4 address range as defined by RFC 1918?
Easy169A team is deploying a microservice that must scale independently. The service uses environment variables for configuration. Which Kubernetes resource should be used to store non-sensitive configuration data separate from the container image?
Medium170In Software-Defined Networking (SDN), which interface is used for communication between the controller and the network devices (e.g., switches) to forward traffic?
Medium171A Meraki dashboard API request to list networks returns a paginated response. The engineer notices a Link header in the response. What does this header typically contain?
Medium172A script is using the Cisco Meraki API to fetch a list of organizations. The script needs to authenticate with an API key. Where should the API key be included in the request?
Easy173A developer is using NX-API on a Cisco Nexus switch to execute CLI commands via JSON. Which endpoint and method should be used?
Hard174Which TWO of the following are characteristics of UDP compared to TCP? (Select two.)
Medium175Refer to the exhibit. A security audit requires that the container cannot run as root. Which part of the pod spec ensures this?
Medium176Given the following Python code snippet: with open('config.json', 'r') as f: data = json.load(f) print(data['interfaces'][0]['name']) What is the expected output if config.json contains {"interfaces": [{"name": "GigabitEthernet0/1"}]}?
Medium177A developer needs to create a Postman collection that uses a variable for the base URL and a token variable for authentication. The token is obtained from a login request and must be reused across requests. Where should the token variable be defined to persist across all requests in the collection?
Medium178A DevOps team manages a hybrid cloud environment with on-premises Cisco Nexus switches and AWS VPCs using Terraform. They have a configuration management tool that pushes VLAN and interface configurations to the Nexus switches. Recently, they noticed that after a Terraform run that updates the AWS VPC subnets, some on-premises switches lose connectivity to the cloud. The team suspects a mismatch between the VLAN configurations on the Nexus switches and the AWS VPC subnets. They have a centralized source of truth stored in a Git repository containing YAML files for network definitions. Which action should the team take first to resolve the issue and prevent future occurrences?
Easy179A developer is using Cisco Webex Teams REST API. Which two authentication methods are supported for bot accounts? (Choose two.)
Easy180A Python script using the Cisco ACI Toolkit (aciToolkit) fails with 'LoginError: unable to login to APIC'. The APIC is reachable via HTTPS. What is the most likely cause?
Hard181A developer wants to retrieve a list of network devices from Cisco DNA Center. Which HTTP method and URL structure should be used?
Easy182A developer is using the Meraki Dashboard API to list the organizations accessible by the API key. They send a GET request to https://api.meraki.com/api/v1/organizations. What is the correct way to pass the API key?
Medium183Which TWO of the following are commonly used HTTP methods for a RESTful API to retrieve and update a resource? (Select TWO)
Medium184A network engineer is designing a subnet that needs to support 30 usable hosts. Which subnet mask should be used?
Medium185A developer is building an integration with Cisco Webex and needs to retrieve information about the authenticated user. Which TWO APIs can be used? (Choose two.)
Medium186In a Kubernetes cluster, you need to store non-sensitive configuration data (e.g., database hostname) that can be consumed by pods as environment variables. Which resource should you use?
Hard187In a microservices architecture, a REST API must support idempotent updates. Which HTTP method and design practice should be used?
Hard188A developer uses Cisco Intersight API to manage UCS servers. Which authentication method is required for Intersight API calls?
Easy189A developer is building an integration with Cisco Meraki and needs to handle rate limiting. Which two responses indicate rate limiting and how should they be handled? (Choose two.)
Medium190Which TWO of the following are commonly used protocols for network automation?
Easy191A YANG module defines a leaf named 'bandwidth' of type 'uint32'. What does this represent in the context of a network device?
Easy192Which YANG model is commonly used as an open standard for interface configuration and is supported by many vendors?
Easy193A network engineer is automating the deployment of VLANs across multiple switches using Ansible. The playbook fails with an error indicating that the VLAN ID already exists on one of the switches. Which approach should the engineer use to ensure the playbook completes without errors?
Medium194In version control with Git, which command creates a new branch and switches to it in one step?
Medium195A developer is using Postman to test a Cisco Webex API that creates a room. After running the request, they want to verify that the response status is 200 and that the response body contains a non-null 'id' field. Which Postman test code accomplishes this?
Hard196Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required, such as a backend service calling Cisco API?
Medium197A developer wants to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint should they use?
Easy198During an automation script run, a network device returns HTTP 429. What does this indicate?
Medium199Which TWO statements about Dockerfile best practices are correct? (Choose two.)
Medium200A network administrator is configuring subnetting for a new branch office that requires 50 usable host addresses per subnet. The available network is 192.168.10.0/24. What subnet mask should be used to meet the requirement with minimal waste?
Medium201A Python script sends a PUT request to update a resource. The API returns a response with status code 204. What does this indicate?
Medium202An application sends a packet with destination IP 10.0.0.10. The sending host's routing table has a default gateway of 10.0.0.1. The host's ARP cache is empty. What is the next step after the host determines the packet should go to the default gateway?
Hard203Which Cisco product provides end-to-end application visibility and performance monitoring across hybrid cloud environments?
Easy204Which THREE of the following are characteristics of NETCONF? (Select THREE)
Hard205A developer is making a GET request to a REST API and needs to specify that the response should be in JSON format. Which HTTP header should be set?
Easy206Which THREE of the following are common steps in a CI/CD pipeline for a Python application that manages Cisco devices?
Medium207A CI/CD pipeline for a Python project should run unit tests and check for known vulnerabilities in dependencies. Which tool can be integrated into the pipeline to perform dependency scanning?
Medium208A network administrator uses the Cisco IOS XE CLI to configure a router. They want to use a Python script to automate this configuration via the guest shell. Which library should they use to interact with the CLI from within the guest shell?
Medium209Which THREE of the following are best practices when using Git for a collaborative project? (Choose three.)
Hard210Refer to the exhibit. An Ansible playbook targeting a Cisco IOS device fails with this error. What is the most likely cause?
Easy211A developer is working with the Meraki Dashboard API to manage SSIDs. Which TWO statements about pagination are correct? (Choose two.)
Medium212Which THREE of the following are layers in the OSI model? (Select exactly three.)
Easy213A developer is writing a Python script using the Cisco Webex Teams API to send a message to a specific room. The script works for some rooms but fails for others with a 404 error. What is the most likely reason?
Hard214Given the JSON string: '{"name": "Alice", "scores": [90, 85, 92]}', which Python code correctly extracts the second score (85)?
Medium215An application exposes a REST API. To ensure that only authorized clients can access the API, the developer implements token-based authentication. Which HTTP header is typically used to transmit the bearer token?
Easy216At which layer of the OSI model do switches operate when forwarding frames based on MAC addresses?
Easy217A developer creates a Dockerfile for a Python web application. Which instruction should be used to define the working directory inside the container for subsequent commands?
Easy218Which TWO of the following are common methods for authenticating to Cisco REST APIs? (Choose two.)
Easy219Which TCP flag is set in the second step of the three-way handshake?
Medium220A developer is building a chatbot that retrieves interface status from a Cisco Catalyst 9000 switch using RESTCONF. Which authentication method is most appropriate for programmatic access?
Medium221A developer is working with a REST API that uses HTTP Basic Authentication. The developer needs to send a request with the username 'admin' and password 'secret'. Which HTTP header should be set?
Easy222Which TWO conditions are valid triggers for a webhook notification in Cisco Meraki?
Easy223A developer is using gRPC/gNMI for model-driven telemetry from a Cisco device. Which of the following best describes the difference between dial-in and dial-out streaming?
Medium224A developer is building a Cisco Webex bot that needs to automatically respond to messages. Which THREE resources/endpoints are essential for this functionality? (Choose three.)
Hard225Refer to the exhibit. A Python script using RESTCONF sends a GET request to retrieve the interface configuration. The response is shown. What is the VLAN assigned to GigabitEthernet1/0/1?
Medium226In a Cisco DNA Center environment, an application needs to retrieve the network device list using REST API. Which authentication method is required?
Medium227Which Cisco platform provides a cloud-managed dashboard with a REST API that uses an API key in the header and has a rate limit of 5 requests per second?
Easy228An organization has a web server that needs to be reachable via both 'www.example.com' and 'example.com'. Which DNS record type should be used to make 'example.com' an alias for 'www.example.com'?
Medium229An engineer notices that a switch port configured as an access port in VLAN 10 is not forwarding traffic. The switch shows the port is up/up. What is the most likely cause?
Easy230During a CI/CD pipeline for network changes, a Jenkins job runs an Ansible playbook that applies configuration to a device. The playbook fails with a timeout error. What is the most likely cause?
Medium231Which TWO of the following Git commands modify the commit history? (Select TWO)
Hard232Which HTTP header is used to specify the format of the request body (e.g., application/json) when sending a POST request to a REST API?
Medium233Which THREE of the following are constraints of the REST architectural style (as defined by Roy Fielding)?
Hard234A web application uses HTTPS to secure communications between client and server. What does HTTPS add on top of HTTP to provide encryption and authentication?
Easy235A developer is implementing gRPC telemetry with dial-out streaming from a Cisco IOS XE device. Which component initiates the TCP connection to the collector?
Hard236Which TWO Cisco platforms provide comprehensive REST APIs for network configuration and monitoring?
Easy237Which Docker command is used to build an image from a Dockerfile?
Easy238A company has two Cisco Catalyst switches, SW1 and SW2, connected via a trunk link using port GigabitEthernet0/1 on both switches. SW1 is the root bridge for all VLANs spanning tree. VLAN 10 users on SW1 report they can access the internet and resources in VLAN 10 on SW2, but cannot reach a critical server in VLAN 20 connected to SW2. The server in VLAN 20 has a static IP address and can communicate with other VLAN 20 devices on SW2. SW2's configuration for the trunk port includes 'switchport trunk allowed vlan 10,20'. SW1's trunk port configuration is 'switchport trunk allowed vlan 10'. The network administrator has verified that both switches have VLANs 10 and 20 created and that the default gateways are correct. What is the most likely cause of the issue?
Easy239A DevOps team is automating network configuration using Ansible. They want to push a new VLAN configuration to a switch but ensure that only one switch is updated at a time to avoid network disruption. Which Ansible strategy or feature should they use?
Hard240In a Kubernetes cluster, you need to expose a set of pods running a web application to external traffic on a specific port. Which Service type should you use to provide a stable external IP address?
Hard241A developer calls Cisco DNA Center API to get device details and receives the JSON response shown. The device 'Switch-A' is listed but the status is 'unreachable'. Which Cisco DNA Center API endpoint was most likely used?
Medium242A Python function is defined as: def process(*args, **kwargs): return sum(args) + kwargs.get('offset', 0) What is the result of process(1, 2, 3, offset=10)?
Medium243Which TWO functions are performed by the data plane in a network device? (Choose two.)
Easy244Which HTTP status code indicates that a POST request successfully created a new resource on the server?
Medium245A DevOps team is deploying a microservices application that requires both reliable data transfer and low-latency real-time communication. Which two protocols should be used for these respective requirements? (Choose two.)
Easy246A company runs a microservices application on a Kubernetes cluster with 10 worker nodes. The application consists of 3 services: frontend, backend, and database. The database service is stateful and uses persistent volumes. Recently, the operations team noticed that the backend service is experiencing intermittent failures with 'Connection refused' errors when trying to connect to the database. The database service is exposed via a ClusterIP service named 'database-service'. The backend service uses environment variable DB_HOST=database-service to connect. The pod logs show that the connection is attempted to an IP address that does not correspond to any database pod. Further investigation reveals that the database pod has been restarted multiple times due to OOMKilled errors. The backend service is configured with a liveness probe that checks the health endpoint every 10 seconds, and a readiness probe that checks the same endpoint every 5 seconds. The database pod has resource limits set to 512Mi memory and 500m CPU. The node running the database pod has 4Gi memory and 2 CPU cores. What is the most likely cause of the intermittent connection failures?
Hard247A Kubernetes administrator wants to use kubectl to troubleshoot a pod named 'my-pod' that is not starting. Which TWO commands are useful? (Choose two.)
Hard248Which protocol is commonly used to retrieve real-time telemetry data from network devices in a streaming fashion?
Easy249A network administrator is planning to use model-driven programmability on Cisco IOS XE devices. Which TWO are valid YANG model sources for configuration? (Choose two.)
Medium250A developer is using Git for a project with a feature branch strategy. They have completed work on a new feature in the branch 'feature-logging' and want to integrate it into the main development branch 'develop'. The team requires that all commits on the feature branch be squashed into a single commit before merging. Which sequence of Git commands achieves this?
Hard251A network engineer is automating the deployment of a new VLAN across multiple Cisco switches using Ansible. The engineer has written a playbook that uses the ios_vlan module to create VLAN 100 with name 'Users'. The playbook runs successfully on the first switch but fails on the second switch with the error message: 'VLAN name is already in use'. The engineer checks the second switch and confirms that VLAN 100 does not exist, but a different VLAN with the name 'Users' exists. The engineer wants to ensure that the playbook creates VLAN 100 with the exact name 'Users' only if it does not already exist, and without conflicting with existing VLANs. Which approach should the engineer take?
Medium252A developer is writing a Python script to iterate over a list of server hostnames. Which loop structure is most appropriate to process each hostname in the list?
Easy253Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)
Hard254Refer to the exhibit. A developer sent a POST request to https://apic-ip/api/mo/uni/tn-testtenant.json with a JSON body missing the name attribute. What should the correct JSON body include?
Medium255A Python script uses a list comprehension: [x**2 for x in range(20) if x % 2 == 0]. Which of the following is equivalent?
Hard256When using the Meraki Dashboard API, what HTTP header is used to pass the API key?
Easy257A NETCONF RPC reply indicates a validation failure. Based on the exhibit, what is the most probable reason for the failure?
Medium258A developer wants to use the Cisco Webex API to send a message to a specific person by email. Which parameter should be used in the POST /v1/messages request?
Medium259Which of the following is a private IPv4 address range as defined by RFC 1918?
Easy260An automation script uses the Cisco IOS XE REST API to modify the running configuration. The script sends a PUT request to /restconf/data/Cisco-IOS-XE-native:native/interface/GigabitEthernet=1/0/1/ip/address. The response returns 405 Method Not Allowed. What is the most likely reason?
Hard261Which TWO methods are commonly used to discover network devices in an automation environment? (Select exactly 2.)
Medium262A network engineer is writing a Python script to interact with Cisco DNA Center. After successfully authenticating and receiving a token, what header must be included in subsequent API requests?
Easy263During a code review, a developer notices that a function has multiple nested if-else statements. Which refactoring technique would improve maintainability?
Hard264A Kubernetes pod runs two containers that need to share a filesystem. Which volume type should be used to enable file sharing between the containers within the same pod?
Medium265A network administrator is tasked with automating the deployment of a new VLAN configuration across a fabric of Cisco ACI switches. Which automation tool is best suited for interacting with the APIC REST API?
Medium266Which TWO statements about REST API design best practices are correct?
Hard267Which Cisco DNA Center API is used to retrieve a list of network devices?
Easy268Which THREE of the following are characteristics of the UDP protocol?
Medium269Which layer of the OSI model uses MAC addresses to deliver frames within the same network segment?
Easy270What is the default transport protocol for NETCONF sessions?
Easy271A developer is writing a web application and needs to prevent SQL injection attacks. Which coding practice is most effective?
Medium272Which THREE of the following are key characteristics of a RESTful API? (Choose three.)
