Courseiva

200-901 · domain

scenario questions

Practise Cisco DevNet Associate 200-901 scenario questions practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

975 questions254 easy447 medium274 hard

Focused practice

Practice scenario questions questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about scenario questions

scenario questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common scenario questions exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Question index

All scenario questions questions (975)

Click any question to see the full explanation, or start a practice session above.

1

A developer is creating a Python script to retrieve interface statistics from a Cisco IOS XE device using RESTCONF. Which HTTP method should be used to get the data?

Medium
2

An application uses Cisco DNA Center APIs and needs to receive notifications when a new device is added. Which DNA Center API category should be used to set up event-driven notifications?

Medium
3

An application sends many requests to the Meraki API and receives HTTP 429 errors. The response includes a 'Retry-After' header. What does this status code indicate?

Medium
4

A developer's integration must call a Cisco Webex API on behalf of users across many customer organizations. Each organization administers its own users and consents independently, and the integration must refresh access without user interaction after initial consent. Which OAuth 2.0 grant type should the integration use?

Hard
5

A company uses Ansible to automate configuration of its Cisco IOS XE routers. The network team recently upgraded the routers' software from IOS 15.x to IOS XE 17.x. Since the upgrade, the Ansible playbook fails intermittently with the message: 'Failed to connect to the host via ssh: timed out'. However, the team can SSH manually to the routers from the Ansible control node without issues. The playbook uses the 'cisco.ios.ios_config' module with default SSH options. The routers have been configured with SSH version 2 and local authentication. The Ansible control node runs Red Hat Enterprise Linux 8. Which action should the network engineer take to resolve the issue?

Medium
6

Which TWO practices help prevent hardcoded credentials in application code? (Choose TWO.)

Medium
7

A platform team is hardening a containerized application before production. They want to reduce the attack surface of the running containers themselves. Which two practices directly reduce the privileges available to a compromised container process? (Choose two.)

Medium
8

A Python script uses the Cisco Webex API to list all rooms. The response includes pagination via the 'Link' header with 'rel="next"'. What is the correct way to retrieve the next page of rooms?

Easy
9

A developer is writing a REST API client in Python that authenticates to a controller using HTTP Basic authentication over the network. The developer wants to ensure credentials are never exposed on the wire in readable form. Which implementation detail is required?

Hard
10

A Webex bot needs to send a message to a room. The bot has the room ID. Which API endpoint should be used, and what is the correct HTTP method?

Medium
11

In a microservices architecture, which communication pattern is typically asynchronous and decoupled?

Medium
12

Which tool can be used to explore YANG models locally?

Easy
13

A DevOps team manages network infrastructure using Infrastructure as Code (IaC). They store configuration files in a Git repository and use CI/CD to deploy changes. What is the best practice to ensure that only validated configurations are applied to production devices?

Hard
14

Which Cisco platform uses NX-API to allow programmatic access to CLI commands via JSON?

Easy
15

In an SDN architecture, which API is used by the controller to communicate with network devices to install forwarding rules?

Hard
16

A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?

Medium
17

A network administrator is configuring DNS for a corporate domain. An MX record is required to specify the mail server responsible for handling email. Which of the following is a correct example of an MX record?

Medium
18

A network automation engineer uses Terraform to manage Cisco Catalyst Center (formerly DNA Center) resources. What is the purpose of the Cisco Catalyst Center Terraform provider?

Medium
19

Based on the NAT translation table, what type of NAT is being used?

Hard
20

A network engineer needs to automate the deployment of QoS policies across multiple campus switches using Cisco DNA Center. The engineer decides to use the Cisco DNA Center Intent API to create a policy tag and bind it to a group of devices. After sending the PUT request to /dna/intent/api/v1/policy-tag, the API returns a 202 Accepted status. However, the engineer notices that the policy is not being applied consistently across all devices. What is the most likely reason?

Medium
21

A developer is building a Python script that authenticates to the Cisco DNA Center REST API. The script must avoid hardcoding credentials in source control and must run unattended in a CI pipeline. The team already stores secrets in environment variables on the build agent. Which approach best meets these requirements?

Medium
22

A network engineer wants to retrieve the list of organizations associated with their API key from the Cisco Meraki Dashboard API. The API base URL is https://api.meraki.com/api/v1. Which HTTP request should the engineer send?

Easy
23

A developer is using Cisco Meraki API to retrieve a list of networks. What is the correct HTTP method and endpoint path for listing networks in an organization?

Easy
24

A developer writes a Python script using Cisco's pyATS framework to test network reachability after a configuration change. What is a key advantage of using pyATS over a simple script that uses ping?

Medium
25

A development team is implementing a microservices architecture. They need to ensure that services can discover each other dynamically without hardcoding IP addresses. Which technology should they use?

Medium
26

A network engineer is analyzing traffic patterns and wants to identify characteristics of UDP that affect real-time applications such as VoIP and video streaming. Which two characteristics of UDP make it suitable for these applications? (Choose two.)

Hard
27

In a CI/CD pipeline for network automation, a change is rolled back using a Git revert commit that triggers a new pipeline. The rollback playbook fails because the 'previous' configuration snapshot is missing. What should be implemented to prevent this?

Hard
28

A developer is writing a Python application that calls a REST API. The API requires an OAuth 2.0 bearer token. The token must not be stored in the source code. Which approach should the developer use to make the token available to the application at runtime?

Easy
29

A CI/CD pipeline for network automation includes stages for linting, unit testing, and deployment. Which stage typically validates the syntax of Ansible playbooks?

Easy
30

An application requires reliable, ordered delivery of data with error checking. Which transport protocol should be used, and what is a key characteristic of this protocol?

Medium
31

Which TWO of the following are examples of application layer protocols?

Easy
32

A network automation engineer is writing a Python script to interact with the Cisco Meraki Dashboard API. The script currently makes GET requests to retrieve a list of networks and then makes subsequent requests for each network to get device details. However, the script is slow due to network latency. The engineer wants to improve performance without changing the API's functionality. Which approach best addresses the performance issue?

Easy
33

A developer is building a Python microservice that will run in a Docker container on a shared host. The application must read its database connection string and API token from environment variables at runtime, and the developer wants to avoid baking those secrets into the image. Which approach best satisfies this requirement?

Medium
34

Which three configuration management tools can be used with Cisco devices for automation? (Choose three.)

Medium
35

Which Python exception would be raised by the following code? my_dict = {'a': 1} value = my_dict['b']

Hard
36

A Kubernetes pod has two containers: a main application and a sidecar proxy. They need to communicate via localhost. Which pod networking model allows this?

Hard
37

What is the purpose of the Authorization header in a REST API call?

Easy
38

A developer is writing a Python script to interact with the Cisco DNA Center REST API. Which HTTP method should be used to retrieve a list of network devices?

Easy
39

A developer is designing a Python application that must handle failures when making REST API calls to a Cisco DNA Center controller. The application should retry a failed request only if the HTTP status code indicates a server-side error (5xx) or a timeout occurs, but should not retry on client errors (4xx). The developer wants to implement this using a decorator. Which Python library provides a ready-to-use retry decorator that can be configured to retry on specific exceptions and HTTP status codes?

Hard
40

An application needs to retrieve a list of network devices from Cisco DNA Center. Which HTTP method should be used against the /dna/intent/api/v1/network-device endpoint?

Easy
41

During a TCP three-way handshake, which sequence of flags is sent from the client to initiate the connection?

Hard
42

A developer is using the Meraki Dashboard API to list all organizations. The base URL is https://api.meraki.com/api/v1/. What is the correct endpoint and authentication method?

Medium
43

A developer needs to retrieve a list of all networks in a Meraki organization using the Dashboard API. Which API call should be made?

Easy
44

A developer is building a Python application that uses the Cisco Webex API to send messages. The application must authenticate on behalf of a user without storing the user's password. Which OAuth 2.0 grant type should be used to obtain an access token?

Medium
45

An application needs to discover the MAC address of another device on the same local network. Which protocol does it use?

Medium
46

In the OSI model, which layer is responsible for logical addressing and routing of packets between networks?

Easy
47

A developer is designing a Python script that needs to make multiple REST API calls to different endpoints sequentially. The script must handle the following requirements: (1) Use a variable timeout for each request, (2) Include an authorization token in every request, (3) Parse JSON responses. Which TWO features of the requests library should be used? (Choose two.)

Medium
48

A developer needs to share a Docker image with a colleague. They decide to push the image to a registry. Which Docker command pushes an image to a registry?

Easy
49

Match each HTTP status code to its meaning.

Medium
50

Which TWO of the following protocols use UDP as the transport layer protocol? (Choose two.)

Easy
51

A security team wants to ensure that only signed Docker images are deployed in production. Which CI/CD pipeline step validates the image signature before deployment?

Medium
52

In the TCP three-way handshake, which sequence of flags is exchanged to establish a connection?

Medium
53

Which authentication flow is most appropriate for a native mobile app that needs to access the Webex API on behalf of a user?

Medium
54

Which TWO of the following features are provided by Cisco DNA Center but NOT by Cisco Prime Infrastructure? (Choose two.)

Hard
55

A developer is building a Python script that calls the Cisco Webex REST API. The API requires an OAuth 2.0 access token that expires after 14 days. The script will run unattended on a server every hour. Which OAuth 2.0 grant type should the developer use to obtain tokens without user interaction?

Medium
56

What is the correct URL path for retrieving the configuration of a network interface using RESTCONF on a Cisco device?

Medium
57

Which Docker network driver allows a container to share the host's network stack, giving it direct access to host interfaces?

Easy
58

A developer is automating a Cisco IOS XE device with NETCONF over SSH. The developer must retrieve only the running configuration's hostname without pulling the entire configuration datastore. Which NETCONF operation should the developer use?

Easy
59

You are a junior network developer tasked with automating device inventory retrieval using the Cisco Meraki Dashboard API. You have already generated an API key with the appropriate scopes and have tested it successfully with simple GET requests. However, when you attempt to retrieve the list of all devices in your organization via the 'GET /organizations/{organizationId}/devices' endpoint, you receive a 403 Forbidden error. You verify that the API key is correctly included in the request header as 'X-Cisco-Meraki-API-Key'. You also confirm that the organization ID is correct. You are able to reach the Meraki Dashboard API server from your environment, as other endpoints (e.g., 'GET /organizations') work fine. What is the most likely cause of the 403 error, and what should you do to resolve it?

Easy
60

Which transport protocol is connection-oriented and ensures reliable delivery through acknowledgments and retransmissions?

Easy
61

A Python function needs to accept a variable number of keyword arguments. Which parameter syntax should be used?

Medium
62

A developer is writing a Python script to interact with a REST API that returns JSON. The script must handle rate limiting gracefully. The API returns a 429 status code with a Retry-After header when the limit is exceeded. Which approach should the developer take to ensure the script continues to function without being blocked?

Hard
63

A developer is implementing exception handling in Python for a function that makes an HTTP request. Which THREE exception types should be caught to handle common network and HTTP errors? (Choose three.)

Hard
64

Which THREE steps are essential in a typical CI/CD pipeline for a containerized application? (Choose THREE.)

Hard
65

A developer is working on a Python application that automates the configuration of multiple Cisco IOS-XE devices using RESTCONF. The application uses the requests library. The developer notices that sometimes the PUT request to update the interface description returns a 409 Conflict error. Upon investigation, the developer finds that the issue occurs when two instances of the application are running concurrently and attempt to update the same interface. The developer wants to implement a strategy to avoid conflicts. Which approach is most effective?

Medium
66

During a security audit, an engineer discovers that a CI/CD pipeline is storing API keys in plain text in environment variables. Which best practice should be implemented to mitigate this risk?

Medium
67

Match each Python library to its typical use in network automation.

Medium
68

A network automation script uses RESTCONF to configure a router. The script receives an HTTP 409 Conflict response. What is the most likely cause?

Hard
69

Which TWO statements about REST API design best practices are true? (Choose two.)

Medium
70

An application is secured using OAuth 2.0 for Cisco Webex API access. Which three components are involved in the authorization code grant flow? (Choose three.)

Medium
71

An engineer is designing a CI/CD pipeline for a Python application. The pipeline should automatically run unit tests, build a Docker image, push it to a private registry, and deploy to a Kubernetes cluster. Which sequence of stages is correct?

Medium
72

A network engineer is writing a Python script to interact with a Cisco Catalyst Center (formerly DNA Center) REST API. They need to authenticate and obtain a token that will be used in subsequent API calls. Which HTTP header should be included in the authentication request to specify the expected response format?

Easy
73

A Python script is interacting with a REST API that returns JSON. The script needs to handle potential errors gracefully. Which TWO practices should be implemented? (Choose two.)

Medium
74

Which TWO statements are true about VXLAN? (Choose two.)

Medium
75

Which TWO Ansible modules are commonly used for automating Cisco IOS devices?

Easy
76

Which TWO of the following are commonly used when implementing pagination in REST APIs? (Select TWO)

Medium
77

An engineer wants to trigger an EEM applet when a specific syslog message appears. Which event detector should be used?