Medium273A Python script sends a POST request to create a new network device resource. The API returns HTTP status code 201 and a JSON response with the device ID. How should the script correctly extract the device ID from the response?
Medium274Which non-overlapping channels are available in the 2.4 GHz band for Wi-Fi to minimize interference?
Easy275Which THREE of the following are valid NETCONF operations? (Choose three.)
Hard276A Python script uses the Cisco Meraki API to create a new network and then immediately attempts to configure an SSID on that network. The SSID creation fails with a 400 error indicating 'network is not ready'. What is the most likely cause?
Hard277During a migration from legacy to SD-Access, a network team wants to use Cisco DNA Center to automate policy deployment. They have defined a macro-level intent but need to ensure that the fabric devices are correctly configured. Which API call should they use to validate the fabric configuration?
Hard278A Python script using the Cisco Meraki SDK fails with 'APIError: 429 Too Many Requests'. What action should the developer take?
Easy279Which IP address is a valid host address in the 192.168.1.0/24 network?
Medium280A software-defined networking (SDN) controller is being deployed to manage network devices. Which two components are part of the SDN architecture? (Choose two.)
Medium281A company uses GitHub Actions for CI/CD. They want to automatically scan dependencies for known vulnerabilities on every push. Which action should be added to the workflow?
Hard282Which three statements are true about the Cisco Catalyst Center (formerly DNA Center) intent API? (Choose three.)
Hard283A developer is configuring a RESTCONF request to retrieve the configuration of an interface on a Cisco device. Which URL path and Content-Type header are correct?
Hard284A developer is working on a Python script that performs CRUD operations on devices via a REST API. Which HTTP method should be used to update an existing device's configuration partially?
Easy285An administrator wants to retrieve a list of all network devices from Cisco DNA Center using the REST API. Which authentication method must be used first to obtain a token?
Easy286Which TWO statements about VLAN trunking are true?
Medium287Which pagination method uses a 'Link' header with 'rel="next"' to indicate the next page of results?
Medium288A DevOps team is deploying a containerized application across multiple hosts. They need to ensure that traffic between containers on the same host is isolated from other tenants. Which network implementation best meets this requirement?
Hard289Which TWO tools are commonly used for automated network compliance checking against a desired state? (Select two)
Medium290Refer to the exhibit. A developer sends a PUT request to the RESTCONF endpoint with the above JSON payload. The device already has interface GigabitEthernet1/0/1 configured with IP address 10.10.10.1/24. What is the expected outcome?
Hard291An administrator wants to retrieve a list of all network devices from Cisco DNA Center using the REST API. Which authentication method is required to obtain the API token?
Easy292A network administrator is asked to reduce the size of the routing table on a core router. The router currently has many /24 routes learned via BGP. Which technique will most effectively reduce the number of routes without losing reachability to all subnets?
Medium293An application running on Kubernetes is experiencing intermittent 503 errors. The logs show 'upstream timed out'. The application is behind a Cisco Application Policy Infrastructure Controller (APIC) load balancer. What is the most likely cause?
Hard294Which TWO are valid capabilities advertised during a NETCONF session?
Easy295Refer to the exhibit. A Meraki network has a group policy 'Block Social Media' that references a content filtering rule. The policy is applied to VLAN 1. Users in that VLAN cannot access instagram.com but can access facebook.com. What is the most likely reason?
Hard296A CI/CD pipeline is configured to build a Docker image, run unit tests, and push the image to a registry. To ensure that only successfully tested images are pushed, which stage order is correct?
Hard297A developer needs to parse a JSON string received from a REST API into a Python dictionary. Which function should they use?
Medium298What does the Link header in a paginated API response typically contain?
Easy299A developer is troubleshooting an API call to Cisco SD-WAN vManage. The request fails with HTTP 400 status and the response body: '{"error": "Bad Request", "details": "Invalid JSON: unexpected token at position 42"}'. Which tool or technique should the developer use to quickly identify the syntax error?
Hard300A developer wants to get the current user's information from the Webex API. Which endpoint should they use?
Easy301A developer needs to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint and HTTP method should be used?
Easy302A large enterprise uses Cisco Meraki for their wireless and switching infrastructure. The network team has developed a Python script that uses the Meraki API to automatically update SSID configurations across all networks. The script has been running successfully for months, performing daily updates to SSID settings such as names, passwords, and VLAN assignments. Recently, the script started failing with the following error message: '{"errors":["This operation is not allowed for this network"]}'. The team has verified the following: the API key is still valid and has access to the full organization, the network IDs used in the script are correct and the networks are active, and no changes have been made to the script code. The script uses the PUT endpoint '/networks/{networkId}/wireless/ssids/{number}' to update SSIDs. What is the most likely cause of the failure?
Hard303When designing a RESTful API for a network automation tool, which status code indicates that a resource has been created successfully?
Easy304Refer to the exhibit. During a rolling update, a developer notices that the new pods are not passing the readiness probe and the update stalls. What is the most likely reason?
Medium305A web application is vulnerable to SQL injection. Which secure coding practice should the developer implement in the code to prevent this?
Medium306A network engineer is subnetting the network 192.168.1.0/24 into subnets that each support at least 50 hosts. What subnet mask should be used?
Hard307Which THREE of the following are best practices for writing Ansible playbooks for network automation? (Select exactly 3.)
Hard308An application running in a Kubernetes pod needs to access an external database securely. The database credentials are rotated every 24 hours. Which approach ensures that the pod always uses the current credentials without manual intervention?
Hard309A REST API uses offset and limit parameters for pagination. If the first request returns items 0-49 with limit=50 and offset=0, how should the next request be constructed to get the next page?
Medium310Which Docker networking mode provides the most isolation by not connecting the container to any network?
Easy311A Python script uses a try/except block to handle API errors. If the API returns a 429 status code, which mechanism should the script implement to handle the error appropriately?
Hard312Which TWO of the following are best practices for securely managing API tokens in a CI/CD pipeline?
Easy313An application needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should be used?
Medium314In Software-Defined Networking (SDN), the control plane is separated from the data plane. Which of the following best describes the function of the southbound API?
Hard315Which three actions can an EEM applet perform when triggered? (Choose three.)
Hard316A network engineer runs an Ansible playbook to backup a Cisco router configuration. The playbook fails with the error: 'ssh: connect to host 192.168.1.1 port 22: Connection timed out'. What is the most likely cause?
Easy317In the OSI model, which layer is responsible for session management, including establishing, maintaining, and terminating connections between applications?
Hard318A microservice application uses JWT for authentication. The JWT is signed with RS256. Which practice ensures that the public key used for verification is securely distributed to all services?
Hard319A developer has created a Webex Teams bot that listens for messages in a specific room and responds with information from an external database. The bot uses the Webex API's 'messages.create' method to post replies. During testing, the bot sometimes fails to respond, but no errors are logged. The developer checks the Webex Developer Portal and sees that the bot's rate limit is set to 10 requests per second. The bot's average load is 5 requests per second, but occasionally spikes to 15 requests per second for a few seconds. The developer wants to ensure the bot functions reliably without exceeding rate limits. Which approach should the developer implement?
Medium320A developer needs to securely store API keys for use in a CI/CD pipeline. Which best practice should be followed?
Easy321Which HTTP method is considered both safe and idempotent?
Easy322Which TWO of the following are characteristics of the YANG data modeling language that make it suitable for network automation? (Select two)
Easy323In a Postman collection, a developer stores the base URL of a Meraki API as a variable. Which Postman feature allows this?
Easy324A developer is building a dashboard that displays the health status of network devices managed by Cisco ACI. The developer uses the ACI REST API to query the APIC (Application Policy Infrastructure Controller). The developer sends a GET request to https://apic-ip/api/class/fabricHealthInst.json returns a JSON object with health scores. The dashboard works for a small set of devices, but when scaled to 500 devices, the API responses become slower and sometimes time out. The developer needs to optimize the data retrieval to keep the dashboard responsive. Which approach should the developer use?
Easy325Refer to the exhibit. What is the most effective action to eliminate both vulnerabilities in the container image?
Hard326In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?
Easy327A Kubernetes cluster runs a microservice that needs to read configuration values from a ConfigMap and sensitive database credentials from a Secret. The pod manifest references both resources. How should the Secret be mounted to avoid exposing sensitive data in logs or environment variables?
Hard328A developer has a Docker container running a database. They need to inspect the database logs to debug a connection issue. Which command will show the logs in real-time?
Hard329A developer wants to receive real-time notifications when a new message is posted in a Webex room. Which Webex API resource should they use?
Easy330A network engineer is configuring EtherChannel between two switches. The switches are connected via four links. The engineer wants to load balance traffic based on source and destination IP addresses. Which configuration command should be used on Cisco IOS?
Hard331A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. The API returns a 429 error. What should the developer do to handle this correctly?
Hard332A company uses a blue/green deployment strategy for their web application. The current live version is blue, and a new version green is ready. The load balancer currently routes all traffic to blue. What is the correct next step to switch traffic to green with minimal downtime?
Medium333Which THREE are valid ways to expose ConfigMap data to a pod in Kubernetes?
Medium334In Cisco DNA Center, which API category includes the ability to deploy a configuration template to devices?
Hard335A developer is creating a Dockerfile for a Python Flask application. The application runs on port 5000. Which directive should be used to document that the container listens on this port?
Easy336A network engineer wants to automate a configuration change on a Cisco IOS XE device when a specific syslog message appears. Which tool should they use?
Hard337A Docker container needs to be started in detached mode with port mapping from host port 8080 to container port 80. Which command accomplishes this?
Easy338A network engineer writes a Python script to handle exceptions when making REST API calls. Which exception type should be caught to handle network connectivity issues (e.g., DNS failure, refused connection)?
Medium339Which THREE options are valid methods to expose a Kubernetes service to external traffic?
Hard340A developer is writing a Dockerfile for a Node.js application. Which TWO instructions are commonly used to define the command that runs when the container starts?
Medium341A network engineer is troubleshooting connectivity issues and wants to verify the path that packets take from a source to a destination IP address. Which OSI layer is primarily responsible for packet forwarding and routing?
Easy342An organization uses Cisco DNA Center and wants to programmatically deploy a configuration template to multiple devices. Which API category should be used?
Medium343A developer wants to ensure that a Docker container running a web application can only accept incoming traffic on port 443. Which Docker run option should be used?
Easy344Which Docker command is used to view the logs of a running container in real-time?
Easy345A developer needs to send a message to a Webex room using the API. Which HTTP method and endpoint should they use?
Easy346Which THREE of the following are valid JSON data types? (Choose three.)
Medium347Which TWO practices help prevent sensitive data exposure in a CI/CD pipeline? (Select two.)
Easy348An application developer is using a protocol that does not require a connection setup and has minimal header overhead. Which transport protocol is being used?
Easy349A DevOps team is deploying a microservices application on Cisco UCS using Docker containers. They need to ensure that secrets such as database credentials are securely managed without hardcoding them in the application code or container images. Which approach should they use?
Medium350A Kubernetes Service must expose a pod running a database to other pods in the same cluster, but not externally. Which Service type should be used?
Hard351A company uses a /24 subnet for its office LAN. The network must accommodate 30 hosts per VLAN. Which subnet mask would be most efficient for each VLAN while minimizing wasted IP addresses?
Medium352Which two Meraki Dashboard API features are used to paginate through large result sets? (Choose two.)
Medium353A network engineer is configuring a new switch and needs to ensure that frames from VLAN 10 and VLAN 20 are isolated on the same trunk link to another switch. Which IEEE standard should be configured on the trunk interfaces?
Easy354Refer to the exhibit. Based on the YANG model snippet, what is the data type of the 'mask' leaf?
Hard355A network administrator is deploying a new application that requires high availability and load balancing across multiple servers. The servers are connected to a pair of switches that use StackWise virtual technology. The application team requests that the servers be configured with NIC teaming in active-active mode. Which two requirements must be met for this configuration to work correctly? (Choose two.)
Easy356In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?
Hard357A network administrator is deploying a custom container application on a Cisco Catalyst 9300 switch running IOS XE 16.12. The application is packaged as a .tar file and installed using 'app-hosting install app myapp flash:myapp.tar'. The administrator configures the app-hosting context as follows: app-hosting app myapp app-default-gateway 192.168.1.1 app-vnic gateway0 guest-interface 0 guest-ipaddress 192.168.1.10 netmask 255.255.255.0 app-resource profile custom cpu 1000 memory 2048 storage 5000 The administrator also creates a virtual port group 'vg0' and assigns it to the management interface. The application fails to start with the error: 'Application failed to start: guest interface not ready'. The administrator verifies that the .tar file is valid, the resources are sufficient, and the gateway is reachable. What is the most likely cause of the failure?
Hard358An HTTP/2 connection uses multiple concurrent streams over a single TCP connection. Which feature of HTTP/2 enables this?
Hard359A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?
Medium360Which OSI layer is responsible for routing packets across different networks?
Easy361An application uses the Meraki Dashboard API and receives a 429 Too Many Requests error. What is the most likely cause, and how should the application adjust?
Medium362Which THREE are valid methods for managing Kubernetes application configuration?
Easy363A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?
Medium364A software developer is using the Cisco Webex REST API and wants to filter messages by date range. Which two query parameters should be included? (Choose two.)
Easy365Which of the following is a private IPv4 address range as defined by RFC 1918?
Medium366Which authentication method is used by the Cisco Meraki Dashboard API?
Medium367A developer is troubleshooting a CI/CD pipeline that automatically deploys configuration changes to network devices. The pipeline includes a stage that runs Python unit tests. Which of the following would be a valid test to include in that stage to validate the configuration before deployment?
Hard368An engineer needs to identify which hosts are reachable in a 10.0.0.0/24 network using an automated script that does not require any credentials on the target devices. Which protocol is best suited for this task?
Easy369An organization uses Cisco Intersight to manage UCS servers. They want to automate the firmware upgrade process. Which Intersight API should be used to trigger a firmware upgrade on a server?
Easy370A network automation solution uses YANG data models to describe network configurations. Which THREE statements about YANG are true? (Select THREE)
Medium371A network engineer needs to allow HTTPS traffic from the internet to an internal web server. Which type of firewall rule should be applied on the perimeter firewall?
Easy372A developer runs the command: docker run -d -p 8080:80 --name web nginx. Which of the following best describes what happens?
Easy373Which header is used in an HTTP request to tell the server the format of the request body?
Easy374A company has a three-tier data center architecture with access, aggregation, and core layers. The network team is migrating to a leaf-spine architecture to support increasing east-west traffic. The current network uses STP for loop prevention, and the team wants to eliminate STP in the new design. They plan to use VXLAN overlays with BGP EVPN for control plane. During a pilot deployment, the team notices that some legacy servers that rely on traditional VLANs are not reachable across the new fabric. The servers are connected to access switches that are part of the leaf layer. The access switches are configured as VXLAN tunnel endpoints (VTEPs) but the legacy servers are still using traditional VLANs. The team needs to ensure connectivity between the legacy VLAN-based servers and the new VXLAN-based network. What is the best approach to integrate these legacy servers without changing their configuration?
Hard375A DevOps engineer is automating network device configuration using Ansible. The playbook must retrieve the MAC address table from a Cisco switch. Which protocol should the engineer use to fetch this data?
Hard376Which TWO of the following are characteristics of TLS (Transport Layer Security) used in HTTPS? (Choose two.)
Medium377A CI/CD pipeline for a microservice application includes stages: code commit, build Docker image, push to registry, deploy to staging, run integration tests, and deploy to production. The team wants to ensure that if integration tests fail, the pipeline stops and does not proceed to production. Which CI/CD concept is used to enforce this behavior?