Hard
78

A team is reviewing its CI/CD pipeline for security weaknesses. The pipeline builds and deploys a containerized application. Which TWO practices best reduce the risk of a compromised build environment affecting the deployed application? (Choose two.)

Hard
79

Which TWO of the following are valid ways to handle errors in a Python program that uses the Cisco Meraki API?

Hard
80

A developer is integrating with Cisco SD-WAN vManage using REST APIs. After successfully submitting credentials, the API returns a 401 Unauthorized error for subsequent requests. What is the most likely missing step?

Hard
81

A network engineer is using Cisco DNA Center to automate network changes. Which THREE operations are part of the 'Change your network' API category? (Choose three.)

Hard
82

A large enterprise uses Cisco DNA Center to manage its campus network. The network team has automated wireless SSID provisioning using the Intent API. Recently, a new SSID was created but it does not appear on the wireless LAN controllers. The Python script that calls the API returns a 200 OK response, but the SSID is not deployed. The script uses the POST /dna/intent/api/v1/ssid endpoint with a JSON body containing the SSID name and security settings. A day later, the SSID is still missing. The engineer checks the DNA Center GUI and sees the SSID in the 'Design' section but with a 'Provisioning Failed' status. Which step should the engineer take next to resolve the issue?

Hard
83

A developer is implementing a Cisco Intersight API solution to manage multiple UCS domains. They receive an HTTP 403 Forbidden response when trying to create an organization. What is the most likely issue?

Hard
84

A developer is writing unit tests for a Python function that parses JSON responses from a Cisco Meraki API. The function takes a JSON string and returns a dictionary. The developer wants to follow best practices for unit testing. Which TWO of the following are recommended practices when writing these tests? (Choose two.)

Medium
85

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. After a successful request, the response includes a Link header with rel="next" pointing to the next page. What does this indicate about the API's pagination?

Hard
86

Which Git command is used to switch to an existing branch named 'feature-x' and update the working directory?

Medium
87

Which two statements about the Cisco DevNet Sandbox are true?

Hard
88

A developer is using the Meraki Dashboard API and receives a 429 Too Many Requests error. The API documentation states a rate limit of 5 calls per second. What is the best practice to handle this?

Hard
89

A developer is using the Cisco Meraki Dashboard API to retrieve the list of organizations associated with an API key. The script must handle the response and avoid exposing the API key. Which HTTP header should be used to supply the API key?

Medium
90

A DevOps engineer is automating network configuration using REST APIs. The engineer needs to choose between NETCONF and OpenFlow as southbound protocols. Which TWO statements are correct?

Hard
91

A Python script using the Cisco Meraki API must update the SSID settings for a network. Which HTTP method should be used to modify an existing SSID?

Easy
92

A Python script using ncclient to configure a Cisco IOS XE device fails with an error that the capability 'urn:ietf:params:xml:ns:netconf:base:1.0' is missing. What is the most likely cause?

Hard
93

A network engineer wants to automate the configuration of multiple Cisco IOS devices using Ansible. What is the minimum requirement on the control node to execute Ansible playbooks against these devices?

Easy
94

Refer to the exhibit. This JSON response was received from the Cisco DNA Center API. A developer wants to extract the software version of the first device. Which Python expression correctly retrieves '16.12.5' from the variable `data`?

Hard
95

A developer is integrating a Python application with the Cisco DNA Center API. The application must handle rate limiting gracefully. The API returns HTTP 429 Too Many Requests with a 'Retry-After' header indicating the number of seconds to wait before retrying. Which approach best implements exponential backoff with jitter to respect the rate limit and avoid overwhelming the server?

Hard
96

A developer is deploying an application to a Kubernetes cluster and must ensure that the application's configuration values, such as a database hostname and port, are injected as environment variables without storing them in the container image. Which Kubernetes resource should be used?

Hard
97

A developer is writing a Python script that must call a Cisco DNA Center REST API. The script must authenticate with a username and password over HTTPS and receive a token that is valid for subsequent API calls. The developer wants to avoid embedding the credentials in the script. Which approach should be used?

Medium
98

Which HTTP status code indicates that a POST request successfully created a new resource?

Medium
99

A developer is integrating a monitoring application with Cisco Meraki API to retrieve network health data. The application needs to ensure it doesn't exceed the API rate limit of 5 requests per second. What is the best practice for handling this limitation?

Easy
100

A development team is adopting container security practices for their Docker-based microservices. They want to reduce the attack surface of their running containers. Which TWO practices should they implement? (Choose two.)

Medium
101

An application needs to authenticate to Cisco DNA Center. Which authentication method is used?

Medium
102

A DevOps team is developing a CI/CD pipeline for a microservices application that uses Cisco NSO (Network Services Orchestrator) for network configuration. The application code is stored in a Git repository. The pipeline must automatically trigger a test suite when a pull request is merged to the main branch, but only if the tests pass, then deploy to a staging environment. The team is using Jenkins. A junior engineer suggests using a single Jenkinsfile with a declarative pipeline that includes all stages. However, a senior engineer notes that the pipeline should be designed for reusability and maintainability, especially as the number of microservices grows. Which approach best meets these requirements?

Hard
103

Drag and drop the steps to configure OSPF on a Cisco router into the correct order.

Medium
104

A developer runs `python -c "import requests; r=requests.get('https://api.example.com/v1/status'); print(r.json())"` on a Linux host. The command returns a JSON payload instantly, but when the same request is sent to `http://api.example.com/v1/status` the client hangs and later times out with no response. Which network-layer behavior best explains why the HTTPS URL succeeds while the HTTP URL fails?

Medium
105

A developer runs a Python script that uses the requests library to call a REST API endpoint. The script receives an HTTP 401 Unauthorized response. The developer confirms the URL is correct and the server is reachable. Which action should the developer take to resolve the issue?

Easy
106

Which TWO of the following are southbound protocols in SDN?

Medium
107

An engineer needs to automate the backup of configuration files from multiple Cisco IOS devices to a central server. Which protocol is most appropriate for pushing configurations from the devices to the server?

Easy
108

What is the output of the following code? my_list = [1, 2, 3] for i in range(len(my_list)): my_list[i] += 1 print(my_list)

Easy
109

The exhibit shows a JSON response from a Cisco NX-OS API query for interface status. What is the operational state of interface Ethernet1/1?

Easy
110

A Docker container running a web application needs to be accessible on the host's port 8080. The application inside the container listens on port 80. Which docker run command achieves this?

Medium
111

A network engineer is designing a data center network with leaf-spine topology. The requirement is to minimize latency and maximize bandwidth for east-west traffic. Which type of links should be used between leaf and spine switches?

Medium
112

A network administrator is configuring SNMPv3 on a router for secure monitoring. Which combination of parameters is required to ensure authentication and encryption?

Medium
113

A network engineer wants to retrieve a list of all network devices from Cisco DNA Center using REST API. Which URL and HTTP method should be used?

Easy
114

In the context of microservices for network automation, which pattern ensures that each service has a separate database to avoid tight coupling?

Hard
115

A DevOps engineer is using the Cisco Meraki API to retrieve a list of networks. Which HTTP method should be used?

Easy
116

A developer is writing a Python script that uses the Cisco SD-WAN (vManage) API to create a device template. The API requires the request body to include the template configuration and the device model. Which HTTP method and resource path should the developer use?

Medium
117

A developer is integrating a Python script with Cisco Webex Teams. The script must create a new space and then immediately post a message to that space. After the POST to /v1/rooms, the API returns HTTP 200 with a JSON body containing the new room's id. The script then needs to send a message. Which approach correctly uses the API response to post the message to the newly created room?

Medium
118

What is the primary function of a switch in a network?

Easy
119

A developer is automating network configuration using Cisco DNA Center. They want to deploy a configuration template to multiple devices. Which API category should they use?

Medium
120

A developer is integrating with the Cisco Meraki Dashboard API. They need to update the name of an existing network. Which HTTP method should they use to modify only the name attribute without affecting other attributes?

Medium
121

A developer wants to deploy a containerized application on a Cisco Container Platform (CCP) cluster. The application requires persistent storage. Which Kubernetes resource should be used to provision storage?

Medium
122

When making API calls to Cisco Meraki Dashboard, what header must be included for authentication?

Medium
123

Which TWO statements accurately describe characteristics of infrastructure as code (IaC) in network automation?

Hard
124

A developer wants to run a Docker container in detached mode, mapping host port 8080 to container port 80, and mounting a host directory for persistent data. Which command accomplishes this?

Medium
125

Which DNS record type is used to verify domain ownership for email security (SPF) and is stored as a text string?

Medium
126

A developer is preparing a Python application for deployment to a Kubernetes cluster. The application reads configuration values such as the database host and API endpoint from a file mounted at /etc/config/app.conf. The values differ between the staging and production clusters. Which Kubernetes resource should the developer use to inject these values into the pod without baking them into the container image?

Medium
127

In a Kubernetes deployment, a developer needs to expose a set of pods internally within the cluster on a stable IP address. The pods are stateless and serve HTTP traffic. Which Service type should be used?

Medium
128

A network engineer is deploying a new application that requires low-latency, high-throughput communication between two data centers. The engineer decides to use UDP instead of TCP for the application's transport protocol. Which two characteristics of UDP make it suitable for this scenario? (Choose two.)

Hard
129

A developer is building a container image for a Node.js API. The Dockerfile currently starts with FROM node:18, copies source code, and runs npm install. Builds are slow because dependencies are reinstalled on every code change. The developer wants to leverage Docker layer caching so that npm install runs only when package.json changes. Which change should be made to the Dockerfile?

Medium
130

Which header is used to pass an API key in Meraki Dashboard API requests?

Medium
131

During a security audit, it is found that a microservice exposes its internal IP address in error responses. This could help attackers map the network. What is the BEST remediation?

Medium
132

A developer is building a Python application that calls the Cisco DNA Center Intent API to retrieve device health. The application must handle pagination and rate limiting gracefully. After receiving an HTTP 429 response, which action should the application take?

Hard
133

A network administrator needs to assign IP addresses to devices on a subnet with a /25 prefix. How many usable host addresses are available?

Easy
134

During a network migration, an engineer needs to replace a legacy core switch with a new one without disrupting the existing STP topology. The new switch supports RSTP and will be connected via two trunk links. Which configuration should be applied to the new switch to prevent it from becoming the root bridge?

Hard
135

Which Cisco platform provides an Intent API for network automation, including endpoints for network-device, topology, and site hierarchy?

Medium
136

A developer is building a Python application that consumes the Cisco Webex Teams API. The application needs to handle rate limiting gracefully. Which TWO of the following are appropriate strategies when the API returns a 429 Too Many Requests status code? (Choose two.)

Hard
137

A developer wants to automate the configuration of multiple Cisco IOS-XE devices using Ansible. Which protocol should be used to ensure secure and idempotent configuration updates?

Easy
138

In the context of Cisco Webex APIs, which mechanism allows an application to receive real-time notifications when a message is created in a space?

Hard
139

A company uses Cisco DNA Center to manage their network. A developer wants to retrieve the overall health score of a specific site using the DNA Center REST API. Which API path should be used?

Medium
140

A company is deploying a new application that requires low-latency communication between servers in the same data center. The network team is designing a leaf-spine architecture. What is the primary advantage of this topology over a traditional three-tier design?

Medium
141

A company deploys a microservice using Kubernetes. The service must be accessible externally via a stable IP address and load-balanced across pods. Which Service type should be used?

Medium
142

An engineer is troubleshooting a Cisco DNA Center API call that returns a 401 error. What is the most likely cause?

Medium
143

In a microservices architecture, which of the following is a key characteristic compared to a monolithic architecture?

Hard
144

A developer is automating VLAN configuration on a Cisco switch using REST API. Which HTTP method should be used to create a new VLAN?

Easy
145

A Kubernetes deployment is configured with replicas: 3. During a rolling update, the deployment strategy is set to RollingUpdate with maxSurge: 1 and maxUnavailable: 0. What is the maximum number of pods that will be running during the update?

Hard
146

Which THREE of the following are features of HTTP/2?

Hard
147

In gNMI, what is the difference between dial-in and dial-out streaming?

Hard
148

An organization is planning to implement HTTPS for their web services. Which three statements accurately describe the HTTPS protocol? (Choose three.)

Hard
149

In the context of REST API design, which HTTP status code should be returned when a client sends a request that exceeds the API rate limit?

Medium
150

A developer is writing a Python script to interact with a Cisco device using NETCONF. Which library is most appropriate?

Medium
151

What is the primary benefit of using HTTP/2 over HTTP/1.1?

Easy
152

A network automation engineer is using the NETCONF protocol to configure a Cisco IOS XE device. The engineer sends an <edit-config> RPC with a candidate datastore, but the configuration does not take effect until a <commit> operation is performed. Which NETCONF capability must be supported by the device to allow this workflow?

Medium
153

Which HTTP method is used to partially update an existing resource in a RESTful API?

Easy
154

Which three statements about Webex API webhooks are true? (Choose three.)

Hard
155

Which THREE of the following are true about HTTP/2 compared to HTTP/1.1? (Select three.)

Hard
156

A developer is using the Cisco Webex Teams API to manage memberships in a space. Which two HTTP methods and corresponding endpoints are used to add a new member and to remove an existing member? (Choose two.)

Hard
157

A developer is deploying a containerized application to a Kubernetes cluster. The application must be accessible from outside the cluster on a stable IP address that does not change if the underlying pods are rescheduled. Which Kubernetes Service type should be used?

Medium
158

A Python developer is working on a microservices project where one service needs to communicate with another service that exposes a GraphQL API. Which THREE statements about GraphQL compared to REST are accurate? (Choose three.)

Hard
159

An engineer needs to troubleshoot a RESTCONF request that returns a 409 Conflict error when trying to modify a YANG data node. What is the most likely cause?

Hard
160

A network engineer is analyzing a packet capture and notices that a host is sending a TCP segment with the SYN flag set and the ACK flag not set. The destination port is 443. Which of the following best describes what the host is attempting to do?

Hard
161

A Python function is designed to fetch device data from multiple sources. It uses *args to accept variable number of API endpoints and **kwargs for optional parameters like timeout. Which function definition correctly implements this?

Medium
162

A developer is writing a Python script that uses the requests library to call a REST API. The API requires an API key in the header 'X-API-Key'. The developer wants to ensure the key is not hardcoded in the script and is instead read from an environment variable. Which code snippet correctly implements this?

Medium
163

A network technician runs the command 'ping 8.8.8.8' from a workstation and receives 'Reply from 192.168.1.1: Destination host unreachable.' What does this indicate?

Easy
164

A DevOps engineer is deploying a containerized application to a Kubernetes cluster. The application needs to read a database password at runtime, and the team wants the value to be injected as an environment variable without storing it in the container image or the Deployment manifest. Which Kubernetes resource should be used?

Medium
165

A developer must build a Python script that reads a list of devices from a YAML inventory file and then pushes configuration to each device using NETCONF over SSH. The script must be reusable and must not hardcode credentials. Which approach best satisfies these requirements?

Medium
166

A developer is building a Python application that uses the Cisco Meraki Dashboard API to update VLAN settings on a network. The application must handle API errors gracefully and avoid being rate-limited. The developer wants to implement logic that inspects the response status code and the Retry-After header. Which two actions should the developer take when the API returns HTTP 429? (Choose two.)

Hard
167

In Software-Defined Networking (SDN), which interface is used for communication between the controller and the network devices (e.g., switches) to forward traffic?

Medium
168

A Meraki dashboard API request to list networks returns a paginated response. The engineer notices a Link header in the response. What does this header typically contain?

Medium
169

A script is using the Cisco Meraki API to fetch a list of organizations. The script needs to authenticate with an API key. Where should the API key be included in the request?

Easy
170

A developer is using NX-API on a Cisco Nexus switch to execute CLI commands via JSON. Which endpoint and method should be used?

Hard
171

A network engineer is using Ansible to automate the configuration of a Cisco IOS XE device. The playbook must ensure that a specific banner is present on the device. Which Ansible module should the engineer use to accomplish this task in a vendor-supported way?

Easy
172

Which TWO of the following are characteristics of UDP compared to TCP? (Select two.)

Medium
173

A developer is integrating a Python application with the Cisco Webex API. The application must act on behalf of users to create messages in Webex spaces. The developer wants to avoid storing user credentials. Which OAuth 2.0 flow is most appropriate for this scenario?

Hard
174

Given the following Python code snippet: with open('config.json', 'r') as f: data = json.load(f) print(data['interfaces'][0]['name']) What is the expected output if config.json contains {"interfaces": [{"name": "GigabitEthernet0/1"}]}?

Medium
175

A developer needs to create a Postman collection that uses a variable for the base URL and a token variable for authentication. The token is obtained from a login request and must be reused across requests. Where should the token variable be defined to persist across all requests in the collection?

Medium
176

A DevNet engineer is building a Python script that calls the Cisco Webex Teams API to post a message. The script currently stores the access token in a plain text variable at the top of the file, which is committed to a Git repository. The team wants to keep the token out of source control while still allowing the script to authenticate. Which approach should be used?

Medium
177

A developer is writing a Python script that authenticates to Cisco DNA Center using the token-based authentication API. The script must obtain a token and reuse it for subsequent REST calls until it expires. Which HTTP header should the script include in each subsequent API request to pass the token?

Medium
178

A developer is using a REST API to retrieve data from a network controller. The API requires the client to include an API key in the HTTP request header for authentication. Which HTTP header is typically used to carry the API key?

Easy
179

A DevOps team manages a hybrid cloud environment with on-premises Cisco Nexus switches and AWS VPCs using Terraform. They have a configuration management tool that pushes VLAN and interface configurations to the Nexus switches. Recently, they noticed that after a Terraform run that updates the AWS VPC subnets, some on-premises switches lose connectivity to the cloud. The team suspects a mismatch between the VLAN configurations on the Nexus switches and the AWS VPC subnets. They have a centralized source of truth stored in a Git repository containing YAML files for network definitions. Which action should the team take first to resolve the issue and prevent future occurrences?

Easy
180

A developer is writing a Python script that calls a REST API. The script currently contains the API key as a string literal. The team wants to move the key out of source control and inject it at runtime in a CI/CD pipeline. Which approach best meets this requirement?

Easy
181

A network automation engineer is writing a YAML playbook to push a banner configuration to a group of Cisco IOS XE routers. The engineer wants to use an agentless tool that connects over SSH and requires no software installed on the managed devices. Which tool fits this description?

Easy
182

A developer wants to retrieve a list of network devices from Cisco DNA Center. Which HTTP method and URL structure should be used?

Easy
183

A developer is using the Meraki Dashboard API to list the organizations accessible by the API key. They send a GET request to https://api.meraki.com/api/v1/organizations. What is the correct way to pass the API key?

Medium
184

Which TWO of the following are commonly used HTTP methods for a RESTful API to retrieve and update a resource? (Select TWO)

Medium
185

A developer is using the Cisco Meraki Dashboard API to update the configuration of a wireless SSID. The API requires a PUT request to /networks/{networkId}/wireless/ssids/{number}. Which HTTP header is mandatory to include the API key for authentication?

Hard
186

A network engineer is designing a subnet that needs to support 30 usable hosts. Which subnet mask should be used?

Medium
187

A security team is reviewing a CI/CD pipeline that builds container images and pushes them to a registry. They want to reduce the attack surface of the resulting images and ensure that only trusted images are deployed. Which TWO practices should be implemented? (Choose two.)

Hard
188

A developer uses Cisco Intersight API to manage UCS servers. Which authentication method is required for Intersight API calls?

Easy
189

A network automation engineer needs to retrieve the current interface configuration from a Cisco IOS XE device using RESTCONF. The device has RESTCONF enabled and the engineer wants to read the configuration data for interfaces in the 'ietf-interfaces' model. Which HTTP method and URL format should the engineer use?

Easy
190

A YANG module defines a leaf named 'bandwidth' of type 'uint32'. What does this represent in the context of a network device?

Easy
191

A network engineer is automating the deployment of VLANs across multiple switches using Ansible. The playbook fails with an error indicating that the VLAN ID already exists on one of the switches. Which approach should the engineer use to ensure the playbook completes without errors?

Medium
192

In version control with Git, which command creates a new branch and switches to it in one step?

Medium
193

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required, such as a backend service calling Cisco API?

Medium
194

A developer wants to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint should they use?

Easy
195

During an automation script run, a network device returns HTTP 429. What does this indicate?

Medium
196

A network administrator is configuring subnetting for a new branch office that requires 50 usable host addresses per subnet. The available network is 192.168.10.0/24. What subnet mask should be used to meet the requirement with minimal waste?

Medium
197

A Python script sends a PUT request to update a resource. The API returns a response with status code 204. What does this indicate?

Medium
198

An application sends a packet with destination IP 10.0.0.10. The sending host's routing table has a default gateway of 10.0.0.1. The host's ARP cache is empty. What is the next step after the host determines the packet should go to the default gateway?

Hard
199

Which THREE of the following are characteristics of NETCONF? (Select THREE)

Hard
200

A network administrator is configuring a switch and needs to segment traffic into multiple broadcast domains while also allowing communication between them. Which device or feature should be used to achieve this?

Hard
201

A developer writes a Python script that calls the Cisco DNA Center Intent API. The script must authenticate once and reuse the returned token on subsequent requests instead of sending credentials with every call. Which HTTP header should the script include on each API request to present the token?

Medium
202

A network engineer is analyzing a packet capture and observes that a host sends a TCP segment with the SYN flag set, then receives a segment with both SYN and ACK flags set, and finally sends a segment with only the ACK flag set. Which TCP mechanism is being demonstrated?

Hard
203

A developer is making a GET request to a REST API and needs to specify that the response should be in JSON format. Which HTTP header should be set?

Easy
204

Which THREE of the following are common steps in a CI/CD pipeline for a Python application that manages Cisco devices?

Medium
205

A CI/CD pipeline for a Python project should run unit tests and check for known vulnerabilities in dependencies. Which tool can be integrated into the pipeline to perform dependency scanning?

Medium
206

A network administrator uses the Cisco IOS XE CLI to configure a router. They want to use a Python script to automate this configuration via the guest shell. Which library should they use to interact with the CLI from within the guest shell?

Medium
207

A developer is using the Cisco DNA Center API to manage devices. The developer needs to perform operations that are part of the 'Site Management' API category. (Choose two.)

Hard
208

Which THREE of the following are best practices when using Git for a collaborative project? (Choose three.)

Hard
209

A developer is working with the Meraki Dashboard API to manage SSIDs. Which TWO statements about pagination are correct? (Choose two.)

Medium
210

A developer is writing a Python script using the Cisco Webex Teams API to send a message to a specific room. The script works for some rooms but fails for others with a 404 error. What is the most likely reason?

Hard
211

A network engineer is configuring a switch and needs to assign an IP address to a VLAN interface for management purposes. The engineer wants to ensure that devices on different VLANs can communicate through the switch. Which feature must be enabled on the switch to allow inter-VLAN routing?

Easy
212

Given the JSON string: '{"name": "Alice", "scores": [90, 85, 92]}', which Python code correctly extracts the second score (85)?

Medium
213

An application exposes a REST API. To ensure that only authorized clients can access the API, the developer implements token-based authentication. Which HTTP header is typically used to transmit the bearer token?

Easy
214

At which layer of the OSI model do switches operate when forwarding frames based on MAC addresses?

Easy
215

Which TCP flag is set in the second step of the three-way handshake?

Medium
216

A developer is building a chatbot that retrieves interface status from a Cisco Catalyst 9000 switch using RESTCONF. Which authentication method is most appropriate for programmatic access?

Medium
217

A developer is working with a REST API that uses HTTP Basic Authentication. The developer needs to send a request with the username 'admin' and password 'secret'. Which HTTP header should be set?

Easy
218

A developer is writing a Python script to interact with a Cisco IOS XE device using the NETCONF protocol. The script uses the ncclient library to establish a connection and retrieve the running configuration. Which method should the developer use to retrieve the configuration?

Medium
219

A developer is building a CI/CD pipeline that must securely manage secrets such as API keys and database passwords. Which two practices should be implemented to protect these secrets throughout the pipeline? (Choose two.)

Medium
220

A developer is writing a unit test for a Python function that calls the Cisco Meraki Dashboard API to retrieve a list of organizations. The test must run without making real HTTP requests to the Meraki cloud. Which technique should be used to isolate the function under test?

Easy
221

A developer is using gRPC/gNMI for model-driven telemetry from a Cisco device. Which of the following best describes the difference between dial-in and dial-out streaming?

Medium
222

A developer is building a Cisco Webex bot that needs to automatically respond to messages. Which THREE resources/endpoints are essential for this functionality? (Choose three.)

Hard
223

A developer is building a Python script to configure a Cisco IOS XE device using NETCONF. The script must send an <edit-config> RPC that places the target datastore in candidate mode, changes the description of GigabitEthernet0/0, and commits the change. Which NETCONF capability must the device advertise for the script to use the candidate datastore?

Medium
224

In a Cisco DNA Center environment, an application needs to retrieve the network device list using REST API. Which authentication method is required?

Medium
225

Which Cisco platform provides a cloud-managed dashboard with a REST API that uses an API key in the header and has a rate limit of 5 requests per second?

Easy
226

An organization has a web server that needs to be reachable via both 'www.example.com' and 'example.com'. Which DNS record type should be used to make 'example.com' an alias for 'www.example.com'?

Medium
227

Which TWO of the following Git commands modify the commit history? (Select TWO)

Hard
228

Which HTTP header is used to specify the format of the request body (e.g., application/json) when sending a POST request to a REST API?