Medium378A Kubernetes pod needs to read configuration data such as database hostname, which is non-sensitive and may change across environments. Which resource should be used to store this data and inject it into the pod?
Medium379A network administrator wants to use EEM on an IOS XE device to send a syslog message whenever a specific CLI command is entered. Which event detector should be used?
Hard380In a Docker Compose file, you want to ensure that the 'web' service starts only after the 'db' service is healthy. Which key should you use under the 'web' service?
Medium381An engineer is automating the configuration of SNMP on Cisco routers using Ansible. Which two modules are commonly used for this purpose? (Select TWO)
Easy382Which THREE are characteristics of OSPF? (Choose three.)
Medium383Which TWO commands are used to view information about Docker containers? (Select two.)
Medium384Refer to the exhibit. A Python script uses the YANG model to configure the interface. After applying this JSON payload via a PATCH request, what is the expected operational state of the interface?
Hard385Refer to the exhibit. A developer receives this response when making a POST request to the Cisco DNA Center API to create a new device. What is the most likely issue?
Hard386Refer to the exhibit. A developer is parsing the output of 'show ip route' using Python. Which regular expression would extract the prefix '10.0.1.0/24'?
Easy387Which HTTP method is used to partially update a resource in a RESTful API?
Easy388Match each YAML structure to its description.
Medium389Refer to the exhibit. A PC is connected to interface GigabitEthernet0/1 on a Cisco switch. The PC is in VLAN 10. What is the purpose of the 'spanning-tree portfast' command on this interface?
Easy390An engineer is configuring Cisco IOS XE device programmability using RESTCONF. Which THREE of the following are required to enable and use RESTCONF on the device?
Medium391You are deploying a new data center network using Cisco Nexus switches. The design uses Virtual Port Channel (vPC) to provide redundancy and increased bandwidth to servers with dual-homed NICs. The two vPC peer switches are NX1 and NX2, and they are connected via a peer-link. The servers are configured with active/standby NIC teaming. After the deployment, you notice that some ARP requests from servers are not being responded to, leading to connectivity issues. Analysis shows that when a server sends an ARP request for its default gateway (which is a virtual IP on the vPC), only one of the peer switches responds, but the response does not reach the server intermittently. The vPC is correctly configured, and the peer-gateway feature is enabled. What is the most likely cause?
Medium392A developer is using NETCONF to retrieve the running configuration of a network device. Which operation should be used?
Hard393A team uses Git for source control. They want to ensure that all code committed to the main branch passes unit tests and linting. Which Git workflow practice best ensures this?
Hard394In a CI/CD pipeline for network changes, which practice best ensures that a configuration push does not disrupt production traffic?
Hard395Match each CI/CD concept to its definition.
Medium396Which wireless security standard provides the strongest encryption and is recommended for enterprise networks as of 2023?
Hard397An administrator is configuring DNS records for a company's domain. Which three DNS record types are most commonly used to map hostnames to IP addresses or aliases? (Choose three.)
Medium398Which THREE of the following are common design patterns for microservices? (Choose three.)
Hard399In a docker-compose.yaml file, which key is used to define the container image to be built from a Dockerfile in the current directory?
Easy400A developer needs to ensure that microservice A can securely communicate with microservice B over HTTPS within a Kubernetes cluster. What is the simplest approach?
Easy401A developer is designing a microservices architecture for a network monitoring application. Which of the following is a key advantage of microservices over a monolithic architecture?
Medium402A Python script sends the above REST API request to a Cisco Catalyst 9000 switch running IOS XE. The response is a 400 Bad Request. Which field is most likely missing from the JSON payload?
Hard403Refer to the exhibit. A network engineer runs a script that queries the Cisco DNA Center site health API. The response shows Branch1 with a healthScore of 10. What is the most likely action to improve Branch1's health?
Medium404In HTTP/2, which feature allows multiple concurrent requests and responses to be interleaved on a single connection, improving performance?
Medium405Which TWO of the following are essential steps in a typical Git workflow when collaborating on a feature branch? (Choose two.)
Easy406A developer is designing an API that needs to support rate limiting per API key. The application is deployed on multiple instances. Which approach ensures consistent rate limiting across all instances?
Medium407In a Dockerfile, which instruction is used to set an environment variable that will be available at runtime?
Easy408Which TWO of the following are valid branching strategies in Git? (Choose two.)
Medium409A network administrator automates the provisioning of Meraki MX security appliances using the Meraki Dashboard API. The Python script reads a CSV file with site details and creates VLANs, firewall rules, and VPN settings. Recently, the script started throwing an HTTP 429 error. The script is single-threaded and makes fewer than 10 requests per second. Which of the following is the most likely cause of the 429 error?
Medium410A Cisco Webex bot needs to receive real-time notifications when new messages are posted in a space. Which API feature should the bot use?
Medium411A network engineer is planning to use model-driven programmability with YANG models. Which three statements about YANG models are correct?
Hard412Refer to the exhibit. The Docker image built from this Dockerfile is larger than expected. Which optimization should be recommended?
Easy413A developer needs to partially update a Meraki network's configuration, changing only the time zone. Which HTTP method should be used on the network resource?
Easy414A developer is using the NX-API on a Cisco Nexus switch to retrieve the configuration. The developer sends a POST request to /ins with a JSON payload. Which HTTP method and path are correct?
Hard415An organization uses a private Docker registry with TLS. A developer attempts to pull an image and receives the error: "x509: certificate signed by unknown authority". What is the most likely cause and solution?
Hard416A team uses GitHub for version control and wants Jenkins to automatically run tests when changes are pushed to the main branch. Which trigger should be configured in the Jenkins job?
Easy417A network automation engineer wants to retrieve a list of all network devices from Cisco DNA Center. Which HTTP method and URL path should be used with the DNAC intent API?
Easy418A DevOps engineer wants to automate the configuration of network devices using Ansible. Which file format is commonly used for Ansible playbooks?
Easy419Which of the following is a private IPv4 address range as defined by RFC 1918?
Easy420A team is designing a CI/CD pipeline that uses the Cisco ACI REST API to deploy tenant policies. Which best practice should be followed for secure credential management?
Hard421A developer is deploying a microservice to a Kubernetes cluster. The application needs to read a database password securely without hardcoding it in the image. Which Kubernetes resource should be used?
Easy422A Kubernetes Deployment manages a set of identical pods. You update the container image to a new version. The rollout gets stuck. Which kubectl command should you use to view the rollout status and determine the cause?
Hard423A developer writes a web application that accepts user input and displays it on a page. To prevent cross-site scripting (XSS), what is the most effective defense?
Medium424A developer is designing a Python script that uses the NSO (Network Services Orchestrator) northbound API. Which data format is natively supported by NSO's RESTCONF API?
Medium425A network application requires reliable, ordered delivery of data and uses a three-way handshake to establish a connection. Which transport protocol is being used?
Medium426A developer is using the Meraki Dashboard API and receives an HTTP 429 status code with a Retry-After header. What is the correct interpretation?
Hard427Which TWO of the following are features of the DNA Center 'Platform' API category?
Hard428A network administrator is troubleshooting BGP path selection for a route received from two different ISPs. The routes have the same local preference and AS-path length, but one route has a shorter MED value. Which route will be preferred?
Hard429A company is designing a new branch network. They want to segment traffic into separate broadcast domains to improve security and reduce broadcast traffic. Which technology should be used to achieve this?
Easy430A team is using Git for version control. A developer accidentally committed a sensitive file. Which Git command should be used to remove the file from the repository history while keeping it locally?
Medium431Refer to the exhibit. An engineer applied this configuration to a Cisco switch port connected to an application server. The server runs a critical business application that should not be disrupted. However, after applying the configuration, the port goes into errdisable state. What is the most likely cause?
Easy432A developer is using Git for source control. They have made changes to a file and want to temporarily save the changes without committing, then work on a different branch. Which Git command should they use?
Medium433A company is implementing an API gateway for its microservices. Which TWO security features should be enabled at the gateway to protect backend services?
Medium434Which TWO of the following are characteristics of Model-Driven Programmability with YANG models?
Medium435An engineer is tasked with automating the backup of running configurations from 50 routers. Which approach is most scalable?
Medium436A developer is deploying a containerized application using Docker Compose. Which TWO statements about Docker Compose are correct?
Medium437A developer needs to enforce HTTPS for a web application. Which security measure should be implemented in the application or reverse proxy?
Easy438A network engineer is using the Cisco DNA Center API to get site health. The API endpoint returns a large dataset with pagination. The response includes the header 'X-Page-Total-Count'. To retrieve all pages efficiently, what should the engineer implement?
Hard439Which TWO of the following Python exception handling statements are valid? (Choose two.)
Medium440A CI/CD pipeline includes stages for security scanning. Which TWO tools or services are specifically designed for dependency vulnerability scanning?
Medium441A developer is creating a REST API client that needs to authenticate using credentials passed in the HTTP header. Which header should be used?
Medium442A developer wants to use Cisco NX-API on a Nexus switch to execute a CLI command via JSON. What must be enabled on the switch first?
Medium443A junior developer is writing a Python script to gather interface statistics from a Cisco IOS-XE device using NETCONF. They use the 'ncclient' library and successfully connect. They want to retrieve the operational status of all interfaces. Which YANG model and XPATH expression should they use to get the operational data?
Easy444A network administrator is deploying a wireless network that supports the latest security standards and high throughput. Which TWO of the following are true regarding Wi-Fi 6 (802.11ax) compared to Wi-Fi 5 (802.11ac)?
Medium445An application requires reliable, ordered delivery of data. Which transport protocol should be used?
Medium446In the OAuth 2.0 authorization code flow, what does the client receive after the user grants authorization?
Medium447Which THREE practices help ensure idempotent network automation? (Select three)
Hard448An application requires reliable, ordered delivery of data with flow control and retransmission of lost segments. Which transport layer protocol should the developer choose and what is a key characteristic of this protocol?
Medium449A network engineer wants to use NETCONF to change the hostname of a Cisco device. Which operation should be used?
Medium450Refer to the exhibit. An engineer uses NETCONF to configure an interface. After applying this configuration, the interface is administratively up. However, the interface does not pass traffic. What is the most likely cause?
Easy451Which TWO are components of a REST API request? (Choose two.)
Hard452A company uses Cisco Meraki APs and an internal web application hosted on AWS. The application store customer payment data. The security team discovers that sensitive application logs are being transmitted in plaintext over the network to the SIEM. The DevOps team wants to improve security without changing the application code because it is proprietary and cannot be modified. Which solution should be recommended?
Easy453An administrator is using the Cisco Intersight API to manage server profiles. The API returns the following error: '{"error": "Forbidden", "message": "Insufficient privileges"}'. What is the most likely cause?
Easy454An automation engineer is using the Cisco DNA Center REST API to retrieve a list of network devices. The API call returns HTTP status code 200. What does this indicate?
Easy455A developer needs to retrieve the list of devices from a Meraki network using the Meraki Dashboard API. Which HTTP method and endpoint should be used?
Easy456A developer is designing a REST API that will be used by multiple client applications. The API must support versioning to ensure backward compatibility. Which approach should the developer use to implement API versioning?
Easy457You are a network automation engineer using the Cisco DNA Center REST API to retrieve health scores for all sites in your network. You call the 'GET /dna/intent/api/v1/site-health' endpoint with parameters to filter by time range. The response returns only the first 20 sites out of a total of 150 sites. You notice that the response includes a 'totalRecords' field showing 150, but only 20 objects are in the 'response' array. You recall that the API documentation mentions pagination support. To avoid manually looping through all pages, you want to implement a robust solution that efficiently retrieves all site health data. Which approach should you take?
Medium458A developer is using the ncclient library in Python to connect to a network device via NETCONF. Which operation should be used to modify the running configuration and commit the changes?
Hard459A network automation engineer is writing a Python script to configure multiple devices. Which library is most appropriate for SSH-based interactions?
Medium460An Ansible playbook fails with the error: "mapping values are not allowed here". The relevant YAML snippet is: --- - name: Configure interface ios_config: lines: - ip address 10.0.0.1 255.255.255.0 parents: interface GigabitEthernet0/1 What is the most likely cause of this error?
Medium461A system administrator wants to use the Cisco Intersight API to collect hardware inventory from a set of UCS servers managed by Intersight. The administrator needs to retrieve the serial numbers, memory, and CPU information. The administrator has an API key with the appropriate permissions. The administrator uses a Python script with the requests library to send a GET request to https://intersight.com/api/v1/compute/PhysicalSummaries. The request returns HTTP 200 with a list of objects. However, each object only contains the 'Moid' and 'Name' fields; the serial number and hardware details are missing. What should the administrator do to get the full inventory details?
Easy462Based on the exhibit, which interface is in a state that prevents it from sending or receiving IP traffic?
Medium463Which TWO of the following are characteristics of a declarative automation model? (Select exactly 2.)
Medium464Which TWO of the following are benefits of using NETCONF over SNMP for network automation? (Select exactly 2.)
Medium465An engineer needs to transfer a router configuration file to a server in the same network using a simple protocol that does not require authentication. Which protocol is best?
Medium466A Kubernetes environment has multiple teams sharing the same cluster. One team wants to deploy applications without interfering with other teams' resources. Which Kubernetes resource should be used to isolate the team's resources?
Medium467When using NETCONF to edit the configuration of a Cisco IOS XE device, an engineer receives an <rpc-error> with error-tag 'in-use' and error-app-tag 'data-exists'. What does this error indicate?
Hard468In a Docker Compose file with multiple services, one service depends on another to be healthy before starting. Which key should be used to express this dependency and ensure the dependent service is started first?
Hard469In software architecture, which pattern separates an application into three interconnected components: Model (data), View (UI), and Controller (input logic)?
Medium470A developer uses the requests library to call an API. The API returns 429 Too Many Requests. What is the best practice to handle this?
Hard471A developer is building a chat application that requires low-latency communication, and occasional packet loss is acceptable. Which transport protocol should the developer choose?
Hard472A team is deploying a new microservice on Cisco Container Platform. The microservice needs to access a database hosted on a separate VM. The security policy requires that only the microservice can communicate with the database, and all traffic must be encrypted. The team is using Kubernetes network policies and mutual TLS. During testing, the microservice cannot reach the database. The database team reports that the database is reachable from other services. What is the most likely cause?
Easy473A Python script uses the `requests` library to fetch device details from Cisco DNA Center. The API returns a JSON response with nested objects. To extract the management IP address from the response stored in variable `data`, which code snippet is correct? The JSON structure is: { "response": [ { "managementIpAddress": "192.168.1.1", "hostname": "router1" } ] }
Medium474Which HTTP method should be used to partially update an existing resource in a REST API?
Easy475A developer is using the Meraki Dashboard API and notices that some requests return a 429 status code. What is the most likely cause?
Medium476A university IT department manages a Cisco Meraki network with 200 MR access points and 50 MS switches. They use the Meraki dashboard API to automate network provisioning. A new student dormitory was added, and the team needs to create a new network and claim devices. They have a Python script that uses the Meraki API to create the network and then claim devices by serial numbers. The script successfully creates the network but fails when claiming devices with a 400 error: 'Device serial number is not valid or already claimed'. The serial numbers are correct and unused. The API key has full organization access. The script uses the endpoint 'POST /networks/{networkId}/devices/claim' with the correct body. What is the most likely cause of the failure?
Medium477A network automation team uses Ansible to manage Cisco ACI fabrics. They have a playbook that creates application profiles using the 'aci_ap' module. Recently, they started using a new Python script that directly uses the Cisco ACI REST API to perform the same tasks. The script often fails with a 403 Forbidden error, although the Ansible playbook works fine. The authentication method is the same: basic authentication over HTTPS. The API user has the same privileges. Which of the following is the most likely cause?
Hard478Which TWO of the following are valid private IPv4 address ranges? (Select two.)
Medium479When using the Cisco Meraki Dashboard API to create an HTTP webhook for network alerts, which authentication method is required in the request header?
Easy480Which design principle suggests that a module should be responsible for a single part of the functionality?
Easy481A DNS AAAA record is used to resolve a hostname to what type of address?
Medium482Refer to the exhibit. A switch has the VLAN configuration shown. If a device is connected to interface Gi0/3 and another to Gi0/5, can they communicate if the switch is not configured with any inter-VLAN routing?
Medium483A network engineer needs to create a new subnet that can support at least 50 usable host addresses for a development environment. Which TWO subnet masks would meet this requirement? (Choose two.)
Medium484Using the Cisco DNA Center API, which endpoint should be queried to retrieve the Layer 2 topology for a specific VLAN?
Easy485A developer is using a Dockerfile to build an image. The image must be based on a minimal Linux distribution to reduce attack surface. Which base image should be used?
Hard486A developer needs to update an existing resource via a REST API. The update should be partial, meaning only the fields provided in the request body should be changed. Which HTTP method should be used?
Medium487You manage a network that uses a mix of Cisco IOS and IOS-XE devices. The company wants to implement network automation using RESTCONF and YANG. You have configured RESTCONF on a branch router running IOS-XE 16.12. You can successfully retrieve the interface configuration using a GET request from a Python script. However, when you try to modify the description of an interface using a PATCH request, you receive a 405 Method Not Allowed error. The script uses basic authentication over HTTPS. The URL is correct, and the YANG data payload is valid. What is the most likely reason for the failure?
Medium488A developer wants to retrieve the current user's Webex profile information. Which API endpoint should be called?
Medium489Which THREE of the following are key principles of Infrastructure as Code (IaC) as applied to network automation?
Medium490A network engineer is troubleshooting an issue where hosts in VLAN 100 cannot reach a server at 10.1.1.100. The switch interfaces are configured as access ports in VLAN 100, and the default gateway is 10.1.1.1. The engineer checks the switch and finds that the ARP table does not contain the server's MAC address. Which two actions should the engineer take to resolve the issue? (Choose two.)
Medium491Which THREE of the following are benefits of using an SDN (Software-Defined Networking) architecture compared to traditional networking? (Choose three.)
Hard492Refer to the exhibit. An automation script expects the interface IP address to be configured via DHCP. Based on the output, what is the current configuration source for the IP address?
Medium493In a Python application that uses the ncclient library to manage Cisco devices via NETCONF, the developer encounters an error: 'ncclient.transport.errors.SessionCloseError: session closed on error'. Which of the following is the most likely cause?
Hard494Which HTTP method is idempotent and safe?
Easy495What HTTP method should be used to update only the description field of a network device resource via a REST API?
Easy496A company is implementing a secure CI/CD pipeline. Which THREE practices are essential for securing the pipeline?
Hard497During a network outage, a technician notices that hosts in VLAN 10 cannot reach the default gateway at 192.168.10.1, but hosts in VLAN 20 can. The switch interfaces are up, and the router is configured with subinterfaces. What is the most likely cause?
Medium498A developer is using the Meraki Dashboard API to list all networks in an organization. Which TWO of the following are valid methods for pagination?
Medium499Refer to the exhibit. A service engineer runs a 'check-sync' action on the NSO service 'vpn1'. The result shows 'out-of-sync' for device 'pe1'. What does this indicate?
Hard500A network engineer is designing a REST API using Python Flask to allow provisioning of VPN tunnels. The API must support multiple clients and must be secure. Which approach is most appropriate for authenticating and authorizing API requests?
Hard501A developer is using Cisco NSO to create a service. They are evaluating whether to use Python or Java for plan callbacks. Which consideration is most important?
Hard502A developer receives HTTP 409 Conflict when updating a network configuration via Cisco NX-OS API. Which two scenarios could cause this error?
Medium503A developer uses Kubernetes and wants to expose a deployment named 'web-app' externally via a cloud load balancer. Which Service type should be used?
Hard504In a Kubernetes cluster, a developer needs to ensure that a set of pods can be accessed by other pods using a stable IP address and DNS name, even if pods are recreated. Which resource should be created?
Medium505Based on the exhibit, which interface is in a down/down state (both Status and Protocol are down)?
Easy506A network automation script using NX-API on a Nexus switch fails intermittently with HTTP 500 errors. Which two troubleshooting steps are most effective in diagnosing the issue? (Choose two.)
Hard507Which TWO of the following are valid Python data types?
Easy508What is the correct Content-Type header value for a RESTCONF request using JSON encoding?
Medium509Which TWO of the following are recommended practices for securing a CI/CD pipeline in a DevOps environment? (Choose two.)
Medium510A developer is troubleshooting an HTTP API call that returns a 404 status code. Which of the following is the most likely cause?
Medium511A developer wants to run a container in the background with port mapping and a named volume. Which command accomplishes this?
Easy512A developer is implementing OAuth 2.0 for a Cisco Webex integration that needs to send messages on behalf of a user. The integration runs on a server with no user interface. Which OAuth 2.0 flow should be used?
Hard513Which Git branching strategy typically involves a long-lived 'develop' branch where feature branches are merged, and releases are created from a 'release' branch?
Medium514A network engineer is configuring a wireless network for a hospital that requires high throughput and minimal interference from neighboring networks. Which set of 2.4 GHz channels should be used for non-overlapping coverage?
Hard515A developer needs to use Postman to test an API that uses Basic authentication. How should the credentials be configured in Postman?
Hard516A developer is deploying a containerized application to a Kubernetes cluster. To ensure that the application can securely access a third-party API, what is the best practice for storing the API key?
Easy517A Kubernetes pod needs to run a database that requires persistent storage. Which volume type should be used to store data that persists beyond the pod lifecycle?
Hard518A developer is using the Cisco Webex API to send a message to a specific room. They have the room ID. Which endpoint and method should they use?
Medium519A developer is writing an application that needs to send a large amount of data reliably over a network. Which transport layer protocol should the developer use?
Medium520A developer is using Python requests library to interact with a Cisco IOS XE device's REST API. The call returns a 400 Bad Request status. The payload is correctly formatted JSON. What is the most likely cause?
Medium521A developer wants to automate the provisioning of a UCS server using Cisco Intersight. Which authentication method is recommended for programmatic access?
Hard522A network team uses an Ansible playbook to automate the configuration of multiple Cisco IOS XE devices. The playbook includes the 'ios_config' module. Which of the following best describes the purpose of the 'provider' parameter in the ios_config module?
Medium523An engineer needs to automate the deployment of a new VLAN across multiple switches. Which tool is best suited for this task?
Easy524A Kubernetes cluster is configured with a NetworkPolicy that allows ingress traffic only from pods with label 'app: frontend'. A new backend service needs to communicate with the database pod. What must be done to allow this?
Hard525Which tool is specifically designed for model-driven programmability using YANG data models?
Easy526A network engineer is troubleshooting a Kubernetes deployment where pods are failing to start with the error 'CrashLoopBackOff'. The pod log shows 'bind: address already in use'. The deployment runs multiple replicas of a container that listens on port 8080. What is the most likely cause?
Hard527A Python script reads a JSON configuration file named 'config.json' and needs to extract the value of a nested key 'api_key' under 'authentication'. The file structure is: {"authentication": {"api_key": "abc123", "method": "token"}, "timeout": 30}. Which code snippet correctly opens the file and retrieves the api_key value?
Medium528A developer needs to retrieve the current user's details from Webex API. Which endpoint should they call?
Medium529Which TWO of the following are valid methods for authenticating to a Cisco REST API? (Select two.)
Medium530A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?
Easy531Match each JSON data type to its example.
Medium532Which Meraki API response header provides information for paginating through a large result set?
Easy533A company has multiple subnets. A device in subnet 192.168.1.0/24 needs to communicate with a device in subnet 192.168.2.0/24. What is required for this communication?
Medium534An engineer is using EEM on an IOS XE device. They want to trigger an applet when a specific syslog message appears. Which event trigger type should they use?
Hard535A network automation engineer is developing a Python script that uses the NETCONF protocol to retrieve the running configuration from a Cisco IOS XE device. They use the ncclient library. The script works on the test device but fails on a production device with an error: "ncclient.transport.errors.AuthenticationError: Authentication exception". The engineer verifies that the SSH credentials (username and password) are correct and that the production device is reachable via SSH on port 830. What is the most likely issue?
Hard536A developer is designing a Python script to parse the output of 'show ip interface brief' from a Cisco IOS device. The output is stored in a string variable. The developer wants to extract only the interfaces that are up/up. The current code uses regular expressions but often fails because the interface names contain special characters (e.g., GigabitEthernet1/0/1). Which approach should the developer use to reliably parse the output?
Medium537When using RESTCONF to configure a network device, what Content-Type header should be set in the HTTP request to indicate YANG data in JSON format?
Medium538A developer is writing a Dockerfile for a Node.js application. The application uses environment variables for configuration. Which Dockerfile instruction should be used to set a default value for the NODE_ENV variable?
Medium539When using the Cisco DNA Center intent API to retrieve issues, the response includes a Link header with rel="next" and a URL. What type of pagination is this?
Medium540A developer writes a Python script using ncclient to retrieve the running configuration from a Cisco IOS XE device. The script fails with an XML parsing error. What is the most likely cause?
Medium541Which THREE of the following are valid methods to handle API rate limiting in a Python automation script? (Select exactly 3.)
Hard542Which THREE are best practices for securing a CI/CD pipeline?
Hard543A developer needs to store a database password securely in a Kubernetes cluster. Which resource should be used?
Medium544A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?
Hard545A team uses Chef to manage network device configurations. Which component of Chef is responsible for storing configuration policy and distributing it to nodes?
Medium546A network automation script uses Git for version control. The developer wants to revert the last two commits on the current branch but keep the changes in the working directory for further modification. Which TWO Git commands can achieve this? (Choose two.)
Hard547Refer to the exhibit. Which statement correctly describes this subscription configuration?
Medium548A Kubernetes pod contains two containers that need to share a local filesystem. Which volume type should be used to enable this?
Medium549Refer to the exhibit. A network engineer applies this JSON-based QoS policy to a Cisco device using NETCONF/YANG. Which statement best describes the expected behavior for traffic from 10.0.0.0/24 with DSCP EF?
Hard550At which layer of the OSI model do MAC addresses operate?
Easy551You are a DevNet engineer responsible for automating configuration management across a Cisco SD-WAN fabric. You have been using the vManage REST API to retrieve device inventory and template lists. You generate an API token with read/write scope and successfully execute GET requests to /dataservice/device and /dataservice/template/device to list devices and templates. Now you want to attach a specific template to a device using POST /dataservice/template/device/config/attach. Your Python script uses the correct URL and includes the token in the Authorization header. The request body contains the device UUID and template UUID retrieved earlier. However, the API returns an HTTP 403 Forbidden error. You have verified that the device UUID and template UUID are correct and that the template exists. The vManage server logs indicate no high resource usage. What is the most likely cause of the 403 error?
Hard552An application uses the Meraki Dashboard API to fetch the list of networks for an organization. The API response includes a Link header with rel='next' pointing to the next page. Which pagination method is the API using?
Medium553A CI/CD pipeline uses GitLab CI. The pipeline must build a Docker image and then run security scans on the image before pushing. Which GitLab CI keyword allows defining a sequence of jobs that must run in order?
Medium554A developer creates a Dockerfile for a Python web application. Which instruction should be used to copy the application source code into the container image?
Easy555Refer to the exhibit. A switch is configured with the shown trunk port. After connecting the uplink, the switch logs show repeated 'errdisable' state transitions on this port. The core switch is configured with the same allowed VLAN list. Which configuration change is most likely to resolve the issue?
Hard556What does the Git command 'git log --oneline' display?
Easy557A Kubernetes cluster has a deployment named 'frontend' that needs to be updated to a new image version. The update should be performed with zero downtime. Which three kubectl commands or approaches can achieve this? (Choose three.)
Medium558A network administrator is configuring a wireless network and wants to minimize interference. In the 2.4 GHz band, which set of channels are non-overlapping?
Hard559Which data format is most commonly used in REST API requests and responses in modern network automation?
Easy560In a Docker Compose file, a service 'web' depends on 'db'. The 'db' service uses a volume to persist data. Which compose key ensures that the database starts before the web service?
Medium561An engineer is configuring a new IPv4 subnet with the address 172.16.5.0/25. Which three statements are true about this subnet? (Choose three.)
Hard562An engineer is troubleshooting a network issue where a client cannot reach a server. The client uses HTTPS. Which TWO factors are essential for a successful TLS handshake?
Hard563A network automation engineer is using Ansible to manage Cisco IOS devices. The playbook includes a task that executes a 'show version' command and registers the output. The engineer then wants to parse the output to extract the IOS version. Which approach should be used?
Medium564Drag and drop the steps to set up a Python virtual environment for a DevNet project into the correct order.
Medium565Which TWO of the following are benefits of using UDP over TCP for real-time applications?
Medium566An automation engineer wants to programmatically retrieve the interface configuration of a Cisco Nexus switch using NX-API. Which API call method is most appropriate?
Easy567A developer needs to view the logs of a running Docker container with ID 'abc123'. Which command should be used?
Medium568A developer needs to register a Webex webhook that triggers when a new message is posted in any room the bot is a member of. Which resource and event should be specified?
Hard569A network engineer is tasked with segmenting a large broadcast domain into smaller ones using VLANs. In the OSI model, at which layer does a VLAN operate?
Hard570An application uses UDP. Which characteristic is true about this application's communication?
Medium571A developer is building a web application and wants to implement security best practices. Which TWO actions should be taken? (Choose two.)
Medium572A developer is creating an application that uses the Cisco Webex Teams API to send messages. What authentication method is typically used?
Easy573When using OAuth 2.0 client credentials flow with a Cisco API, what is the typical purpose of the access token?
Hard574A network engineer is configuring a wireless network for a new office. To maximize performance and minimize interference, the engineer decides to use the 5 GHz band. Which of the following is a key advantage of 5 GHz over 2.4 GHz?
Medium575Which IPv6 address type is equivalent to a private IPv4 address?
Easy576An automation tool uses RESTCONF to configure a Cisco device. The device returns a 404 error for a PUT request. What does this indicate?
Medium577A developer is designing a REST API that requires pagination. Which two pagination methods are commonly used? (Choose two.)
Medium578A developer is designing a system that requires high reliability and ordered data delivery. The developer chooses TCP. Which THREE features are provided by TCP?
Medium579In a Jenkins declarative pipeline, a stage named 'Deploy to Production' should only run after manual approval. Which directive should be used to achieve this?
Hard580Which THREE of the following are valid event triggers for an EEM applet on Cisco IOS XE? (Choose THREE.)
Medium581A network administrator needs to assign IP addresses to 50 hosts in a subnet. Which subnet mask provides the minimum required number of usable addresses while minimizing waste?
Easy582Which three components are required to set up a Webex webhook for message creation events? (Choose three.)