Medium
229

A web application uses HTTPS to secure communications between client and server. What does HTTPS add on top of HTTP to provide encryption and authentication?

Easy
230

A developer is implementing gRPC telemetry with dial-out streaming from a Cisco IOS XE device. Which component initiates the TCP connection to the collector?

Hard
231

Which TWO Cisco platforms provide comprehensive REST APIs for network configuration and monitoring?

Easy
232

Which Docker command is used to build an image from a Dockerfile?

Easy
233

A development team runs a Python Flask API in a Docker container. The image was built with the Flask development server bound to 0.0.0.0:5000, and the container is started with the published port mapping 8080:5000. Users report that requests to the host on port 5000 are refused, while port 8080 works. Which statement explains this behaviour?

Hard
234

A developer is using the Cisco Meraki Dashboard API to update the VLAN configuration on a switch port. The API call returns a 404 Not Found error. The developer has verified that the API key is valid and the organization ID and network ID are correct. What is the most likely cause of the 404 error?

Hard
235

A company has two Cisco Catalyst switches, SW1 and SW2, connected via a trunk link using port GigabitEthernet0/1 on both switches. SW1 is the root bridge for all VLANs spanning tree. VLAN 10 users on SW1 report they can access the internet and resources in VLAN 10 on SW2, but cannot reach a critical server in VLAN 20 connected to SW2. The server in VLAN 20 has a static IP address and can communicate with other VLAN 20 devices on SW2. SW2's configuration for the trunk port includes 'switchport trunk allowed vlan 10,20'. SW1's trunk port configuration is 'switchport trunk allowed vlan 10'. The network administrator has verified that both switches have VLANs 10 and 20 created and that the default gateways are correct. What is the most likely cause of the issue?

Easy
236

A DevOps team is automating network configuration using Ansible. They want to push a new VLAN configuration to a switch but ensure that only one switch is updated at a time to avoid network disruption. Which Ansible strategy or feature should they use?

Hard
237

In a Kubernetes cluster, you need to expose a set of pods running a web application to external traffic on a specific port. Which Service type should you use to provide a stable external IP address?

Hard
238

A Python function is defined as: def process(*args, **kwargs): return sum(args) + kwargs.get('offset', 0) What is the result of process(1, 2, 3, offset=10)?

Medium
239

Which HTTP status code indicates that a POST request successfully created a new resource on the server?

Medium
240

A DevOps team is deploying a microservices application that requires both reliable data transfer and low-latency real-time communication. Which two protocols should be used for these respective requirements? (Choose two.)

Easy
241

A Kubernetes administrator wants to use kubectl to troubleshoot a pod named 'my-pod' that is not starting. Which TWO commands are useful? (Choose two.)

Hard
242

A developer is working on a Git repository and needs to temporarily save changes that are not ready to be committed so they can switch to another branch to fix a bug. Which Git command should the developer use to stash the current changes?

Easy
243

A network engineer is configuring a new Cisco switch and needs to assign an IP address to a VLAN interface so that the switch can be managed remotely over the network. The engineer enters the commands: interface vlan 10, then ip address 192.168.10.2 255.255.255.0, then no shutdown. However, the interface remains down. What is the most likely cause?

Easy
244

A developer is writing a Python script to iterate over a list of server hostnames. Which loop structure is most appropriate to process each hostname in the list?

Easy
245

Which THREE are benefits of using YANG as a data modeling language for network automation? (Select exactly 3.)

Hard
246

When using the Meraki Dashboard API, what HTTP header is used to pass the API key?

Easy
247

A developer wants to use the Cisco Webex API to send a message to a specific person by email. Which parameter should be used in the POST /v1/messages request?

Medium
248

Which of the following is a private IPv4 address range as defined by RFC 1918?

Easy
249

Which TWO methods are commonly used to discover network devices in an automation environment? (Select exactly 2.)

Medium
250

A network engineer is writing a Python script to interact with Cisco DNA Center. After successfully authenticating and receiving a token, what header must be included in subsequent API requests?

Easy
251

A developer is designing a Python script that interacts with a REST API. The script must handle common HTTP methods appropriately. Which TWO of the following statements correctly describe the use of HTTP methods in RESTful APIs? (Choose two.)

Medium
252

A Kubernetes pod runs two containers that need to share a filesystem. Which volume type should be used to enable file sharing between the containers within the same pod?

Medium
253

A network administrator is tasked with automating the deployment of a new VLAN configuration across a fabric of Cisco ACI switches. Which automation tool is best suited for interacting with the APIC REST API?

Medium
254

Which TWO statements about REST API design best practices are correct?

Hard
255

Which Cisco DNA Center API is used to retrieve a list of network devices?

Easy
256

Which layer of the OSI model uses MAC addresses to deliver frames within the same network segment?

Easy
257

What is the default transport protocol for NETCONF sessions?

Easy
258

A developer is writing a web application and needs to prevent SQL injection attacks. Which coding practice is most effective?

Medium
259

Which THREE of the following are key characteristics of a RESTful API? (Choose three.)

Medium
260

A developer is writing a Python script that interacts with a REST API. The API requires authentication using a token. Which HTTP header should the developer include in the request to pass the token?

Easy
261

A developer is building a container image for a Python application using Docker. The Dockerfile contains several instructions, including a RUN pip install command that downloads dependencies. The developer wants to reduce the final image size and improve build cache efficiency. Which Dockerfile instruction should be used to combine multiple commands and avoid leaving unnecessary files in the image layer?

Medium
262

A developer is using Git to contribute to a shared repository. After making several commits on a local feature branch, the developer wants to integrate the latest changes from the remote main branch into the feature branch while keeping a linear history. Which Git command should be used?

Easy
263

A security review of a CI/CD pipeline finds that build jobs run with credentials that have far more privilege than needed, and that the same long-lived token is reused across repositories. Which TWO changes reduce the blast radius if a pipeline credential is compromised? (Choose two.)

Medium
264

Which THREE of the following are valid NETCONF operations? (Choose three.)

Hard
265

A Python script using the Cisco Meraki SDK fails with 'APIError: 429 Too Many Requests'. What action should the developer take?

Easy
266

Which IP address is a valid host address in the 192.168.1.0/24 network?

Medium
267

A developer runs a Python script that calls a REST API on a remote server. The script hangs indefinitely with no response. The developer opens a terminal and runs `curl -v https://api.example.com/status`. The output shows that the TCP three-way handshake completes, but the TLS handshake never starts. Which of the following is the most likely cause?

Medium
268

Which three statements are true about the Cisco Catalyst Center (formerly DNA Center) intent API? (Choose three.)

Hard
269

A developer is working on a Python script that performs CRUD operations on devices via a REST API. Which HTTP method should be used to update an existing device's configuration partially?

Easy
270

An administrator wants to retrieve a list of all network devices from Cisco DNA Center using the REST API. Which authentication method must be used first to obtain a token?

Easy
271

A developer is writing a Python script that will authenticate to a Cisco DNA Center controller and then call multiple REST API endpoints. The script must handle authentication securely and manage the token lifecycle. Which two practices should the developer follow? (Choose two.)

Medium
272

Refer to the exhibit. A developer sends a PUT request to the RESTCONF endpoint with the above JSON payload. The device already has interface GigabitEthernet1/0/1 configured with IP address 10.10.10.1/24. What is the expected outcome?

Hard
273

A network automation engineer needs to ensure that a Python script can securely store and retrieve API credentials for Cisco DNA Center without hardcoding them in the script. Which method is the most appropriate?

Easy
274

Which TWO are valid capabilities advertised during a NETCONF session?

Easy
275

A CI/CD pipeline is configured to build a Docker image, run unit tests, and push the image to a registry. To ensure that only successfully tested images are pushed, which stage order is correct?

Hard
276

A developer needs to parse a JSON string received from a REST API into a Python dictionary. Which function should they use?

Medium
277

A developer is troubleshooting an API call to Cisco SD-WAN vManage. The request fails with HTTP 400 status and the response body: '{"error": "Bad Request", "details": "Invalid JSON: unexpected token at position 42"}'. Which tool or technique should the developer use to quickly identify the syntax error?

Hard
278

A developer is writing a Python function that accepts a list of interface names and returns a dictionary mapping each interface name to the number of characters in that name. The function should also verify that the input is a list and raise a TypeError otherwise. Which approach correctly implements the described behavior?

Medium
279

A developer wants to get the current user's information from the Webex API. Which endpoint should they use?

Easy
280

A developer needs to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint and HTTP method should be used?

Easy
281

When designing a RESTful API for a network automation tool, which status code indicates that a resource has been created successfully?

Easy
282

A developer is building a Python application that consumes the Cisco Meraki Dashboard API. The application must handle rate limiting gracefully when it performs many calls in a short period. Which response should the application check to determine that it has exceeded the rate limit and must wait before retrying?

Hard
283

A developer is writing a Python unit test for a function that makes an HTTP request to an external API. To avoid network calls during testing, the developer wants to mock the requests.get function. Which Python library is specifically designed for mocking in unit tests and is part of the standard library?

Medium
284

A web application is vulnerable to SQL injection. Which secure coding practice should the developer implement in the code to prevent this?

Medium
285

A network engineer is subnetting the network 192.168.1.0/24 into subnets that each support at least 50 hosts. What subnet mask should be used?

Hard
286

A developer is building a Python application that consumes the Cisco Meraki Dashboard API. The application must store the API key securely and include it on every request. Which HTTP request header should the application set to authenticate each call?

Easy
287

An engineer is troubleshooting an application running in a Docker container. The container is running but the application is not responding. The Dockerfile EXPOSE instruction lists port 8080, and the container was started with the command: docker run -d -p 8080:80 myapp. Which command should the engineer use to verify the application's actual listening port inside the container?

Medium
288

A REST API uses offset and limit parameters for pagination. If the first request returns items 0-49 with limit=50 and offset=0, how should the next request be constructed to get the next page?

Medium
289

A development team is using Docker Compose to run a multi-container application. They need to ensure that the web service can resolve the hostname 'db' to the database container's IP address. Which network configuration in the docker-compose.yml file achieves this?

Hard
290

Which Docker networking mode provides the most isolation by not connecting the container to any network?

Easy
291

A developer is configuring a new application server and needs to allow HTTP traffic from web clients. Which port should be opened on the firewall to permit standard unencrypted HTTP traffic?

Easy
292

A developer clones a shared repository and creates a feature branch, but a teammate pushes a commit to the main branch that conflicts with local edits. The developer wants to bring those upstream changes into the feature branch and resolve conflicts before opening a pull request. Which Git operation should be used?

Medium
293

A Python script uses a try/except block to handle API errors. If the API returns a 429 status code, which mechanism should the script implement to handle the error appropriately?

Hard
294

Which TWO of the following are best practices for securely managing API tokens in a CI/CD pipeline?

Easy
295

A developer is writing a Python script that calls a REST API protected by OAuth 2.0. The script runs unattended on a server and must obtain an access token without any user interaction. The authorization server supports the client credentials grant. Which flow should the developer implement?

Easy
296

A developer is writing a Python function that accepts a variable number of interface names and returns them as a tuple. Which function definition correctly allows an arbitrary number of positional arguments?

Easy
297

An application needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should be used?

Medium
298

In Software-Defined Networking (SDN), the control plane is separated from the data plane. Which of the following best describes the function of the southbound API?

Hard
299

Which three actions can an EEM applet perform when triggered? (Choose three.)

Hard
300

A network engineer runs an Ansible playbook to backup a Cisco router configuration. The playbook fails with the error: 'ssh: connect to host 192.168.1.1 port 22: Connection timed out'. What is the most likely cause?

Easy
301

A developer is using the Cisco NX-OS REST API (NX-API) to configure a Cisco Nexus switch. The developer wants to send a JSON payload to create a new VLAN. Which HTTP method and headers are required to use the NX-API REST interface?

Medium
302

In the OSI model, which layer is responsible for session management, including establishing, maintaining, and terminating connections between applications?

Hard
303

A developer's script calls a REST API and receives HTTP 429 Too Many Requests. The response includes a Retry-After header with a value of 30. What should the script do to behave correctly?

Medium
304

A developer is building a Python script that calls the Cisco Webex Rooms API. The API returns a JSON error response with HTTP status code 429. The script currently retries immediately in a tight loop, but the errors persist. What should the developer implement to correctly handle this response?

Medium
305

A developer has created a Webex Teams bot that listens for messages in a specific room and responds with information from an external database. The bot uses the Webex API's 'messages.create' method to post replies. During testing, the bot sometimes fails to respond, but no errors are logged. The developer checks the Webex Developer Portal and sees that the bot's rate limit is set to 10 requests per second. The bot's average load is 5 requests per second, but occasionally spikes to 15 requests per second for a few seconds. The developer wants to ensure the bot functions reliably without exceeding rate limits. Which approach should the developer implement?

Medium
306

A developer needs to securely store API keys for use in a CI/CD pipeline. Which best practice should be followed?