Hard583A network developer wants to quickly prototype an application that interacts with a Cisco Catalyst 9000 switch using REST APIs. What is the most appropriate resource to use?
Easy584Which THREE statements about NETCONF are correct?
Hard585A DevOps team wants to version control their network configurations. Which tool should they use?
Easy586Refer to the exhibit. What will be the result of running this Ansible playbook against the 'switches' group?
Medium587A developer needs to retrieve a list of network devices from Cisco DNA Center with pagination. Which TWO URL components are typically used for offset/limit pagination?
Medium588A network engineer wants to stream telemetry data from a Cisco router using gRPC. Which gRPC service model is typically used for the router to push data to a collector?
Hard589An engineer is troubleshooting a VoIP call quality issue. The call uses UDP and experiences packet loss. Which characteristic of UDP most likely contributes to the problem?
Medium590Which TWO of the following HTTP methods are considered safe (idempotent and not modifying server state)? (Select two.)
Easy591A Python script using the requests library to query the Cisco Meraki API returns a 403 Forbidden error. The API key is correctly set in the header. What is the most likely cause?
Medium592A network automation engineer is writing an Ansible playbook to configure interface descriptions on Cisco IOS-XE devices. The playbook uses the ios_config module. Which attribute should be used to ensure idempotency and only apply changes when the interface does not already have the desired description?
Medium593A developer is working with Meraki API to list all clients on a network. The response is paginated. Which parameter allows the developer to specify the starting point for the next page?
Hard594An engineer is troubleshooting a NETCONF session that fails to establish with a Cisco IOS XE device. The SSH connection succeeds, but NETCONF capabilities are not exchanged. What is the most likely cause?
Hard595Drag and drop the steps to use Git to commit and push code changes to a remote repository into the correct order.
Medium596An engineer is writing a Python script using the Cisco DevNet sandbox to configure OSPF on a CSR1000v via RESTCONF. What authentication method is typically used for RESTCONF requests?
Medium597What is the default rate limit for the Meraki Dashboard API?
Easy598A developer needs to retrieve interface configuration from a Cisco IOS XE device using NETCONF. Which operation should be used?
Medium599A network automation script uses the Cisco DNAC Python SDK (dnacentersdk) to retrieve devices. Which method correctly lists all devices?
Medium600A network administrator is managing a small office with 10 Cisco 9200 switches. They want to automate the deployment of a standard base configuration (VLANs, STP, management access) to all switches. They have a Linux server with Ansible installed. The administrator writes a playbook that uses the 'ios_config' module to apply configuration blocks. However, when they run the playbook against the first switch, it fails with an authentication error. The administrator can SSH to the switch manually using the same credentials. What is the most likely cause of the failure?
Easy601Refer to the exhibit. A developer builds this Docker image and runs it. The container starts but cannot be accessed on port 5000 from the host. What is the most likely cause?
Easy602A developer needs to ensure that environment variables containing database credentials are not hardcoded in the application code. Which approach is most secure for managing secrets in a CI/CD pipeline?
Medium603Which TWO of the following are valid query parameter-based pagination methods used in REST APIs? (Select two.)
Medium604A developer is using the Meraki Dashboard API and needs to handle paginated responses. Which TWO ways does Meraki indicate pagination? (Choose two.)
Medium605A developer is building a Webex Teams bot that monitors network alerts from Cisco DNA Assurance. The bot must authenticate to the Webex API. Which authentication method should be used?
Hard606A DevOps team uses Ansible to configure Cisco Nexus switches for a new data center. They have a playbook that uses the nxos_vlan module to create VLANs and nxos_interface module to assign access VLANs. The playbook runs successfully on the first Nexus switch but fails on the second with error: 'module_stderr: ntclib: error: unable to connect to switch'. Both switches are reachable via ping and SSH from the Ansible control node. The inventory file has the same SSH credentials for both switches. What is the most likely cause of the connection failure on the second switch?
Medium607When using RESTCONF on Cisco IOS XE, which URL retrieves the hostname configuration?
Medium608An engineer is using the Cisco Intersight API to manage UCS servers. The API response returns a paginated list. What is the proper way to retrieve all items?
Hard609An automation script needs to update the hostname of a Cisco IOS-XE device via RESTCONF. Which HTTP method is appropriate?
Easy610A Cisco DevNet engineer is configuring model-driven telemetry on a Cisco IOS-XE device. The telemetry subscription includes the following path: 'Cisco-IOS-XE-native:native/interface/GigabitEthernet[Name='1/0/1']/ip/address'. Which part of this path identifies a specific list instance?
Hard611A DevOps team is implementing a CI/CD pipeline for network services using Cisco NSO (Network Services Orchestrator). They have a Python script that uses the NSO RESTCONF API to create a new VPN service instance. The script passes all integration tests in the staging environment, but when deployed to production, the 'POST' request to /api/run/vpn-service returns a 500 Internal Server Error. The team checks the NSO logs and finds the error 'Error: No such device: device-xr-1'. The production NSO instance manages multiple devices, and device-xr-1 is one of them. The team confirms device-xr-1 is reachable and managed by NSO in the production environment. What is the most likely cause of this error?
Hard612Drag and drop the steps to deploy a Python script to a Cisco device via RESTCONF into the correct order.
Medium613Which THREE are common best practices for implementing CI/CD in network automation?
Medium614Which API is used to execute CLI commands on Cisco IOS XE devices using on-device programmability?
Easy615A network engineer needs to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint should they use?
Easy616A Meraki API request is receiving HTTP 429 responses. According to the Meraki rate limit, what should the developer do?
Medium617A network automation script using Ansible with the cisco.ios.ios_config module fails with "Unsupported parameters for (cisco.ios.ios_config) module: src." What is the most likely issue?
Hard618Refer to the exhibit. A developer executes this Python script against a Cisco device. Assuming valid credentials and network connectivity, what is printed to the console?
Hard619A developer is creating a Helm chart for a stateless web application. Where should the application's configuration settings (like log level and feature flags) be stored?
Easy620A network engineer runs the Ansible playbook shown in the exhibit, but it fails. The error indicates the module 'cisco.ios.ios_vlan' does not exist. What is the most likely cause?
Medium621A developer wants to send a message to a Webex room using the API. Which HTTP method and endpoint should they use?
Easy622A developer is implementing a Python function that makes an HTTP GET request to an API and returns the response time. Which code snippet correctly measures the elapsed time?
Medium623What does a TTL of 128 indicate about the destination host?
Easy624A developer writes a Python script to read a configuration file. Which code snippet correctly opens the file 'config.json' for reading and ensures the file is closed after use?
Easy625A CI/CD pipeline using GitHub Actions needs to build a Docker image and push it to Docker Hub. Which event trigger should be used to run the workflow only when code is pushed to the main branch?
Hard626Which TWO of the following are best practices when using REST APIs in Cisco networking environments?
Medium627Drag and drop the steps to troubleshoot a network connectivity issue using the OSI model from bottom to top.
Medium628Which Python list comprehension correctly creates a list of squares for even numbers from 0 to 10?
Medium629A developer is building a REST API for a Cisco DNA Center application. The API must allow external partners to retrieve network device inventory. Which security mechanism should be implemented to ensure that only authorized partners can access the API while maintaining the ability to revoke access for a specific partner without affecting others?
Medium630A developer needs to share a Docker image built from a Dockerfile with team members. Which command correctly builds the image and tags it as 'myapp:v1'?
Medium631A developer wants to send a message to a Webex room using the API. The message should contain a simple text body. Which endpoint and parameter are required?
Medium632A developer needs to authenticate to the Cisco SD-WAN vManage API. Which two steps are required to obtain a session token?
Hard633A developer wants to ensure that a containerized application restarts automatically if it exits with a non-zero code. The application is run using Docker. Which flag should be used?
Hard634A developer needs to retrieve a list of Webex teams that the authenticated user belongs to. Which HTTP request is correct?
Hard635A Cisco SD-WAN vManage API call to retrieve device inventory returns a 401 error. Which step is most likely missing?
Medium636A developer uses the Cisco DNA Center API to retrieve device inventory. The JSON response is shown. Which Python code snippet correctly extracts the serial number?
Easy637A developer is building a REST API client in Python using the requests library. They need to send a JSON payload with authentication. Which code snippet correctly sends a POST request with a JSON body and a Bearer token?
Medium638A Kubernetes Deployment is configured with rolling update strategy. A new version of the image is pushed, and the deployment is updated. During the rollout, the new pods are failing health checks. Which command can be used to pause the rollout and prevent further updates?
Hard639A developer wants to send a message to a specific room in Webex using the API. The developer already has the room ID. Which API call is correct?
Medium640Which wireless standard operates in both 2.4 GHz and 5 GHz bands and is commonly known as Wi-Fi 6?
Medium641In an SDN architecture, which layer is responsible for making decisions about where traffic should be forwarded?
Medium642A developer wants to use Cisco DNA Center to change the network configuration. Which TWO API categories provide capabilities to modify the network? (Choose two.)
Medium643Refer to the exhibit. A DevOps engineer is using NETCONF to retrieve the OSPF configuration. The <get> response is missing the network statements. What is the most likely cause?
Hard644An engineer retrieves the list of devices in a Meraki network via the Dashboard API. The API returns HTTP 200 OK with an empty array. What is the most likely reason?
Medium645A Kubernetes Deployment is updated with a new image tag, but the rollout fails. Which kubectl command should be used to view the rollout status and troubleshoot?
Medium646A developer wants to process a list of server hostnames and create a new list containing only hostnames that start with 'web'. Which Python list comprehension correctly accomplishes this?
Easy647An automation engineer is writing a Python script to interact with a REST API that requires authentication. The API returns a 403 Forbidden status. Which scenario best explains this response?
Hard648Which THREE of the following are common stages in a continuous integration pipeline? (Select THREE)
Easy649A DevOps team uses GitLab CI to deploy a containerized application to a Kubernetes cluster. The deployment pipeline fails at the 'deploy' stage with an error: 'unable to connect to server'. What is the most likely cause?
Medium650A developer is building a chatbot that needs to send a direct message to a user on Webex. Which TWO fields are required in the POST /v1/messages request? (Choose TWO.)
Hard651An engineer is troubleshooting a connectivity issue between two devices on different VLANs. The switch connecting the devices is configured with 802.1Q trunking. At which OSI layer do VLANs operate?
Medium652A developer wants to create a new room in Cisco Webex using the API. Which HTTP request is appropriate?
Medium653A large enterprise uses Cisco DNA Center to manage their campus network. They have deployed fabric technology for SD-Access. The network team wants to use the DNA Center REST API to automate the addition of new wireless users to a specific virtual network (VN) based on their location (building). They have identified the API endpoint for creating a user device in the fabric. However, when they send a POST request with the appropriate JSON body, they receive a 400 Bad Request error. The JSON payload includes the mandatory fields for hostname, MAC address, and VN name. What is the most likely cause of the error?
Medium654Which Cisco platform provides a cloud-managed networking solution with a RESTful API that uses an API key in the X-Cisco-Meraki-API-Key header?
Easy655A network automation engineer is using the Cisco DNA Center intent API to retrieve a list of network devices. Which API endpoint should be used?
Medium656A developer is designing a Cisco Catalyst Center integration that uses the intent API. Which THREE of the following are available via the intent API? (Select three.)
Hard657Based on the routing table, what is the administrative distance of the route to 192.168.1.0/24?
Medium658A developer is working with the Webex API to receive real-time notifications when a message is posted. Which resource should they create?
Hard659Drag and drop the steps to configure a new VLAN on a Cisco switch into the correct order.
Medium660Which THREE of the following are valid methods to automatically assign IP addresses to network hosts?
Hard661An administrator wants to receive real-time notifications when a new message is posted to a Webex room. Which Webex API resource should be used to configure this?
Medium662Which of the following is a private IPv4 address range as defined by RFC 1918?
Medium663A network administrator wants to use Ansible to automate the configuration of a Cisco IOS-XE device. Which module is designed for this purpose?
Medium664In DNA Center, which API category is used to deploy templates to devices?
Easy665An automation engineer runs a Python script using the Cisco NXOS NX-API to retrieve the interface configuration. The JSON response shows the 'switchport access vlan' as '10'. However, VLAN 10 does not exist in the VLAN database. What is the expected behavior of the switch regarding this interface?
Medium666Which TWO of the following are common causes of VLAN connectivity issues?
Medium667A developer is writing a Dockerfile for a Node.js application. They want to set a build-time variable for the application version that can be changed without modifying the Dockerfile. Which instruction should be used?
Medium668Which TWO of the following are valid branching strategies in Git? (Choose two.)
Medium669An engineer uses Ansible to push a configuration change to 100 switches. The playbook fails on 5 switches. What is the most efficient way to apply the change only to those 5?
Hard670Which three HTTP methods are used for CRUD operations in REST APIs? (Choose three.)
Medium671An engineer is developing an EEM applet on a Cisco IOS XE device to run a CLI command when a specific syslog message appears. Which event trigger should be used?
Hard672A developer notices that after a new deployment, the application is not receiving traffic. The Service selector does not match the pod labels. Which kubectl command can be used to inspect the Service's selector?
Hard673A financial services company deploys a multi-tier application on Cisco UCS with separate VMs for web, app, and database tiers. The security team runs a vulnerability scan and finds that the web server is vulnerable to SQL injection. The development team cannot fix the code immediately because of a pending third-party library update. The company needs to deploy a security control to mitigate the vulnerability as soon as possible without changing the application. Which of the following is the best immediate mitigation?
Hard674In a RESTCONF API call to retrieve a specific interface configuration on a Cisco device, an engineer sends a GET request to /restconf/data/interfaces/interface=GigabitEthernet0/1. What Content-Type should be specified in the Accept header to receive YANG-defined JSON?
Hard675Which TWO HTTP methods are considered safe according to HTTP/1.1 specification?
Easy676Refer to the exhibit. A developer is writing an Ansible playbook to configure this interface on a Cisco IOS XE device. Which Ansible module should be used to set the IP address?
Medium677A network engineer is configuring a Cisco switch to support LLDP-MED for VoIP phones. Which command is required to enable LLDP globally on the switch?
Hard678A developer is designing a REST API for managing network devices. The API should support idempotent operations for updating device configuration. Which HTTP method should be used for the update operation?
Medium679When using the Meraki Dashboard API, how should the API key be included in a request?
Medium680An application uses NETCONF to configure a Cisco device. It sends an <edit-config> operation with the target 'running' and the operation 'merge'. Which statement about this operation is correct?
Hard681When using gRPC/gNMI for model-driven telemetry, which mode allows the network device to push telemetry data to a collector without the collector initiating the connection?
Hard682Which tool is designed for infrastructure as code, uses a declarative language, and can automate configuration management across multiple devices?
Easy683A network engineer is troubleshooting slow connectivity between two sites connected via a WAN link. The engineer suspects packet loss due to collisions. Which interface counter should be examined to confirm this?
Medium684A team uses a Jenkins declarative pipeline to deploy a microservice. The pipeline includes stages: Checkout, Build Docker Image, Run Unit Tests, Push to Registry, Deploy to Staging, and Deploy to Production. Which stage should run immediately after 'Build Docker Image' to ensure code quality before the image is pushed?
Medium685A developer is using the Cisco Webex Teams API to create a room and add members. The API returns a 400 error. What is the most likely cause?
Medium686An engineer needs to automate the deployment of VLAN configurations on a fleet of Cisco Catalyst 9000 switches running IOS-XE. The team uses Ansible Tower for automation. Which Ansible module should be used to push VLAN configuration idempotently?