Easy
307

Which HTTP method is considered both safe and idempotent?

Easy
308

In a Postman collection, a developer stores the base URL of a Meraki API as a variable. Which Postman feature allows this?

Easy
309

A developer is building a dashboard that displays the health status of network devices managed by Cisco ACI. The developer uses the ACI REST API to query the APIC (Application Policy Infrastructure Controller). The developer sends a GET request to https://apic-ip/api/class/fabricHealthInst.json returns a JSON object with health scores. The dashboard works for a small set of devices, but when scaled to 500 devices, the API responses become slower and sometimes time out. The developer needs to optimize the data retrieval to keep the dashboard responsive. Which approach should the developer use?

Easy
310

Refer to the exhibit. What is the most effective action to eliminate both vulnerabilities in the container image?

Hard
311

In the Ansible playbook snippet, what connection method is typically used for the ios_config module to communicate with the devices?

Easy
312

A developer is using the Cisco NX-OS API on a Nexus switch. The developer wants to retrieve the running configuration using a Python script that sends an HTTP POST request. Which command must be configured on the switch to enable this capability?

Hard
313

A developer has a Docker container running a database. They need to inspect the database logs to debug a connection issue. Which command will show the logs in real-time?

Hard
314

A developer wants to receive real-time notifications when a new message is posted in a Webex room. Which Webex API resource should they use?

Easy
315

A network engineer is configuring EtherChannel between two switches. The switches are connected via four links. The engineer wants to load balance traffic based on source and destination IP addresses. Which configuration command should be used on Cisco IOS?

Hard
316

A network engineer is using Cisco DNA Center's Intent API to retrieve a list of all devices in the inventory. The engineer wants to filter the results to only include devices that are reachable and managed. Which HTTP method and endpoint should be used?

Medium
317

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. The API returns a 429 error. What should the developer do to handle this correctly?

Hard
318

A company uses a blue/green deployment strategy for their web application. The current live version is blue, and a new version green is ready. The load balancer currently routes all traffic to blue. What is the correct next step to switch traffic to green with minimal downtime?

Medium
319

A developer pushes a container image to Docker Hub and then discovers that the image layers contain an .env file with production API keys. The team wants future builds to fail automatically in the CI pipeline when secrets are detected in the image before any push occurs. Which approach best addresses this requirement?

Medium
320

In Cisco DNA Center, which API category includes the ability to deploy a configuration template to devices?

Hard
321

A developer is creating a Dockerfile for a Python Flask application. The application runs on port 5000. Which directive should be used to document that the container listens on this port?

Easy
322

A network engineer wants to automate a configuration change on a Cisco IOS XE device when a specific syslog message appears. Which tool should they use?

Hard
323

A Docker container needs to be started in detached mode with port mapping from host port 8080 to container port 80. Which command accomplishes this?

Easy
324

A network engineer writes a Python script to handle exceptions when making REST API calls. Which exception type should be caught to handle network connectivity issues (e.g., DNS failure, refused connection)?

Medium
325

Which THREE options are valid methods to expose a Kubernetes service to external traffic?

Hard
326

A developer is writing a Dockerfile for a Node.js application. Which TWO instructions are commonly used to define the command that runs when the container starts?

Medium
327

A network engineer is troubleshooting connectivity issues and wants to verify the path that packets take from a source to a destination IP address. Which OSI layer is primarily responsible for packet forwarding and routing?

Easy
328

An organization uses Cisco DNA Center and wants to programmatically deploy a configuration template to multiple devices. Which API category should be used?

Medium
329

A network automation team is adopting Git for managing Python scripts and YAML device templates. They want a branching model where each new feature is developed in isolation and merged back into a shared integration branch before release. Which Git branching strategy best matches this requirement?

Easy
330

A developer needs to send a message to a Webex room using the API. Which HTTP method and endpoint should they use?

Easy
331

Which THREE of the following are valid JSON data types? (Choose three.)

Medium
332

An application developer is using a protocol that does not require a connection setup and has minimal header overhead. Which transport protocol is being used?

Easy
333

A DevOps team is using Cisco AppDynamics to monitor a microservices application. They notice that a specific service's response time spikes under load. Which AppDynamics feature should be used to drill down into the transaction trace?

Medium
334

A Kubernetes Service must expose a pod running a database to other pods in the same cluster, but not externally. Which Service type should be used?

Hard
335

A developer is building a Python script that calls the Cisco Webex API. The API returns JSON with a top-level key "items" containing a list of records, and a "link" object with a "next" URL when more records exist. The developer needs to iterate through all pages until every record is retrieved. Which approach correctly handles this pagination style?

Medium
336

A company uses a /24 subnet for its office LAN. The network must accommodate 30 hosts per VLAN. Which subnet mask would be most efficient for each VLAN while minimizing wasted IP addresses?

Medium
337

A network engineer is configuring a new switch and needs to ensure that frames from VLAN 10 and VLAN 20 are isolated on the same trunk link to another switch. Which IEEE standard should be configured on the trunk interfaces?

Easy
338

Refer to the exhibit. Based on the YANG model snippet, what is the data type of the 'mask' leaf?

Hard
339

In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?

Hard
340

An HTTP/2 connection uses multiple concurrent streams over a single TCP connection. Which feature of HTTP/2 enables this?

Hard
341

A developer is writing a script that uses a REST API to configure network devices via NETCONF. Which layer of the SDN architecture does NETCONF belong to?

Medium
342

A developer is building a Python script that calls the Cisco Webex API to retrieve a list of rooms. The API returns a maximum of 100 items per page and includes a 'Link' response header with a rel="next" URL. The script must automatically fetch all pages until no 'next' link remains. Which approach should the developer implement?

Medium
343

A developer is writing a Python script that calls the Cisco Webex Teams API. The script must handle the case where the access token has expired. Which HTTP status code should the script check for to detect an expired or invalid token?

Medium
344

Which OSI layer is responsible for routing packets across different networks?

Easy
345

An application uses the Meraki Dashboard API and receives a 429 Too Many Requests error. What is the most likely cause, and how should the application adjust?

Medium
346

A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?

Medium
347

A software developer is using the Cisco Webex REST API and wants to filter messages by date range. Which two query parameters should be included? (Choose two.)

Easy
348

A developer is writing a script that uses the Cisco SD-WAN vManage REST API to retrieve a list of devices. The script uses the GET method to https://vmanage.example.com/dataservice/device. The API returns a 401 Unauthorized status code. Which of the following should the developer do to resolve the issue?

Medium
349

Which authentication method is used by the Cisco Meraki Dashboard API?

Medium
350

A developer is writing a unit test for a Python function that calls the Cisco DNA Center API to fetch device health. The test must not perform real network calls and should verify that the function parses a sample JSON response correctly. Which approach best satisfies these requirements?

Hard
351

An engineer needs to identify which hosts are reachable in a 10.0.0.0/24 network using an automated script that does not require any credentials on the target devices. Which protocol is best suited for this task?

Easy
352

A network automation solution uses YANG data models to describe network configurations. Which THREE statements about YANG are true? (Select THREE)

Medium
353

A network engineer needs to allow HTTPS traffic from the internet to an internal web server. Which type of firewall rule should be applied on the perimeter firewall?

Easy
354

A developer runs the command: docker run -d -p 8080:80 --name web nginx. Which of the following best describes what happens?

Easy
355

Which header is used in an HTTP request to tell the server the format of the request body?

Easy
356

A developer is testing a REST API with curl and receives a response body containing JSON. They want to confirm that the payload is JSON before parsing it in code. Which HTTP response header should they check?

Medium
357

A developer is writing a Python script that authenticates to a Cisco IOS XE device using NETCONF over SSH on port 830. The script must send a candidate configuration and commit it atomically. Which NETCONF capability must the device advertise for the script to use the candidate datastore?

Medium
358

Which TWO of the following are characteristics of TLS (Transport Layer Security) used in HTTPS? (Choose two.)

Medium
359

A CI/CD pipeline for a microservice application includes stages: code commit, build Docker image, push to registry, deploy to staging, run integration tests, and deploy to production. The team wants to ensure that if integration tests fail, the pipeline stops and does not proceed to production. Which CI/CD concept is used to enforce this behavior?

Medium
360

A Kubernetes pod needs to read configuration data such as database hostname, which is non-sensitive and may change across environments. Which resource should be used to store this data and inject it into the pod?

Medium
361

A network administrator wants to use EEM on an IOS XE device to send a syslog message whenever a specific CLI command is entered. Which event detector should be used?

Hard
362

A developer is building a Python application that manages Cisco IOS XE devices through the Python library ncclient. The application must apply a configuration change atomically, validate it before committing, and avoid persisting the change if validation fails. Which approach should the developer take?

Medium
363

In a Docker Compose file, you want to ensure that the 'web' service starts only after the 'db' service is healthy. Which key should you use under the 'web' service?

Medium
364

An engineer is automating the configuration of SNMP on Cisco routers using Ansible. Which two modules are commonly used for this purpose? (Select TWO)

Easy
365

A developer is writing a Python script to interact with a Cisco Meraki Dashboard API. The script retrieves a list of organizations and then, using the organization ID, retrieves the networks for that organization. The API returns a 200 OK with a JSON body and a Link header containing a URL for the next page. The developer wants to ensure all networks are retrieved. Which approach should the developer take?

Hard
366

Which THREE are characteristics of OSPF? (Choose three.)

Medium
367

Which TWO commands are used to view information about Docker containers? (Select two.)

Medium
368

Refer to the exhibit. A developer receives this response when making a POST request to the Cisco DNA Center API to create a new device. What is the most likely issue?

Hard
369

Refer to the exhibit. A developer is parsing the output of 'show ip route' using Python. Which regular expression would extract the prefix '10.0.1.0/24'?

Easy
370

Which HTTP method is used to partially update a resource in a RESTful API?

Easy
371

Match each YAML structure to its description.

Medium
372

A developer is writing a Python script that calls the Cisco Webex Teams API to create a new space. The API returns the new space object, including a Location header pointing to the newly created resource. Which HTTP status code should the developer expect from a successful space creation?

Medium
373

A developer is using NETCONF to retrieve the running configuration of a network device. Which operation should be used?

Hard
374

A team uses Git for source control. They want to ensure that all code committed to the main branch passes unit tests and linting. Which Git workflow practice best ensures this?

Hard
375

In a CI/CD pipeline for network changes, which practice best ensures that a configuration push does not disrupt production traffic?

Hard
376

A developer is integrating with a REST API that returns JSON error responses. The team needs to handle failures robustly in code. Which TWO practices are appropriate when processing API responses? (Choose two.)

Hard
377

Which wireless security standard provides the strongest encryption and is recommended for enterprise networks as of 2023?

Hard
378

An administrator is configuring DNS records for a company's domain. Which three DNS record types are most commonly used to map hostnames to IP addresses or aliases? (Choose three.)

Medium
379

Which THREE of the following are common design patterns for microservices? (Choose three.)

Hard
380

In a docker-compose.yaml file, which key is used to define the container image to be built from a Dockerfile in the current directory?

Easy
381

A developer is designing a microservices architecture for a network monitoring application. Which of the following is a key advantage of microservices over a monolithic architecture?

Medium
382

Refer to the exhibit. A network engineer runs a script that queries the Cisco DNA Center site health API. The response shows Branch1 with a healthScore of 10. What is the most likely action to improve Branch1's health?

Medium
383

A developer is designing a CI/CD pipeline that deploys to production. The team wants to ensure that a failed security scan blocks the deployment automatically. Which pipeline design element should be implemented?

Hard
384

A developer is writing a Python script to interact with a Cisco IOS XE device using the NETCONF protocol. The script must retrieve the running configuration and then modify it. Which two actions must the script perform to establish a NETCONF session and retrieve the running configuration? (Choose two.)

Medium
385

In HTTP/2, which feature allows multiple concurrent requests and responses to be interleaved on a single connection, improving performance?

Medium
386

Which TWO of the following are essential steps in a typical Git workflow when collaborating on a feature branch? (Choose two.)

Easy
387

A developer is designing an API that needs to support rate limiting per API key. The application is deployed on multiple instances. Which approach ensures consistent rate limiting across all instances?

Medium
388

A Cisco Webex bot needs to receive real-time notifications when new messages are posted in a space. Which API feature should the bot use?

Medium
389

A developer needs to partially update a Meraki network's configuration, changing only the time zone. Which HTTP method should be used on the network resource?

Easy
390

An organization uses a private Docker registry with TLS. A developer attempts to pull an image and receives the error: "x509: certificate signed by unknown authority". What is the most likely cause and solution?

Hard
391

A team uses GitHub for version control and wants Jenkins to automatically run tests when changes are pushed to the main branch. Which trigger should be configured in the Jenkins job?

Easy
392

An engineer is writing a script that calls the Cisco DNA Center API to create a new site. The API requires the request body to be encoded as JSON. Which HTTP request header should the script set so the server interprets the payload correctly?

Medium
393

A network automation engineer wants to retrieve a list of all network devices from Cisco DNA Center. Which HTTP method and URL path should be used with the DNAC intent API?

Easy
394

A DevOps engineer wants to automate the configuration of network devices using Ansible. Which file format is commonly used for Ansible playbooks?

Easy
395

A team is designing a CI/CD pipeline that uses the Cisco ACI REST API to deploy tenant policies. Which best practice should be followed for secure credential management?

Hard
396

A developer maintains a Python library that is published to a package index and consumed by other teams. The build pipeline should ensure that a compromised maintainer account cannot publish a malicious version under the project's name. Which control should be configured on the pipeline?

Hard
397

A developer is preparing a Python script that will be shared with a team and run in multiple environments. The script relies on several third-party libraries. Which TWO practices should be followed to ensure reproducible dependency management? (Choose two.)

Hard
398

A developer is integrating a Python script with the Cisco Webex API. The script needs to read the value of the HTTP status code returned by the API to decide whether to retry a request. Using the requests library, which attribute of the response object should the developer inspect?

Easy
399

A developer writes a web application that accepts user input and displays it on a page. To prevent cross-site scripting (XSS), what is the most effective defense?

Medium
400

A developer is designing a Python script that uses the NSO (Network Services Orchestrator) northbound API. Which data format is natively supported by NSO's RESTCONF API?

Medium
401

A network application requires reliable, ordered delivery of data and uses a three-way handshake to establish a connection. Which transport protocol is being used?

Medium
402

A developer is using the Meraki Dashboard API and receives an HTTP 429 status code with a Retry-After header. What is the correct interpretation?

Hard
403

Which TWO of the following are features of the DNA Center 'Platform' API category?

Hard
404

A network administrator is troubleshooting BGP path selection for a route received from two different ISPs. The routes have the same local preference and AS-path length, but one route has a shorter MED value. Which route will be preferred?

Hard
405

A network automation team wants to run a Python script that uses the ncclient library to retrieve configuration from a Cisco IOS XE device over NETCONF. The device is reachable on TCP port 830. Which transport and port combination must the script use?

Easy
406

A company is designing a new branch network. They want to segment traffic into separate broadcast domains to improve security and reduce broadcast traffic. Which technology should be used to achieve this?

Easy
407

A team is using Git for version control. A developer accidentally committed a sensitive file. Which Git command should be used to remove the file from the repository history while keeping it locally?

Medium
408

A developer is working on a Python script that must read a JSON configuration file containing device credentials. The script needs to parse the file and access the value of the key 'username'. Which Python standard library module and function should be used?

Easy
409

A developer is using Git for source control. They have made changes to a file and want to temporarily save the changes without committing, then work on a different branch. Which Git command should they use?

Medium
410

A company is implementing an API gateway for its microservices. Which TWO security features should be enabled at the gateway to protect backend services?

Medium
411

A developer needs to retrieve a secret stored in HashiCorp Vault from a CI job. The Vault administrator has enabled the AppRole auth method. Which sequence correctly authenticates and reads the secret using the Vault HTTP API?

Easy
412

Which TWO of the following are characteristics of Model-Driven Programmability with YANG models?

Medium
413

An engineer is tasked with automating the backup of running configurations from 50 routers. Which approach is most scalable?

Medium
414

A developer needs to enforce HTTPS for a web application. Which security measure should be implemented in the application or reverse proxy?

Easy
415

A developer maintains a Python library that calls a REST API and currently stores the API token in a module-level constant. The team wants to follow twelve-factor app principles so the same build artifact can be deployed to lab and production without code changes. Which change should the developer make?

Hard
416

A network engineer is using curl to test a REST API endpoint on a Cisco IOS XE device that supports RESTCONF. The engineer wants to retrieve the configuration of the GigabitEthernet1 interface. Which curl command correctly sends a GET request to the RESTCONF API with the appropriate headers to retrieve the interface configuration in JSON format?

Easy
417

A CI/CD pipeline includes stages for security scanning. Which TWO tools or services are specifically designed for dependency vulnerability scanning?

Medium
418

A developer is creating a REST API client that needs to authenticate using credentials passed in the HTTP header. Which header should be used?

Medium
419

A developer wants to use Cisco NX-API on a Nexus switch to execute a CLI command via JSON. What must be enabled on the switch first?

Medium
420

A junior developer is writing a Python script to gather interface statistics from a Cisco IOS-XE device using NETCONF. They use the 'ncclient' library and successfully connect. They want to retrieve the operational status of all interfaces. Which YANG model and XPATH expression should they use to get the operational data?

Easy
421

A developer is writing a Python script that calls the Cisco Webex API. The script must handle the case where the API returns a 429 Too Many Requests response. Which HTTP response header should the script inspect to determine how long to wait before retrying the request?

Medium
422

A developer is writing a script that must resolve a hostname to an IPv4 address before making an HTTP request. The script uses a DNS resolver library and needs to query for the appropriate record type. Which DNS record type should the script query to obtain the IPv4 address?

Easy
423

A developer is writing a Python script that uses the ncclient library to configure a Cisco IOS XE device over NETCONF. The script must push a candidate configuration, validate it, and then commit it atomically. Which sequence of NETCONF operations should the script use to guarantee the configuration is only applied if it passes validation?

Medium
424

An application requires reliable, ordered delivery of data. Which transport protocol should be used?

Medium
425

In the OAuth 2.0 authorization code flow, what does the client receive after the user grants authorization?

Medium
426

Which THREE practices help ensure idempotent network automation? (Select three)

Hard
427

An application requires reliable, ordered delivery of data with flow control and retransmission of lost segments. Which transport layer protocol should the developer choose and what is a key characteristic of this protocol?

Medium
428

A developer is writing a Python script that consumes a REST API which returns JSON error bodies. The script must distinguish client mistakes from server-side problems and react accordingly. Which TWO HTTP status code ranges or codes indicate conditions the client should handle as errors caused by the request or by the server rather than success? (Choose two.)

Medium
429

A network engineer wants to use NETCONF to change the hostname of a Cisco device. Which operation should be used?

Medium
430

A network engineer is analyzing a packet capture of a TCP session establishment between a client and a server. The engineer observes a packet with the SYN flag set and another with both the SYN and ACK flags set. Which flag will be set in the next packet sent by the client to complete the three-way handshake?

Easy
431

Which TWO are components of a REST API request? (Choose two.)

Hard
432

A developer is writing a Python script that uses the Meraki Dashboard API to page through a very large organization's list of network devices. The developer wants to iterate through all pages of results without manually constructing page URLs. Which approach should be used?

Medium
433

An automation engineer is using the Cisco DNA Center REST API to retrieve a list of network devices. The API call returns HTTP status code 200. What does this indicate?

Easy
434

A developer needs to retrieve the list of devices from a Meraki network using the Meraki Dashboard API. Which HTTP method and endpoint should be used?

Easy
435

A developer is designing a REST API that will be used by multiple client applications. The API must support versioning to ensure backward compatibility. Which approach should the developer use to implement API versioning?

Easy
436

A developer is using the ncclient library in Python to connect to a network device via NETCONF. Which operation should be used to modify the running configuration and commit the changes?

Hard
437

A network automation engineer is writing a Python script to configure multiple devices. Which library is most appropriate for SSH-based interactions?

Medium
438

A security team is reviewing a Python application that integrates with Cisco DNA Center. The application authenticates with a username and password and stores them in a configuration file that is deployed to multiple servers. The team wants to reduce the risk of credential exposure while keeping the application functional. Which TWO actions should be taken? (Choose two.)

Hard
439

A developer runs `curl -I http://api.example.com/health` and receives `HTTP/1.1 301 Moved Permanently` with a `Location: https://api.example.com/health` header. They want to follow the redirect automatically and print the final response body. Which curl option should they add?

Easy
440

Based on the exhibit, which interface is in a state that prevents it from sending or receiving IP traffic?

Medium
441

A developer is building a Python script that calls the Cisco Webex Rooms API. The script must handle rate limiting gracefully by reading the response headers when the API returns HTTP 429. Which response header should the script inspect to determine how long to wait before retrying?

Medium
442

Which TWO of the following are characteristics of a declarative automation model? (Select exactly 2.)

Medium
443

Which TWO of the following are benefits of using NETCONF over SNMP for network automation? (Select exactly 2.)

Medium
444

A developer is building a Python script that consumes a REST API exposed by a Cisco controller. The script must authenticate using a token obtained from a login endpoint and then call protected resources. Which TWO practices are appropriate for handling authentication and session state in this script? (Choose two.)

Medium
445

An engineer needs to transfer a router configuration file to a server in the same network using a simple protocol that does not require authentication. Which protocol is best?

Medium
446

A Kubernetes environment has multiple teams sharing the same cluster. One team wants to deploy applications without interfering with other teams' resources. Which Kubernetes resource should be used to isolate the team's resources?

Medium
447

When using NETCONF to edit the configuration of a Cisco IOS XE device, an engineer receives an <rpc-error> with error-tag 'in-use' and error-app-tag 'data-exists'. What does this error indicate?

Hard
448

In software architecture, which pattern separates an application into three interconnected components: Model (data), View (UI), and Controller (input logic)?

Medium
449

A developer uses the requests library to call an API. The API returns 429 Too Many Requests. What is the best practice to handle this?

Hard
450

A developer is building a chat application that requires low-latency communication, and occasional packet loss is acceptable. Which transport protocol should the developer choose?

Hard
451

A Python script uses the `requests` library to fetch device details from Cisco DNA Center. The API returns a JSON response with nested objects. To extract the management IP address from the response stored in variable `data`, which code snippet is correct? The JSON structure is: { "response": [ { "managementIpAddress": "192.168.1.1", "hostname": "router1" } ] }

Medium
452

Which HTTP method should be used to partially update an existing resource in a REST API?

Easy
453

A developer is using the Meraki Dashboard API and notices that some requests return a 429 status code. What is the most likely cause?

Medium
454

A university IT department manages a Cisco Meraki network with 200 MR access points and 50 MS switches. They use the Meraki dashboard API to automate network provisioning. A new student dormitory was added, and the team needs to create a new network and claim devices. They have a Python script that uses the Meraki API to create the network and then claim devices by serial numbers. The script successfully creates the network but fails when claiming devices with a 400 error: 'Device serial number is not valid or already claimed'. The serial numbers are correct and unused. The API key has full organization access. The script uses the endpoint 'POST /networks/{networkId}/devices/claim' with the correct body. What is the most likely cause of the failure?

Medium
455

A developer is writing a Python script to interact with a REST API. The script must handle HTTP responses correctly. Which two HTTP status code ranges indicate a successful request and a client error, respectively? (Choose two.)

Medium
456

A developer is writing a Python script that uses the requests library to call a REST API. The API occasionally returns a 429 status code. Which approach best handles this situation?

Hard
457

Which TWO of the following are valid private IPv4 address ranges? (Select two.)

Medium
458

A developer needs to configure a Cisco IOS XE device using NETCONF and wants to ensure the session supports candidate configuration and confirmed commit. Which capability must the device advertise in its NETCONF hello message?

Easy
459

When using the Cisco Meraki Dashboard API to create an HTTP webhook for network alerts, which authentication method is required in the request header?

Easy
460

Which design principle suggests that a module should be responsible for a single part of the functionality?

Easy
461

A DNS AAAA record is used to resolve a hostname to what type of address?

Medium
462

A network engineer is using the Cisco DNA Center Intent API to retrieve a list of all sites. Which HTTP method and endpoint should be used?

Easy
463

Using the Cisco DNA Center API, which endpoint should be queried to retrieve the Layer 2 topology for a specific VLAN?

Easy
464

A developer needs to update an existing resource via a REST API. The update should be partial, meaning only the fields provided in the request body should be changed. Which HTTP method should be used?

Medium
465

A developer wants to retrieve the current user's Webex profile information. Which API endpoint should be called?

Medium
466

Which THREE of the following are key principles of Infrastructure as Code (IaC) as applied to network automation?

Medium
467

A developer is designing a Python script that interacts with multiple Cisco APIs, including Cisco Webex and Cisco DNA Center. The script must authenticate to each API and handle tokens securely. Which TWO of the following practices are recommended for securely managing API credentials and tokens? (Choose two.)

Medium
468

A security team requires that a web application's API calls to an internal service use mutual TLS. The application runs in a Kubernetes pod and the team wants the certificate and private key mounted as files without embedding them in the container image. Which Kubernetes resource should be used to provide the certificate and key to the pod?

Hard
469

A developer is testing a REST API using curl. The API returns a JSON response with a status code of 201. What does this status code indicate about the request?

Medium
470

A developer's application opens a TCP connection to a REST API, sends a request, and receives a response. The developer then wants to reuse the same connection for several subsequent requests to the same host instead of opening a new socket each time. Which HTTP behavior makes this reuse possible?

Medium
471

A developer is writing a script to interact with a REST API. The API documentation states that the base URL is https://api.example.com/v1/ and that the resource for users is /users. The developer needs to retrieve a list of all users. Which HTTP request should the developer send to the correct endpoint?