Medium687Which DNS record type is used to verify domain ownership for email security (SPF)?
Medium688A developer is designing a microservices-based network management system. One requirement is that when a new device is discovered, multiple other services must be notified asynchronously to perform tasks like inventory update, monitoring setup, and log collection. Which architectural pattern best fits this requirement?
Hard689Which THREE of the following are characteristics of GraphQL compared to REST? (Choose three.)
Hard690In a wireless network using 802.11ac, which frequency band does the standard primarily operate in to achieve higher throughput?
Hard691Which transport layer protocol is used by HTTP and guarantees reliable delivery?
Easy692A network engineer is using Cisco IOS XE RESTCONF to retrieve the hostname of a device. The YANG module used is 'Cisco-IOS-XE-native'. Which URL path is correct?
Hard693A network engineer wants to use model-driven programmability on IOS XE devices. Which two YANG model types are commonly used? (Choose two.)
Hard694When using the Cisco DNA Center API, which three steps are typically involved in making a successful API call? (Choose three.)
Medium695A network developer is using Cisco NSO to manage multi-vendor devices. Which three are valid approaches to handle device-specific differences? (Choose three.)
Hard696A developer is using the Cisco DNA Center API and receives a token. How is this token typically used in subsequent API requests?
Medium697You are writing a Dockerfile. Which instruction should you use to set the working directory for subsequent RUN, CMD, ENTRYPOINT, COPY, and ADD instructions?
Easy698A developer wants to retrieve the list of network devices from Cisco DNA Center. Which API endpoint should be used?
Easy699A network engineer is automating the deployment of new branch offices using Cisco DNA Center REST API. The script creates a new site under a parent site using the POST /dna/intent/api/v1/site API endpoint. The script runs successfully but when checking the DNA Center UI, the new site appears under the incorrect parent site. The script uses the following JSON payload: { "parentId": "0a1b2c3d-4e5f-6789-0ab1-2c3d4e5f6789", "name": "Branch-Office-42", "type": "area", "latitude": 34.0522, "longitude": -118.2437 } The parentId is obtained from a GET request to /dna/intent/api/v1/site that returns a list of all sites. The engineer verified that the parentId matches the UUID of a site named 'HQ', which the engineer believes is an area. However, 'HQ' is actually a building site. The engineer is not aware that the site type is different because the GET response does not display the type field prominently. What is the most likely cause of the new site being placed under the wrong parent?
Hard700Which DNS record type is used to map a domain name to an IPv6 address?
Easy701When making API calls to Cisco DNA Center, a developer receives a 401 Unauthorized error. The token was obtained using the token API endpoint. What is the most likely reason?
Medium702Which TWO actions are best practices for managing secrets in a CI/CD pipeline?
Medium703A developer is implementing error handling in a script that makes multiple API calls to Cisco ACI. Which approach is best practice for handling transient network failures?
Medium704Which TWO are benefits of using model-driven programmability (e.g., NETCONF/RESTCONF) over traditional CLI scripting for network automation?
Medium705Which command enables the NX-API feature on a Cisco NX-OS device?
Medium706A team is implementing a CI/CD pipeline using Jenkins. The pipeline must build a Docker image and push it to a private registry. Which Jenkins plugin is specifically designed to handle Docker builds and pushes?
Easy707A DevOps team uses a CI/CD pipeline to deploy network configurations. They want to ensure that only authorized network engineers can trigger changes to production devices. Which integration is most appropriate?
Hard708An application authenticates to Cisco Webex API using OAuth2 client credentials grant. Which three pieces of information must the application include in the token request?
Medium709Which TWO of the following are functions of the transport layer in the OSI model? (Choose two.)
Easy710A Python script uses the Cisco Meraki API to fetch the list of organizations. The script fails with a 401 HTTP status. What is the most likely cause?
Easy711A developer is using Docker Compose to run a multi-service application. Which THREE keys are valid top-level keys in a docker-compose.yml file? (Choose three.)
Medium712A developer is writing a Python script to interact with a REST API. The API requires a JSON payload to create a new resource. Which HTTP method should be used?
Medium713A developer needs to read a JSON configuration file and parse it into a Python dictionary. The file contains nested objects. Which code snippet correctly accomplishes this?
Medium714A company uses a CI/CD pipeline to deploy network configurations. The pipeline includes a stage that runs automated tests against a simulated network environment. Which testing strategy does this represent?
Medium715An organization uses Ansible for configuration management and wants to secure the automation secrets (e.g., SSH keys, API tokens). The secrets are currently stored in plaintext in inventory files. The security team requires that secrets be encrypted at rest and decrypted only at runtime by authorized users. Which solution should be implemented?
Easy716A developer is designing a REST API for a network automation tool. Which HTTP method should be used to retrieve the current configuration of a network device?
Easy717A network automation engineer is using a Python script with the requests library to configure VLAN 100 on a Cisco Catalyst 9300 switch via the REST API. The script sends a PUT request to https://switch-ip/restconf/data/Cisco-IOS-XE-native:native/vlan. The response returns a 201 Created, but subsequent checks show VLAN 100 is not present in the running configuration. The switch's management interface is in VLAN 99 with IP 10.10.99.10/24, and the engineer's workstation is on a different subnet (10.10.88.0/24). The switch has the following relevant configuration: ip default-gateway 10.10.99.1, and a route for 10.10.88.0/24 via 10.10.99.1. The engineer also verified that the REST API credentials are correct and that the switch's HTTP server is enabled. Which action should the engineer take to resolve the issue?
Hard718You are a network automation engineer at a large enterprise. The network consists of 200 Cisco Catalyst switches distributed across five data centers. Each switch runs IOS-XE and supports NETCONF. Your team uses a centralized Ansible control node to manage configurations. Recently, the security team mandated that all management access must use SSH keys instead of passwords. You updated the Ansible inventory to use SSH keys and tested on a few switches successfully. However, when you run the playbook against all switches, about 30 switches fail with the error: 'Authentication failed.' You verify that the SSH public key is correctly deployed on those switches via the console. What is the most likely cause of the failure?
Hard719A developer is using the Meraki Dashboard API to list all networks in an organization. The response includes a Link header with rel="next". What does this indicate?
Medium720Which TWO of the following are true about NETCONF capabilities as defined in RFC 6241?
Hard721A developer needs to apply a Kubernetes deployment manifest from a file named 'deployment.yaml'. Which kubectl command should be used?
Medium722In Postman, what feature allows you to reuse a value like a base URL or token across multiple requests?
Easy723In Python, which keyword is used to define a function that does not return any value?
Easy724A junior network developer is tasked with writing a Python script that uses the Cisco NX-API to retrieve the current VLAN configuration from a Nexus switch. The script should output the VLAN IDs in a JSON format. The developer wrote the following code: import requests import json url = "https://192.168.1.1/api/aaaLogin.json" payload = {"aaaUser":{"attributes":{"name":"admin","pwd":"cisco123"}}} r = requests.post(url, json=payload, verify=False) token = r.json()["imdata"][0]["aaaLogin"]["attributes"]["token"] After authentication, the developer attempts to get VLANs using a GET request to "https://192.168.1.1/api/mo/sys/vlan.json" but receives a 401 error. Which of the following should the developer do to fix the issue?
Medium725An organization implements zero-touch provisioning (ZTP) for new Cisco routers using DHCP and TFTP. The provision script is not being executed even though the device obtains an IP address. The DHCP server logs show the option 67 (bootfile-name) and option 150 (tftp-server) are set. What is the most probable reason?
Hard726A developer commits code to a GitHub repository and wants automated tests to run, followed by building a Docker image and pushing it to Docker Hub only if tests pass. Which CI/CD tool can be configured using a YAML file placed in the .github/workflows directory?
Medium727Which TWO statements about Cisco Meraki API pagination are correct? (Choose two.)
Medium728An automation script using Ansible tries to configure IP address 192.168.1.2 on GigabitEthernet0/1. After running, the interface remains administratively down. What is the first thing to check?
Easy729A developer needs to run a temporary container that executes a command and then exits. Which Docker command should be used?
Medium730Refer to the exhibit. Which key-value pair indicates whether this Meraki MR is currently connected to the cloud?
Easy731A large enterprise uses Cisco DNA Center to manage over 500 network devices across multiple sites. The network operations team wants to automate the validation of device compliance with a baseline configuration. They have a Python script that uses the Cisco DNA Center REST API to retrieve the device configuration and compare it against a golden configuration stored in a local file. Recently, the script started failing with a 401 HTTP response code when trying to authenticate. The team confirmed the username and password are correct and that the DNA Center server is reachable. The script uses the /api/system/v1/auth/token endpoint to obtain a token. Which of the following is the most likely cause of the 401 error?
Hard732Drag and drop the steps to configure a Cisco IOS device for NETCONF access into the correct order.
Medium733A network administrator wants to use Cisco Webex APIs to automate sending messages to a specific room. Which THREE pieces of information are required to send a message using POST /v1/messages?
Easy734In Python, which data type is used to represent an unordered collection of unique elements?
Easy735In Python, which of the following is a valid way to define a function that accepts a variable number of positional arguments?
Easy736Which authentication method does Cisco DNA Center use to obtain an API token?
Easy737A developer is making requests to the Meraki Dashboard API and receives a 429 Too Many Requests response. What is the default rate limit for this API?
Medium738You are troubleshooting connectivity for a remote branch office. The branch router (BR) connects to the head office router (HQ) via a point-to-point T1 link. The HQ router is also connected to the internet via a separate interface. Users at the branch can access the internet but cannot reach servers at the head office (subnet 10.10.10.0/24). You run 'show ip route' on BR and see a default route pointing to HQ's IP address, but no specific route for 10.10.10.0/24. The HQ router has a connected route for that subnet. On HQ, you see that the interface towards BR is up/up, and you can ping the BR's interface IP. What is the most likely cause of the issue?
Easy739Match each Cisco DevNet Associate exam topic to its description.
Medium740In the Cisco DNA Center intent API, which HTTP method should be used to update a specific site's information?
Medium741Which TWO of the following are categories of Cisco DNA Center APIs? (Choose two.)
Medium742A developer needs to prevent SQL injection in a web application. Which coding practice should be used when constructing database queries?
Medium743Which TWO statements correctly describe differences between model-driven telemetry and traditional SNMP polling?
Hard744A CI/CD pipeline includes stages for code commit, build, unit test, integration test, staging deploy, and production deploy. Which change would best prevent a faulty build from reaching production?
Medium745When using the requests library in Python to send a POST request, which parameter should be used to send a JSON payload in the request body?
Easy746An application uses OAuth 2.0 for authorization. The developer receives an access token but needs to know the user's identity. Which OAuth flow should be used to also obtain an ID token that contains user claims?
Hard747A network engineer wants to retrieve a list of all network devices from Cisco DNA Center using the REST API. Which authentication method is required to obtain an access token?
Easy748Which HTTP status code indicates a successful POST request that created a resource?
Easy749An application developer is designing a microservice that communicates over HTTP. The service must guarantee that the request is processed exactly once. Which HTTP method should be used to ensure idempotency?
Medium750Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.
Medium751Which TWO are benefits of using VLANs in a network? (Choose two.)
Easy752A developer is writing a CI/CD pipeline using Jenkins Declarative Pipeline. They want to ensure that sensitive credentials (e.g., API keys) are never exposed in console logs. Which two security practices should be implemented? (Choose two.)
Hard753What is the purpose of the 'Authorization' header in a REST API request?
Easy754An engineer needs to authenticate to the Cisco DNA Center API to obtain a token. What is the correct authentication method and endpoint?
Medium755A developer is using a REST API and receives HTTP status codes. Which two codes indicate a client-side error that the developer should fix? (Choose two.)
Hard756A developer is deploying a Python web application on Cisco UCS servers using a CI/CD pipeline that runs on Jenkins. The application uses a PostgreSQL database. The security team mandates that all database credentials must be rotated every 30 days. Currently, credentials are stored as plaintext in a configuration file in the application repository. Which approach should the developer take to meet the rotation requirement without storing secrets in the repository?
Medium757A developer wants to perform a rolling update of a Kubernetes Deployment. Which command will update the image and initiate the rollout?
Medium758A developer uses RESTCONF to configure a network device. What is the correct content-type header to send in the request?
Medium759A network engineer configures an HTTP/2 server. Which feature of HTTP/2 reduces overhead by compressing headers using HPACK?
Hard760A developer is building a real-time video streaming application that must minimize delay, even if some packets are lost. Which transport protocol is most appropriate, and why?
Hard761An application uses OAuth 2.0 client credentials grant to authenticate with a Cisco API. Which of the following best describes this flow?
Medium762A developer is using the Meraki Dashboard API to retrieve a list of clients for a given network. The initial GET request returns a 429 HTTP status. What should the developer do to handle this response appropriately?
Medium763A team uses Ansible Tower for network automation. They need to restrict a user to only view job results without making any changes. Which Tower role should be assigned?
Medium764A DevOps engineer runs a container using 'docker run -d -p 8080:80 nginx'. The host firewall blocks incoming traffic on port 8080 from external networks but allows from the local host. Which command would allow the engineer to test the container's web server from the same machine?
Medium765In the context of SDN, which API is used between the SDN controller and the network devices to configure forwarding behavior?
Medium766Match each Cisco platform to its primary use case.
Medium767A developer is using the Meraki Dashboard API to retrieve a list of devices in an organization. The API response is paginated. Which HTTP header does Meraki use to indicate the next page of results?
Medium768A company has a DHCP server that assigns IP addresses from a scope of 192.168.10.0/24. A new device receives IP 192.168.10.100/24 but cannot access the internet. The default gateway is 192.168.10.1. What is the most likely issue?
Medium769An engineer sees that a DNS query for 'www.example.com' returns a CNAME record. What does this mean?
Hard770Which YANG model type is defined by industry standards and supported by multiple vendors, offering interoperability?
Easy771An engineer is using the Cisco Meraki Dashboard API to retrieve a list of all network clients for a specific network. Which TWO of the following are required to successfully make this API call?
Medium772A developer is designing a data model for network device configurations using YANG. They need to represent a list of interfaces where each interface has a name (string) and speed (enumeration). Which YANG statement correctly defines this structure?
Hard773An organization uses Cisco ISE for network access control. A user reports inability to access the network. The switch port shows the authenticator state as 'connecting'. What does this indicate?
Hard774A developer is writing a Postman test to verify that a Meraki API response returns HTTP status 200 and contains a list of networks. Which code snippet correctly implements this test?
Medium775A network engineer needs to automate the configuration of VLANs across 50 switches. Which approach best follows Cisco’s recommended practices for programmability?
Easy776In DNA Center, which API endpoint is used to retrieve a list of current network issues?
Medium777A Python script uses the requests library to authenticate to Cisco DNA Center. The script receives a 401 Unauthorized error even though the credentials are correct. Which of the following is a likely cause?
Hard778Refer to the exhibit. Which Cisco DNA Center Intent API request produced this response?
Medium779A network engineer needs to automate the configuration of VLANs on a set of Cisco switches using Ansible. Which API should be targeted to ensure idempotent configuration updates?
Easy780A Cisco Catalyst Center API uses OAuth 2.0 with the client credentials grant for server-to-server communication. Which token endpoint parameter should the client include to identify itself?
Hard781In Postman, you want to run a collection of API requests automatically and test responses. Which feature should you use?
Medium782A developer is using Cisco DNA Center API to add a new device to the inventory. Which HTTP method should be used for this operation?