Medium
472

A developer is building a Python script that must resolve a hostname to an IPv4 address and then connect to a specific TCP port. The script uses `socket.getaddrinfo(host, port, family=socket.AF_INET, type=socket.SOCK_STREAM)`. What does the returned list contain?

Medium
473

Which THREE of the following are benefits of using an SDN (Software-Defined Networking) architecture compared to traditional networking? (Choose three.)

Hard
474

A developer is building a Python application that integrates with Cisco DNA Center. The application needs to authenticate and then retrieve a list of network devices. The developer decides to use the DNA Center Intent API. Which two steps are required to successfully authenticate and make an API call? (Choose two.)

Hard
475

A developer is writing a Python script that uses the requests library to interact with a REST API. The script must handle common HTTP status codes appropriately. Which two actions should the developer take to ensure robust error handling? (Choose two.)

Medium
476

A network engineer is using the Cisco DNA Center API to retrieve a list of all sites. The API response is a JSON object with a 'response' array containing site objects. The engineer wants to extract the name of each site. Which Python code snippet correctly parses the JSON response and prints each site name?

Easy
477

A developer is reviewing a CI/CD pipeline that builds and deploys a containerized application. The team wants to protect sensitive values such as API keys and registry passwords used during the pipeline. Which TWO practices should be used? (Choose two.)

Medium
478

Which HTTP method is idempotent and safe?

Easy
479

What HTTP method should be used to update only the description field of a network device resource via a REST API?

Easy
480

A company is implementing a secure CI/CD pipeline. Which THREE practices are essential for securing the pipeline?

Hard
481

During a network outage, a technician notices that hosts in VLAN 10 cannot reach the default gateway at 192.168.10.1, but hosts in VLAN 20 can. The switch interfaces are up, and the router is configured with subinterfaces. What is the most likely cause?

Medium
482

A developer is building a Python script that calls a REST API which returns a JSON payload containing a list of interfaces. The script must parse the response and extract the 'name' field from each interface object. Which approach correctly uses the requests library to parse the JSON and iterate over the interfaces?

Medium
483

Refer to the exhibit. A service engineer runs a 'check-sync' action on the NSO service 'vpn1'. The result shows 'out-of-sync' for device 'pe1'. What does this indicate?

Hard
484

A developer receives HTTP 409 Conflict when updating a network configuration via Cisco NX-OS API. Which two scenarios could cause this error?

Medium
485

Based on the exhibit, which interface is in a down/down state (both Status and Protocol are down)?

Easy
486

What is the correct Content-Type header value for a RESTCONF request using JSON encoding?

Medium
487

A network engineer is preparing an Ansible playbook that will configure VLANs on a fleet of Cisco IOS XE switches. The playbook must authenticate to each device securely and must be able to reference the device-specific variables that the playbook expects. (Choose two.)

Medium
488

Which TWO of the following are recommended practices for securing a CI/CD pipeline in a DevOps environment? (Choose two.)

Medium
489

A developer is troubleshooting an HTTP API call that returns a 404 status code. Which of the following is the most likely cause?

Medium
490

A developer is writing unit tests for a Python function that interacts with a REST API. Which TWO practices are recommended to ensure tests are reliable and isolated? (Choose two.)

Hard
491

Which Git branching strategy typically involves a long-lived 'develop' branch where feature branches are merged, and releases are created from a 'release' branch?

Medium
492

A developer is writing a Python script to interact with a Cisco DNA Center controller. The script needs to authenticate and obtain a token to make subsequent API calls. Which authentication method should the developer use?

Easy
493

A developer needs to use Postman to test an API that uses Basic authentication. How should the credentials be configured in Postman?

Hard
494

A network engineer is troubleshooting a connectivity issue between two subnets. The engineer uses the traceroute command and observes that packets are reaching the destination but with high latency. Which of the following is the most likely cause of the high latency?

Medium
495

A developer is deploying a containerized application to a Kubernetes cluster. To ensure that the application can securely access a third-party API, what is the best practice for storing the API key?

Easy
496

A Kubernetes pod needs to run a database that requires persistent storage. Which volume type should be used to store data that persists beyond the pod lifecycle?

Hard
497

A developer is using the Cisco Webex API to send a message to a specific room. They have the room ID. Which endpoint and method should they use?

Medium
498

A developer is preparing a Python script that authenticates to a Cisco DNA Center controller, retrieves a list of network devices, and writes the inventory into a reusable module consumed by other teams. The team lead requires that the credentials never be stored in the source code. Which TWO practices satisfy that requirement? (Choose two.)

Hard
499

A developer is writing an application that needs to send a large amount of data reliably over a network. Which transport layer protocol should the developer use?

Medium
500

A developer is using Git for version control in a collaborative project and wants to ensure a clean, linear history. Which TWO practices help achieve a linear commit history? (Choose two.)

Medium
501

A developer wants to automate the provisioning of a UCS server using Cisco Intersight. Which authentication method is recommended for programmatic access?

Hard
502

A network team uses an Ansible playbook to automate the configuration of multiple Cisco IOS XE devices. The playbook includes the 'ios_config' module. Which of the following best describes the purpose of the 'provider' parameter in the ios_config module?

Medium
503

An engineer needs to automate the deployment of a new VLAN across multiple switches. Which tool is best suited for this task?

Easy
504

A Kubernetes cluster is configured with a NetworkPolicy that allows ingress traffic only from pods with label 'app: frontend'. A new backend service needs to communicate with the database pod. What must be done to allow this?

Hard
505

Which tool is specifically designed for model-driven programmability using YANG data models?

Easy
506

A company is deploying a containerized application to a Kubernetes cluster. The security team requires that the container runs as a non-root user and that the root filesystem is read-only. Which Kubernetes security context settings should be applied to the pod specification to meet these requirements?

Hard
507

A developer is using the Cisco DNA Center REST API to retrieve a list of all network devices. The API requires authentication. The developer wants to avoid hardcoding credentials and instead use a token-based authentication mechanism. Which authentication method should the developer use?

Hard
508

A developer needs to retrieve the current user's details from Webex API. Which endpoint should they call?

Medium
509

A network automation script uses RESTCONF to retrieve operational data from a Cisco device. What data format is typically supported by RESTCONF?

Easy
510

A network engineer is evaluating configuration management tools for a Cisco environment. The engineer wants to describe the push-based model where a central server runs playbooks that connect to managed devices over SSH to apply changes. Which tool uses this architecture?

Easy
511

Match each JSON data type to its example.

Medium
512

An automation team wants to build a custom Slack bot that receives a message when a Cisco IOS XE device sends a syslog event indicating an interface went down. Which combination of technologies should the team use to implement this event-driven workflow?

Medium
513

Which Meraki API response header provides information for paginating through a large result set?

Easy
514

A company has multiple subnets. A device in subnet 192.168.1.0/24 needs to communicate with a device in subnet 192.168.2.0/24. What is required for this communication?

Medium
515

An engineer is using EEM on an IOS XE device. They want to trigger an applet when a specific syslog message appears. Which event trigger type should they use?

Hard
516

A developer is preparing a Python script that will be committed to a shared Git repository used by a team of network automation engineers. The team wants to ensure that sensitive credentials and environment-specific files are never committed. Which TWO actions should the developer take? (Choose two.)

Hard
517

A developer is building a container image for an application and wants to minimize the attack surface by ensuring the container does not run as root. The image is based on a Linux distribution. Which Dockerfile instruction should be used to specify a non-root user for the container process?

Easy
518

When using RESTCONF to configure a network device, what Content-Type header should be set in the HTTP request to indicate YANG data in JSON format?

Medium
519

A developer is writing a Python script that uses the Cisco Meraki Dashboard API to update the VLAN configuration of a network. The script reads the API key from an environment variable and places it in the appropriate request header. Which header should the developer set, and what happens if the key is invalid?

Hard
520

A developer is testing a REST API with curl and wants the response to include only the HTTP status code and response headers, discarding the body. Which curl option accomplishes this?

Easy
521

When using the Cisco DNA Center intent API to retrieve issues, the response includes a Link header with rel="next" and a URL. What type of pagination is this?

Medium
522

A developer must configure a Cisco IOS XE device programmatically and needs the device to validate configuration changes against a data model before they are committed, with the ability to discard invalid candidate configurations. Which approach satisfies this requirement?

Hard
523

Which THREE of the following are valid methods to handle API rate limiting in a Python automation script? (Select exactly 3.)

Hard
524

A developer maintains a Python package that other teams import. The package's setup.py currently pins an HTTP library to an exact version, and a consuming team reports that pip refuses to install their project because they require a newer minor release of the same library. Which change to the dependency specification best resolves the conflict while still protecting against breaking major upgrades?

Hard
525

Which THREE are best practices for securing a CI/CD pipeline?

Hard
526

A developer needs to store a database password securely in a Kubernetes cluster. Which resource should be used?

Medium
527

A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?

Hard
528

A team uses Chef to manage network device configurations. Which component of Chef is responsible for storing configuration policy and distributing it to nodes?

Medium
529

A Kubernetes pod contains two containers that need to share a local filesystem. Which volume type should be used to enable this?

Medium
530

At which layer of the OSI model do MAC addresses operate?

Easy
531

A CI/CD pipeline uses GitLab CI. The pipeline must build a Docker image and then run security scans on the image before pushing. Which GitLab CI keyword allows defining a sequence of jobs that must run in order?

Medium
532

A developer creates a Dockerfile for a Python web application. Which instruction should be used to copy the application source code into the container image?

Easy
533

A developer is writing a Python script that calls the Cisco DNA Center Intent API to create a new network device. The script must send a JSON body and authenticate with a token. Which TWO HTTP request components are required for this API call to succeed? (Choose two.)

Hard
534

A developer is building an automation script to retrieve network device details from Cisco DNA Center. The script needs to authenticate and then call the device list API. Which THREE steps are required in the correct sequence?

Hard
535

What does the Git command 'git log --oneline' display?

Easy
536

A network administrator is configuring a wireless network and wants to minimize interference. In the 2.4 GHz band, which set of channels are non-overlapping?

Hard
537

A developer is writing a Python script that calls the Cisco DNA Center Intent API to retrieve a list of network devices. The script must handle the case where the API returns a 401 Unauthorized response by obtaining a new authentication token and retrying the request. Which Python construct should be used to implement this retry with token refresh?

Medium
538

Which data format is most commonly used in REST API requests and responses in modern network automation?

Easy
539

A developer is integrating with the Cisco Webex API and wants to authenticate on behalf of users without ever handling their passwords. The integration is a web application hosted on a public server, and the developer needs a refresh token so the app can keep working after the user's access token expires. Which OAuth 2.0 grant type should be used?

Hard
540

In a Docker Compose file, a service 'web' depends on 'db'. The 'db' service uses a volume to persist data. Which compose key ensures that the database starts before the web service?

Medium
541

A developer is building a Python application that uses the Webex Teams API to send a message to a specific room. The developer has the room ID and a valid access token. Which HTTP method and endpoint should be used?

Medium
542

An engineer is troubleshooting a network issue where a client cannot reach a server. The client uses HTTPS. Which TWO factors are essential for a successful TLS handshake?

Hard
543

A developer is designing a REST API client that must handle rate limiting from a Cisco Webex API. The API returns HTTP 429 Too Many Requests with a 'Retry-After' header. Which two strategies should the developer implement to handle rate limiting gracefully? (Choose two.)

Medium
544

Drag and drop the steps to set up a Python virtual environment for a DevNet project into the correct order.

Medium
545

Which TWO of the following are benefits of using UDP over TCP for real-time applications?

Medium
546

A developer needs to view the logs of a running Docker container with ID 'abc123'. Which command should be used?

Medium
547

A developer is writing unit tests for a Python function that parses Cisco IOS configuration text and returns a dictionary of interfaces. The function relies on an external file read. Which TWO practices improve the testability and reliability of these unit tests? (Choose two.)

Hard
548

A network engineer is troubleshooting an issue where a client cannot reach a web server at 203.0.113.10. The engineer runs a traceroute from the client and sees that the path stops at a router with IP 198.51.100.1, which is the last hop before the destination. The engineer suspects that the router is dropping packets due to an ACL. Which command should the engineer use on the router to verify if an ACL is blocking traffic to the web server?

Hard
549

A developer needs to register a Webex webhook that triggers when a new message is posted in any room the bot is a member of. Which resource and event should be specified?

Hard
550

A network engineer is tasked with segmenting a large broadcast domain into smaller ones using VLANs. In the OSI model, at which layer does a VLAN operate?

Hard
551

An application uses UDP. Which characteristic is true about this application's communication?

Medium
552

A developer is creating an application that uses the Cisco Webex Teams API to send messages. What authentication method is typically used?

Easy
553

When using OAuth 2.0 client credentials flow with a Cisco API, what is the typical purpose of the access token?