Easy783A developer is writing a Python script that uses the Cisco Meraki API to retrieve a list of networks for an organization. The API returns a JSON array. The developer wants to filter networks where the 'tags' field contains 'production'. Which code snippet correctly filters the results?
Hard784A network administrator is configuring a new subnet for a branch office that requires 50 usable host addresses. The corporate network uses the 192.168.10.0/24 block. Which subnet mask should be used to meet the requirement with minimal waste?
Medium785In Cisco DNA Center's intent API, which endpoint would you use to retrieve the list of all network devices?
Easy786A DevOps team manages a multi-site Cisco Meraki network with 50 MX appliances and 200 MR access points. They use a Python script that calls the Meraki API to collect device utilization data every hour and stores it in a CSV file. Recently, the script started failing intermittently with HTTP 429 status codes. The team suspects rate limiting but notices that the failures occur even when only one script instance runs. The script uses a single API key and makes requests to the /devices/{serial}/uplink endpoint for each MX and the /devices/{serial}/wireless/status endpoint for each MR. The script is scheduled via cron and runs sequentially. The team wants to resolve the rate limiting while minimizing changes to the script. Which course of action should the team take?
Hard787A network engineer is developing a Python script to automate the collection of interface statistics from multiple Cisco Catalyst switches using NETCONF. The engineer uses the 'ncclient' library to connect to each switch. The script works for most switches, but for one switch, the connection consistently fails with an authentication error. The engineer has verified that the username and password are correct and that the switch has NETCONF enabled. The engineer suspects the issue might be related to SSH host key checking. The engineer wants to modify the script to bypass host key checking for this specific switch. Which approach should the engineer use?
Medium788Which Cisco platform provides an API to retrieve a list of issues affecting the network?
Medium789Which THREE are valid Kubernetes Service types? (Select three.)
Hard790Refer to the exhibit. An application is deployed on a server at 192.168.1.10, listening on TCP port 8080. The ACL is applied inbound on the server's network interface. Which clients will be able to access the application?
Medium791A developer runs 'docker run -d -p 8080:80 --name web nginx:alpine'. The container fails to start. Which command is the most appropriate to investigate the issue?
Medium792Which Git command is used to create a new branch and switch to it in one step?
Medium793Refer to the exhibit. A security audit reveals that the authentication mechanism is vulnerable. Which attack is most likely possible?
Hard794Which TWO of the following are valid security considerations when deploying an application to a Kubernetes cluster managed by Cisco Intersight? (Choose two.)
Hard795A company has a microservices application deployed on Kubernetes. There are three services: frontend, backend, and database. The frontend is exposed via an Ingress. The API gateway is used for authentication. Recently, after updating the backend service, users are experiencing 401 Unauthorized errors when accessing endpoints that previously worked. The authentication mechanism uses JWT tokens issued by an external identity provider. The JWT tokens are validated by the API gateway. The backend service itself does not validate tokens; it relies on the gateway to forward user identity via headers. The development team checked the logs and found that the backend is receiving requests with the correct JWT from the gateway but still returning 401. What is the most likely cause?
Hard796Which THREE of the following are characteristics of HTTP/2 compared to HTTP/1.1?
Hard797An engineer wants to verify that a switch port is configured as an access port in VLAN 10. Which command provides this information?
Easy798A Python script uses the 'requests' library to make a POST request to create a new resource. Which HTTP status code indicates successful creation?
Easy799Refer to the exhibit. A developer receives this response when attempting to send a PATCH request to modify a YANG data node via RESTCONF. What is the most likely cause?
Hard800A developer wants to use Cisco Webex Teams API to send a message to a specific room. Which of the following request JSON body fields is required?
Easy801A large enterprise is migrating to a DevOps model and needs to automate the provisioning of network devices. The team has chosen Ansible for configuration management and is using a Git repository for version control. The network includes Cisco IOS routers, Catalyst switches running IOS-XE, and ASA firewalls. The team has written Ansible playbooks for each device type. The goal is to have a CI/CD pipeline that automatically deploys configuration changes to the production network after the changes are merged into the main branch. However, during a recent deployment, a misconfiguration was pushed to a core router, causing a 10-minute outage. The root cause was that the playbook that was executed was not the correct one for that device model. The team wants to implement a mechanism to prevent similar incidents. Which approach should the team adopt?
Hard802Which THREE statements about RESTful APIs are true?
Hard803A DevOps engineer is designing a REST API for a custom network automation tool. Which principle is essential for a RESTful design?
Medium804Match each network automation tool to its primary purpose.
Medium805A network engineer wants to programmatically enable an interface using the YANG model shown. Which XPath expression correctly targets the 'shutdown' leaf for GigabitEthernet0/1?
Hard806In a Python script using the 'requests' library to interact with Cisco DNA Center API, which function call is used to send a POST request with JSON data?
Easy807A developer needs to retrieve the hostname of a Cisco IOS XE device using RESTCONF. Which URI path is correct?
Hard808A developer is building a script to retrieve a list of network devices from Cisco DNA Center. The API response includes a 'nextToken' field in the body to indicate more results. What pagination method is being used?
Medium809Refer to the exhibit. A Python script parses this JSON response to check if NetFlow is enabled on the network. Which code snippet correctly checks the NetFlow status?
Medium810A network administrator is troubleshooting a connectivity issue. A PC with IP address 192.168.1.10/24 cannot ping a server at 192.168.1.20/24. Both are on the same VLAN and connected to the same switch. What is the most likely cause of the issue?
Easy811An engineer uses the Cisco Webex Teams API to send a message to a room. The API returns HTTP 403 Forbidden. What is the most likely cause?
Medium812In Docker, which command is used to build an image from a Dockerfile and tag it as 'myapp:v1'?
Easy813Which THREE of the following are benefits of using event-driven architecture in a distributed system? (Choose three.)
Hard814Refer to the exhibit. A developer is trying to access the REST API on a Cisco IOS XE device but receives a 401 Unauthorized error. What is the most likely cause?
Easy815Which TWO HTTP status codes indicate client errors?
Medium816Based on the routing table, what type of OSPF route is the default route (0.0.0.0/0)?
Hard817An engineer is troubleshooting a network issue and needs to verify the MAC address of the next-hop router on a directly connected segment. Which layer of the OSI model does the engineer need to examine to find this information?
Easy818A company has a web application running on Cisco DNA Center. The application uses OAuth 2.0 for authentication with an external identity provider (IdP). Recently, users have reported that they are being logged out unexpectedly after a few minutes of inactivity, even though the IdP token has a 1-hour expiration. The application developer wants to maintain usability while keeping security controls. What is the most likely cause and solution?
Medium819A developer wants to use Cisco Modeling Labs (CML) API to control a lab session. Which base URL structure is correct for the CML REST API?
Easy820An administrator is automating the deployment of a new switch using Cisco DNA Center. Which API category should they use to provision the device with a configuration template?
Medium821When designing a REST API for managing network devices, which two principles should be followed to ensure statelessness?
Medium822A Webex API request returns a 401 Unauthorized error. The developer has already obtained an access token. What is the most likely cause?
Medium823Refer to the exhibit. Both switches are configured with EtherChannel. Which statement is true about VLAN traffic across the trunk?
Hard824A developer is using the Webex API to create a webhook that triggers when a new message is posted in a room. What information is typically included in the webhook payload sent by Webex to the callback URL?
Medium825Which DNS record type is used to verify domain ownership for email security protocols like SPF and DKIM?
Hard826Refer to the exhibit. A Python script uses the Cisco IOS-XE RESTCONF API to retrieve the device configuration. The returned JSON is shown. What must be done to enable the GigabitEthernet0/1 interface using the API?
Medium827Which THREE of the following are characteristics of RESTCONF compared to NETCONF? (Select three.)
Hard828A docker-compose.yml defines a web service with environment variables. Which key in the service definition should be used to set environment variables?
Medium829A developer needs to create a Python script that makes a GET request to a REST API to retrieve a list of network devices. The API uses query parameters to filter by device type and status. Which TWO code snippets correctly include query parameters using the requests library? (Choose two.)
Easy830A security policy requires that all container images in a registry are scanned for vulnerabilities before deployment. Which approach best integrates this into a CI/CD pipeline without slowing down the pipeline?
Hard831A developer needs to send a diagnostic request to a network device to verify if it supports a specific MIB object. Which protocol and operation should be used?
Easy832During a security audit of a microservices application deployed on Cisco Container Platform, the auditor discovers that some containers are running with privileged access. The development team argues that certain containers need to modify kernel parameters. Which security best practice should be recommended to minimize risk while allowing necessary kernel adjustments?
Hard833A developer is writing a Python script to interact with a Cisco device using RESTCONF. The script sends a PUT request to modify an interface configuration. Which HTTP response code indicates that the resource was successfully created?
Easy834Based on the exhibit, what is the most likely reason for the connection timeout?
Hard835Refer to the exhibit. An Ansible playbook is intended to set the description on GigabitEthernet0/1. However, the playbook fails because the device does not have that interface. What is the most likely reason?
Easy836During a CI/CD pipeline, a security scan reveals that a Docker image contains a vulnerability in a base layer. Which action BEST addresses the issue?
Medium837Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)
Easy838A developer is exploring YANG models on yangcatalog.org. They want to find a standard model for interface configuration that is vendor-neutral. Which model should they look for?
Medium839A NETCONF manager sends a get-config request to a Cisco device and receives the above reply. The automation script expected the interface to be enabled. Which of the following is the best course of action to remediate the issue?
Hard840A network engineer is developing a Python application that uses the Cisco Meraki Dashboard API. The API responses are in JSON format. Which Python module is most commonly used to parse JSON responses?
Medium841A team is using Python scripts with netmiko to back up configurations from a large number of network devices. What is the primary advantage of using netmiko over direct paramiko for this task?
Easy842Which TWO of the following are HTTP methods used for creating or updating resources in REST APIs? (Select TWO)
Easy843A developer is designing a microservices architecture where services need to discover each other using DNS. The team wants to map a service name 'payment-service.example.com' to its IPv6 address. Which DNS record type should be used?
Hard844A DevOps team is building a CI/CD pipeline that configures Cisco NX-OS switches. They want to use model-driven telemetry to stream operational data. Which protocol should they use for on-change telemetry?
Medium845Which TWO of the following are true about REST API design principles?
Easy846A DevOps engineer is configuring a CI/CD pipeline that uses Cisco DNA Center API to deploy network configurations. Which two best practices should be followed? (Choose two.)
Medium847A developer is integrating a Webex Teams bot with an external system using the Webex API. The bot receives an HTTP POST callback from Webex every time a message is posted in a monitored space. The developer notices that sometimes the callback includes a 'data' object with 'actorId', but other times the 'actorId' is missing. The bot needs to log the identity of the person who posted the message. What should the developer do to reliably obtain the sender's identity?
Hard848When using the Cisco Meraki Dashboard API with pagination, the Link header in the response contains <https://api.meraki.com/api/v1/organizations?perPage=10&startingAfter=123>; rel="next". What does this indicate?
Medium849Which of the following best describes the purpose of a unit test in software development?
Easy850A developer is using Git to manage automation code. What is the primary advantage of using 'rebase' instead of 'merge' to integrate changes from a feature branch into the main branch?
Medium851A team is building a CI/CD pipeline for network automation. They want to use Cisco Modeling Labs (CML) to validate configuration changes before production. What is the best approach to integrate CML into the pipeline?
Hard852When designing a REST API endpoint to update a network device's configuration, which HTTP method should be used?
Easy853A developer is deploying a containerized application with Docker Compose. The application requires environment variables for database credentials that should not be hardcoded in the docker-compose.yml file. Which two methods securely provide these credentials? (Choose two.)
Medium854Which HTTP method should be used to replace an entire existing resource in a RESTful API?
Easy855Which THREE of the following are direct benefits of using version control in software development?
Medium856A developer is using the Meraki Dashboard API to programmatically change the SSID name of a wireless network. The developer successfully authenticates with an API key and sends a PUT request to /networks/{networkId}/wireless/ssids/{number} with a JSON body containing the updated name. The API returns a 200 OK response, but the SSID name does not change in the Meraki Dashboard. The developer double-checks the networkId and SSID number, and they are correct. The developer also confirms that the API key has full write access to the network. What additional step is most likely required?
Medium857Which Docker command is used to view the logs of a running container in real-time?
Medium858A network engineer is analyzing traffic and needs to identify which applications use UDP. Which three applications commonly use UDP as their transport protocol? (Choose three.)
Hard859A user reports that they can ping the IP address of the default gateway but cannot ping a server on a different subnet. The administrator checks the ARP table on the user's PC and sees an incomplete entry for the server's IP. What is the most likely cause?
Medium860An Ansible playbook using the ios_config module fails with the error 'unable to open connection'. The network device is reachable via SSH from the Ansible control node. What is the most likely cause?
Medium861A developer is writing a web application and wants to prevent SQL injection attacks. Which coding practice should be followed when constructing SQL queries?
Medium862Which TWO Kubernetes resources are used to provide configuration data to pods? (Choose TWO.)
Medium863A university campus network uses Cisco switches with 802.1X for wired authentication. Recently, users in a dormitory report intermittent connectivity: they can connect initially but are disconnected after a few minutes. The network team checks the switch logs and sees messages like 'Authentication failure for MAC address xxxx.xxxx.xxxx on port GigabitEthernet1/0/5' but the users claim they are using valid credentials. The same users can connect from other ports without issues. The port configuration for Gi1/0/5 is: switchport mode access, authentication port-control auto, dot1x pae authenticator, authentication periodic, authentication timer reauthenticate 3600. The team suspects a misconfiguration. What is the most likely cause of the intermittent disconnections?
Medium864A network automation script uses the requests library to retrieve device information from a REST API. The API requires authentication via a bearer token. Which code example correctly sets the Authorization header?
Medium865A developer is writing a Python script that processes a large CSV file. The script uses 'with open(file, 'r') as f' to read the file. Why is this approach preferred over calling f = open(file) and then f.close()?
Hard866Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required?
Medium867A developer is writing a Kubernetes Deployment YAML and wants to set a CPU limit of 500 millicores. Which of the following is the correct YAML snippet?
Hard868Refer to the exhibit. A developer receives this response from Cisco DNA Center API. What is the most likely cause and solution?
Hard869A large enterprise operates a multi-vendor network with Cisco routers and switches, as well as Juniper devices. The network team uses Ansible for automation, with a centralized control node running RHEL. They have been using the 'ios_config' module for Cisco devices and 'junos_config' for Juniper devices. Recently, they added a new Cisco Catalyst 9300 switch to the network. They wrote a playbook to configure VLAN 100 on the switch, but the task fails with the error: 'module_stderr: Could not find platform module for Cisco IOS XE'. The playbook uses the 'cisco.ios.ios_config' module. The control node has the 'cisco.ios' collection installed (version 2.0.0). The target switch runs IOS XE 16.12.3. The control node can SSH to the switch successfully. Which action will most likely resolve the issue?
Hard870A developer wants to send a message to a specific Webex Teams room using the REST API. Which HTTP method and endpoint should be used?
Easy871A developer creates a Dockerfile with the following content: FROM python:3.9-slim, COPY app.py /app/, RUN pip install flask, EXPOSE 5000, CMD ["python", "/app/app.py"]. When building the image with 'docker build -t myapp .', what is the purpose of the EXPOSE instruction?
Easy872A developer wants to create a Docker image that runs a Python application. Which instruction should be placed at the end of the Dockerfile to specify the command that runs when the container starts?
Easy873In a CI/CD pipeline using Jenkins, which stage is typically executed immediately after the build stage to ensure code quality before deployment?
Medium874A script using the Meraki Python library fails with an error 'Rate limit exceeded'. The developer needs to handle this. Which approach is correct?
Hard875A network automation engineer is using Cisco DNA Center APIs. Which TWO of the following are valid API categories? (Choose two.)
Medium876A company uses Ansible to automate network configuration. They have an Ansible control node that must reach all network devices. Which transport protocol does Ansible use by default to connect to Cisco IOS devices?
Medium877A network team is implementing automation to provision new switchports across a campus network. They decide to use a controller-based approach with Cisco DNA Center. What is the primary advantage of using DNA Center for this task?
Medium878A team uses GitHub Actions for CI/CD. Their workflow includes a job that builds a Docker image and pushes it to a private registry. The job needs to authenticate to the registry using secrets stored in GitHub. Which approach is most secure for passing credentials?
Hard879An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?
Hard880Which of the following is a non-overlapping channel in the 2.4 GHz Wi-Fi band?
Easy881A network automation script uses the Python ncclient library to modify a device configuration. Which NETCONF operation should be used to apply configuration changes?
Easy882A security team is developing an application that collects network alerts from Cisco Firepower Management Center (FMC) API. The API requires OAuth2 authorization code grant flow. After obtaining an authorization code, what must the application do to get an access token?
Hard883Which THREE of the following are characteristics of IPv6? (Select exactly three.)
Hard884A network administrator is using Cisco DNA Center APIs to automate network changes. Which two API categories are used to perform configuration deployments? (Choose two.)
Medium885A developer runs 'docker-compose up -d' for a multi-service application. What does the '-d' flag do?
Easy886A network automation engineer is tasked with creating a Python script to automatically back up the running configuration of all IOS XE devices in a data center using the Cisco IOS XE REST API. The engineer has credentials for each device and knows the IP addresses. The script uses the requests library and sends a GET request to https://<device-ip>/restconf/data/Cisco-IOS-XE-native:native?content=config. The script runs successfully for some devices but fails with a 401 Unauthorized error for others. The engineer confirms the credentials are correct and the devices are reachable. The working devices are running IOS XE 16.9, while the failing ones are running IOS XE 16.6. The engineer checks the API documentation and finds that RESTCONF is enabled on all devices. However, the engineer notices that the failing devices require a different authentication method. What should the engineer do to fix the authentication for the IOS XE 16.6 devices?
Hard887A developer is using the Meraki Dashboard API to list all organizations. Which TWO of the following are true regarding pagination in the Meraki API? (Choose TWO.)
Medium888A network administrator configures a switch port to belong to VLAN 10. Which OSI layer is primarily involved in VLAN tagging?
Medium889When using RESTCONF to configure a network device, which URL path prefix and content-type header should be used?
Medium890A network administrator is configuring a DNS server. Which TWO DNS record types are used for IPv6 address resolution?
Medium891Match each Git command to its function.
Medium892An application needs to retrieve all network clients from a specific Meraki network. The API response may be paginated. Which query parameters can be used to implement cursor-based pagination with the Meraki Dashboard API?
Hard893In a CI/CD pipeline, a code quality check fails due to a security vulnerability in a third-party library. What is the best practice to address this?
Hard894Using the Cisco DNA Center API, an engineer wants to create a new site with building and floor information. Which HTTP method and endpoint should be used?
Hard895A Python script uses the ncclient library to connect to a Cisco NX-OS device over NETCONF. After establishing the session, the script executes an editing operation with candidate datastore. Which additional step is required to make the changes take effect immediately on the running configuration?
Medium896A developer is writing a Python script to back up Cisco router configurations via SSH. Which two libraries are appropriate for this task? (Choose two.)
Easy897An administrator is configuring a Cisco Meraki Dashboard API integration. After receiving a 429 HTTP response, what header should be examined to determine when the request can be retried?
Medium898A developer wants to use Postman to test a REST API that requires a Bearer token. Where should the token be placed in the request?
Easy899Which TWO statements about the MVC pattern are correct? (Choose two.)
Medium900In a Docker Compose file, which key is used to define the dependency order between services?
Easy901Which of the following is a private IPv4 address range as defined by RFC 1918?
Easy902A developer is implementing secure coding practices to prevent SQL injection. Which approach is most effective when building a SQL query with user input?
Hard903Which YANG model is an OpenConfig model commonly used for interface configuration?
Easy904Which YANG model is an OpenConfig model used for interface configuration?
Medium905A developer needs to retrieve a list of network devices from Cisco DNA Center. Which API endpoint should be used?
Medium906Which HTTP method is idempotent and used to update a resource by sending the full representation?
Medium907An administrator needs to retrieve the hostname of an IOS XE device using RESTCONF. Which URL and data path should they use?
Medium908A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)
Medium909Which tool is used to explore and validate YANG models?
Easy910A network engineer is using Cisco IOS XE RESTCONF to retrieve the hostname of a device. The device has already enabled netconf-yang and restconf. Which URL path should be used?
Hard911Which data structure in Python would be most appropriate for storing a collection of unique items and performing fast membership tests?
Easy912When using the NX-API on Cisco NX-OS, which HTTP method is used to send CLI commands in JSON format?
Medium913A Kubernetes Deployment has replicas: 3. The team updates the container image to a new version. The rollout gets stuck because the new pod fails readiness probes. Which kubectl command will display the rollout status and help diagnose the issue?
Hard914Which two authentication methods are commonly used with Cisco REST APIs? (Choose two.)
Medium915A technician needs to verify the IP address of a remote server using DNS. Which command should be used on a Cisco IOS device?
Easy916Which THREE of the following are common security vulnerabilities listed in the OWASP Top 10? (Choose three.)
Easy917An engineer configures a trunk port as shown. A device connected to this port sends an untagged frame. Which VLAN will the switch associate the frame with?
Medium918Which NX-OS API method allows sending CLI commands in JSON format without enabling any additional features?
Medium919Which two statements are true about Cisco DevNet Sandboxes?
Easy920A developer is using Git for version control of a Python library. A colleague accidentally committed a large sensitive file. Which Git command sequence should be used to remove the file from history without losing subsequent changes?
Hard921An IoT device streams telemetry data to a collector using gNMI. Which mode allows the collector to initiate the subscription?
Hard922Based on the exhibit, what is the frequency of the telemetry subscription?
Easy923Which TWO are valid methods to secure a REST API? (Choose two.)
Easy924In a CI/CD pipeline using Jenkins, which plugin is commonly used to integrate with Cisco Container Platform for deploying containers?
Medium925Which THREE security measures should be implemented in a CI/CD pipeline to protect against supply chain attacks? (Choose three.)
Hard926A developer is creating a YANG data model for a new interface feature. The model must allow the user to choose from a predefined set of values for the 'duplex' leaf. Which YANG statement should be used to restrict the values to 'full', 'half', and 'auto'?
Hard927You are automating the deployment of a new software image on a fleet of Cisco Nexus switches using Ansible. The switches are in a production environment and must have minimal downtime. You have a maintenance window of 30 minutes per switch. Your playbook performs the following steps: 1) Copy the image to the switch via SCP, 2) Set the boot variable to the new image, 3) Save the configuration, 4) Reload the switch. During a dry run on a test switch, you notice that the reload step takes 8 minutes, but the copy step takes 15 minutes due to slow link speed. For the production rollout, you need to reduce the overall time per switch. Which approach should you take?
Hard928In a CI/CD pipeline for a network automation project, which stage is responsible for validating the syntax of YAML configuration files?
Hard929A developer is building a RESTful API with Python Flask. Which TWO are recommended security best practices for exposing the API over HTTPS?
Easy930A network engineer notices that after a link failure, traffic to a server on a different VLAN is intermittent. The network uses Rapid PVST+. The switch connecting the server is a root bridge for that VLAN. What is the most likely cause of the intermittent connectivity?
Medium931A DevOps team is securing a CI/CD pipeline that deploys containerized applications to Kubernetes. Which THREE practices enhance security?
Hard932Which of the following is a best practice for securing API keys in a CI/CD pipeline?
Easy933In a Docker bridge network, two containers can communicate with each other using which identifier by default?
Medium934A Webex bot needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should the bot implement?
Medium935A network administrator is configuring a new subnet for a branch office that requires at least 50 usable host addresses. Which subnet mask would meet this requirement while minimizing address waste?
Medium936A network engineer needs to automate the deployment of a new VLAN on multiple Cisco switches using RESTCONF. Which URL structure should be used to create a VLAN with ID 100?
Medium937A company is adopting DevSecOps practices. Which THREE practices should be implemented to secure application deployment?
Hard938A Python script used for network automation requires storing an API secret. Which approach is the most secure and recommended best practice?
Easy939A developer is designing a REST API for managing network devices. Which three best practices should be followed for the API design? (Choose three.)
Medium940A Python script uses a dictionary to store device configuration parameters. Which key, if any, will raise a KeyError if it does not exist in the dictionary?
Easy941Which data serialization format is most commonly used for configuration files in Cisco automation tools like Ansible?
Easy942A DevOps engineer is implementing Infrastructure as Code (IaC) for network devices. Which of the following practices is most critical to ensure that the environment state matches the desired configuration defined in code?
Medium943Match each HTTP method to its typical use case in REST APIs.
Medium944A network automation engineer is evaluating options for model-driven programmability on Cisco devices. Which THREE are valid YANG model sources or tools? (Choose three.)
Hard945Which two of the following are valid ways to authenticate to the Cisco DNA Center API?
Medium946When using the Meraki Dashboard API, what is the correct method to authenticate requests?
Medium947Which Python data type is mutable and unordered?
Easy948In the MVC (Model-View-Controller) pattern, which component is responsible for handling user input and updating the model?
Hard949A developer wants to create a Webex webhook that triggers when a new message is posted in any room the bot is in. Which resource event should they subscribe to?
Medium950Which three capabilities are offered by the Cisco DNA Center REST API?
Medium951In the context of SDN, which API allows a network controller to communicate with the forwarding plane of network devices?
Hard952Which EEM applet action is used to execute a CLI command when an event triggers?
Medium953Which NETCONF operation is used to retrieve the entire configuration datastore from a network device?
Medium954Refer to the exhibit. A developer is building a Docker image for a Node.js application. The Dockerfile contains: ``` FROM node:14 WORKDIR /usr/src/app COPY package*.json ./ RUN npm install COPY . . CMD ["node", "app.js"] ``` When building, the error shown occurs. What is the most likely cause?
Hard955Which two authentication methods are commonly used with Cisco APIs? (Choose two.)
Easy956A developer is using the Cisco Webex API to create a room and add members. The API requires an access token with the appropriate scopes. The developer receives a 401 Unauthorized error when trying to create a room. What is the most likely cause?
Hard957A developer is working with the Cisco SD-WAN vManage API to monitor overlay tunnels. They need to retrieve a list of all devices with their site IDs and IP addresses. Which API endpoint is most appropriate?
Hard958An engineer is exploring YANG models for network interfaces. They need a vendor-neutral model that can be used across multiple device types. Which YANG model should they use?
Hard959A network engineer is designing a subnetting scheme for a company that requires 5 subnets from the 192.168.1.0/24 network. What subnet mask should be used, and how many usable hosts per subnet will be available?
Hard960A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?
Medium961A DevOps engineer is managing a Git repository and wants to discard local changes to a file and revert it to the last committed state. Which TWO commands can accomplish this? (Choose two.)
Medium962A developer needs to send a message to a specific room in Webex using the API. What is the correct endpoint and required body parameter for the room destination?
Hard963Drag and drop the steps to set up a basic DHCP server on a Cisco router into the correct order.
Medium964A developer needs to create a Python function that accepts any number of keyword arguments and prints them. Which function definition correctly uses **kwargs?
Medium965In a network automation workflow, a developer needs to ensure idempotency. What does idempotency mean in this context?
Hard966An IPv6-enabled host is trying to discover the MAC address of another host on the same link. The host knows the destination IPv6 address but does not have a corresponding entry in the neighbor cache. Which protocol and message type does the host use?
Hard967A Python script uses the Cisco Meraki API to list networks in an organization. The API returns HTTP 403 Forbidden. What is the most likely cause?
Easy968A REST API returns a 500 Internal Server Error when a client sends a malformed JSON payload. What is the most appropriate HTTP response code to indicate a client-side error?
Medium969In a microservices architecture, which of the following is a primary advantage over a monolithic architecture?
Hard970Which three of the following are common data formats used with REST APIs on Cisco platforms?
Medium971An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?
Easy972Which TWO are valid methods to secure a Docker container?
Easy973An engineer is troubleshooting packet loss between two hosts on different subnets. The traceroute shows that packets reach the first hop router but then stop. The router's ARP table shows an incomplete entry for the next-hop IP address. What is the most likely cause?
Hard974When using Cisco Intersight API to manage UCS servers, a script must invoke an API that triggers a firmware upgrade. Which HTTP method and endpoint pattern should be used?
Medium975An EEM applet is triggered when a specific syslog message pattern appears. Which action should be used to send a custom syslog message?
Hard976A company wants to implement a zero-trust model for API access between microservices. What is the most effective way to authenticate service-to-service communication?
Easy977A network automation engineer needs to retrieve the Layer 2 topology for a specific VLAN from Cisco DNA Center. Which API endpoint should be used?
Medium978A network automation team uses a CI/CD pipeline. Which practice best ensures that configuration changes are validated before deployment to production?
Medium979Refer to the exhibit. A developer from subnet 10.10.10.0/24 cannot reach the RESTCONF API on the IOS-XE device. What is the most likely cause?
Medium980A network engineer is troubleshooting a connectivity issue between two hosts in different VLANs on the same switch. The hosts are in VLAN 10 and VLAN 20, respectively. The switch has an SVI for each VLAN and IP routing is enabled. Which command should be used to verify that the switch is forwarding traffic between the VLANs?
Easy981Which THREE factors influence the convergence time of OSPF in a large enterprise network? (Choose three.)
Hard982A CI/CD pipeline for network automation includes a stage that runs Ansible playbooks against a staging environment. The pipeline is triggered by Git commits. After a commit, the pipeline fails because the Ansible inventory file is missing. What is the most likely reason?
Hard983A developer is building an application that interacts with the Webex API to create rooms and send messages. The application needs to receive real-time notifications when a new message is posted in any room. Which TWO actions should the developer take? (Choose two.)
Medium984Which TWO are common authentication methods used when interacting with Cisco APIs?
Easy985Which THREE are valid reasons to use Cisco DNA Center's Assurance APIs in an enterprise network?
Hard986A Python script needs to iterate over a dictionary of network interfaces and print each interface name and its IP address. The dictionary is structured as: {'GigabitEthernet1/0/1': '10.1.1.1', 'GigabitEthernet1/0/2': None}. Which THREE code snippets correctly iterate and print the key-value pairs, skipping entries with None? (Choose three.)
Medium987An organization uses Cisco DNA Center and wants to use its Intent API to retrieve the health score of all wireless clients. Which API endpoint and method should be used?
Hard988Which TWO of the following are valid OAuth 2.0 grant types? (Select TWO)
Medium989Given the Python list comprehension: result = [x*2 for x in range(10) if x > 5] What is the value of result?
HardOther domains
All 200-901 exam domains
Frequently asked questions
- What does the scenario questions domain cover on the 200-901 exam?
- scenario questions questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 989 scenario questions questions in the 200-901 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only scenario questions questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.