Hard
554

A network engineer is configuring a wireless network for a new office. To maximize performance and minimize interference, the engineer decides to use the 5 GHz band. Which of the following is a key advantage of 5 GHz over 2.4 GHz?

Medium
555

Which IPv6 address type is equivalent to a private IPv4 address?

Easy
556

An automation tool uses RESTCONF to configure a Cisco device. The device returns a 404 error for a PUT request. What does this indicate?

Medium
557

A developer is designing a system that requires high reliability and ordered data delivery. The developer chooses TCP. Which THREE features are provided by TCP?

Medium
558

Which THREE of the following are valid event triggers for an EEM applet on Cisco IOS XE? (Choose THREE.)

Medium
559

A developer is building a Python function that must parse a JSON payload returned by a Cisco DNA Center API. The function needs to gracefully handle cases where the JSON is malformed or the response body is empty, without crashing the calling script. Which approach best meets this requirement?

Medium
560

A network administrator needs to assign IP addresses to 50 hosts in a subnet. Which subnet mask provides the minimum required number of usable addresses while minimizing waste?

Easy
561

Which three components are required to set up a Webex webhook for message creation events? (Choose three.)

Hard
562

A network developer wants to quickly prototype an application that interacts with a Cisco Catalyst 9000 switch using REST APIs. What is the most appropriate resource to use?

Easy
563

A network automation team is evaluating tools to manage the configuration of Cisco IOS XE devices. They need a solution that uses a declarative, agentless approach and can be extended with custom modules. Which two characteristics describe Ansible in this context? (Choose two.)

Medium
564

Which THREE statements about NETCONF are correct?

Hard
565

A DevOps team wants to version control their network configurations. Which tool should they use?

Easy
566

Refer to the exhibit. What will be the result of running this Ansible playbook against the 'switches' group?

Medium
567

A developer is writing a Python script using requests to retrieve a large JSON payload from an API. The server responds with headers including Content-Encoding: gzip, and the response body appears as binary data. The script must automatically decompress the payload to parse it as JSON. Which requests library behavior should the developer rely on?

Medium
568

A developer is building a Python script that calls the Cisco Webex API to create a new room. The API returns a JSON payload containing the room ID. The developer needs to extract the room ID from the response and use it in a subsequent API call to add a member to that room. Which Python code snippet correctly parses the JSON response and extracts the room ID, assuming the response object is stored in a variable named `response` and the JSON key is `id`?

Medium
569

A developer needs to retrieve a list of network devices from Cisco DNA Center with pagination. Which TWO URL components are typically used for offset/limit pagination?

Medium
570

A network engineer wants to stream telemetry data from a Cisco router using gRPC. Which gRPC service model is typically used for the router to push data to a collector?

Hard
571

An engineer is troubleshooting a VoIP call quality issue. The call uses UDP and experiences packet loss. Which characteristic of UDP most likely contributes to the problem?

Medium
572

Which TWO of the following HTTP methods are considered safe (idempotent and not modifying server state)? (Select two.)

Easy
573

A network automation engineer is using `ncclient` to configure a Cisco IOS XE device via NETCONF. The engineer wants to retrieve the running configuration using the `<get-config>` operation with a source of `<running/>`. Which XML element must be included in the RPC to specify the data store?

Hard
574

A Python script using the requests library to query the Cisco Meraki API returns a 403 Forbidden error. The API key is correctly set in the header. What is the most likely cause?

Medium
575

A developer runs the command `git clone https://github.com/example/netconfig.git` on a workstation, then edits a file named `vlans.yml`. Before editing, the developer wants to confirm which remote repository the local clone is tracking for push and fetch operations. Which command should be run?

Easy
576

A developer is working with Meraki API to list all clients on a network. The response is paginated. Which parameter allows the developer to specify the starting point for the next page?

Hard
577

An engineer is troubleshooting a NETCONF session that fails to establish with a Cisco IOS XE device. The SSH connection succeeds, but NETCONF capabilities are not exchanged. What is the most likely cause?

Hard
578

A developer is using the Cisco DNA Center Intent API to retrieve a list of network devices. The API requires a token obtained from the authentication endpoint. The developer's script successfully authenticates and receives a token, but subsequent GET requests to /dna/intent/api/v1/network-device return a 401 Unauthorized error. What is the most likely cause?

Hard
579

Drag and drop the steps to use Git to commit and push code changes to a remote repository into the correct order.

Medium
580

A developer sends a GET request to https://sandboxdnac.cisco.com/dna/system/api/v1/auth/token and receives an HTTP 401 Unauthorized response. The request included no Authorization header. Which HTTP request header must be added to obtain a token from Cisco DNA Center?

Easy
581

An engineer is writing a Python script using the Cisco DevNet sandbox to configure OSPF on a CSR1000v via RESTCONF. What authentication method is typically used for RESTCONF requests?

Medium
582

A developer needs to retrieve interface configuration from a Cisco IOS XE device using NETCONF. Which operation should be used?

Medium
583

A network automation script uses the Cisco DNAC Python SDK (dnacentersdk) to retrieve devices. Which method correctly lists all devices?

Medium
584

A security review of a containerized application finds that the running process has far more privileges than it needs. Which TWO changes reduce the attack surface of the container at runtime? (Choose two.)

Medium
585

A developer needs to ensure that environment variables containing database credentials are not hardcoded in the application code. Which approach is most secure for managing secrets in a CI/CD pipeline?

Medium
586

A developer is designing a Python application that consumes several Cisco REST APIs. To make the code maintainable and secure, the developer wants to implement reusable API request handling. Which two practices should be applied? (Choose two.)

Medium
587

A network automation engineer must ensure that a Python script running on a management workstation can resolve internal service names such as `inventory.corp.local` and `billing.corp.local`. The workstation currently resolves public names correctly but fails on the internal ones. The engineer inspects `/etc/resolv.conf` and sees a single `nameserver 8.8.8.8` entry. Which change most directly resolves the problem?

Hard
588

When using RESTCONF on Cisco IOS XE, which URL retrieves the hostname configuration?

Medium
589

An engineer is using the Cisco Intersight API to manage UCS servers. The API response returns a paginated list. What is the proper way to retrieve all items?

Hard
590

A Cisco DevNet engineer is configuring model-driven telemetry on a Cisco IOS-XE device. The telemetry subscription includes the following path: 'Cisco-IOS-XE-native:native/interface/GigabitEthernet[Name='1/0/1']/ip/address'. Which part of this path identifies a specific list instance?

Hard
591

A DevOps team is implementing a CI/CD pipeline for network services using Cisco NSO (Network Services Orchestrator). They have a Python script that uses the NSO RESTCONF API to create a new VPN service instance. The script passes all integration tests in the staging environment, but when deployed to production, the 'POST' request to /api/run/vpn-service returns a 500 Internal Server Error. The team checks the NSO logs and finds the error 'Error: No such device: device-xr-1'. The production NSO instance manages multiple devices, and device-xr-1 is one of them. The team confirms device-xr-1 is reachable and managed by NSO in the production environment. What is the most likely cause of this error?

Hard
592

A network automation engineer is writing a Python script that calls the Cisco DNA Center API to retrieve device health scores. The API enforces rate limiting and returns HTTP 429 with a 'Retry-After' header when the limit is exceeded. The script must handle this gracefully without crashing. Which code pattern correctly implements the retry logic?

Hard
593

Which THREE are common best practices for implementing CI/CD in network automation?

Medium
594

A developer is building a Python application that must discover the IP address of a service registered in DNS. The application needs to resolve a domain name to an IPv4 address. Which DNS record type should the application query?

Medium
595

A network engineer needs to retrieve a list of all network devices from Cisco DNA Center. Which API endpoint should they use?

Easy
596

A Meraki API request is receiving HTTP 429 responses. According to the Meraki rate limit, what should the developer do?

Medium
597

A team is containerizing a Python API service so it can run identically on developer laptops and in production. Which TWO practices support reproducible, portable container images for this service? (Choose two.)

Hard
598

An automation engineer is using the Cisco SD-WAN (Viptela) API to retrieve a list of devices in the overlay. The engineer must authenticate and obtain a token before making subsequent API calls. Which authentication mechanism does the Cisco SD-WAN API use to issue a session token?

Hard
599

A developer wants to send a message to a Webex room using the API. Which HTTP method and endpoint should they use?

Easy
600

A network engineer is analyzing a packet capture and notices that a TCP session between a client and server is experiencing performance issues. The capture shows that the client sends a segment with the Push (PSH) flag set, but the server's acknowledgment does not immediately follow; instead, the server waits and sends a single acknowledgment for multiple segments. Which TCP mechanism is the server using to optimize network efficiency?

Hard
601

A developer needs to authenticate to a REST API using an API key that must be sent in a custom HTTP header named X-API-Key on every request. The team uses Python requests. Which code snippet correctly attaches the key to a GET request?

Medium
602

A team is hardening a Kubernetes deployment that exposes a web API. They want to reduce the impact of a container compromise and enforce network segmentation. Which TWO configurations should they apply? (Choose two.)

Medium
603

A developer writes a Python script to read a configuration file. Which code snippet correctly opens the file 'config.json' for reading and ensures the file is closed after use?

Easy
604

An application running on a Cisco IOS XE device must call an external REST API that uses a self-signed certificate. The developer's Python script using the requests library fails with an SSL verification error. The security team requires that the script still validates the server identity. Which approach satisfies the requirement?

Hard
605

A CI/CD pipeline using GitHub Actions needs to build a Docker image and push it to Docker Hub. Which event trigger should be used to run the workflow only when code is pushed to the main branch?

Hard
606

A developer is writing a Python script that calls the Cisco DNA Center Intent API. The API returns HTTP 429 responses during peak hours. The developer wants the script to retry failed requests automatically using exponential backoff. Which approach should be used?

Medium
607

Which TWO of the following are best practices when using REST APIs in Cisco networking environments?

Medium
608

A developer is writing a Python script that uses the Cisco Meraki Dashboard API. The script must read the API key from an environment variable named MERAKI_API_KEY and include it in every request. Which header should the script set?

Medium
609

A developer must write a script that retrieves the running configuration from a Cisco IOS XE device using NETCONF. The script establishes an SSH session and begins the NETCONF capability exchange. Which XML element must the client send to request the device's running configuration using the standard NETCONF data model?

Medium
610

Drag and drop the steps to troubleshoot a network connectivity issue using the OSI model from bottom to top.

Medium
611

Which Python list comprehension correctly creates a list of squares for even numbers from 0 to 10?

Medium
612

A network operations team is deploying a new application that requires guaranteed bandwidth and low latency between two data centers. The team decides to use MPLS Layer 3 VPN. Which component of MPLS is responsible for forwarding packets based on labels rather than traditional IP routing lookups?

Hard
613

A network automation engineer is using Cisco NX-OS with NX-API enabled. The engineer wants to send a JSON-RPC request to the device to retrieve the running configuration. Which URL format and HTTP method should be used to send the request to the NX-API endpoint?

Medium
614

A developer wants to send a message to a Webex room using the API. The message should contain a simple text body. Which endpoint and parameter are required?

Medium
615

A developer wants to ensure that a containerized application restarts automatically if it exits with a non-zero code. The application is run using Docker. Which flag should be used?

Hard
616

A developer is writing a script to interact with the Cisco DNA Center Intent API. The script needs to retrieve a list of all devices in the inventory. Which HTTP method and endpoint should the developer use?

Easy
617

A Cisco SD-WAN vManage API call to retrieve device inventory returns a 401 error. Which step is most likely missing?

Medium
618

A developer uses the Cisco DNA Center API to retrieve device inventory. The JSON response is shown. Which Python code snippet correctly extracts the serial number?

Easy
619

A developer is building a REST API client in Python using the requests library. They need to send a JSON payload with authentication. Which code snippet correctly sends a POST request with a JSON body and a Bearer token?

Medium
620

A Kubernetes Deployment is configured with rolling update strategy. A new version of the image is pushed, and the deployment is updated. During the rollout, the new pods are failing health checks. Which command can be used to pause the rollout and prevent further updates?

Hard
621

A development team is implementing security controls for a containerized application deployed on Kubernetes. They need to ensure that containers run with least privilege and that sensitive information is protected. Which TWO measures should be implemented? (Choose two.)

Medium
622

A developer wants to send a message to a specific room in Webex using the API. The developer already has the room ID. Which API call is correct?

Medium
623

Which wireless standard operates in both 2.4 GHz and 5 GHz bands and is commonly known as Wi-Fi 6?

Medium
624

In an SDN architecture, which layer is responsible for making decisions about where traffic should be forwarded?

Medium
625

A developer is designing a Python application that will consume multiple REST APIs from different Cisco platforms. The application must handle common API behaviors such as authentication, rate limiting, and error responses. Which TWO of the following are best practices for making the application robust and maintainable? (Choose two.)

Hard
626

A developer is building a Python script that calls the Cisco Webex Teams API to fetch a list of rooms. The API returns a response with a Link header containing a URL with a 'pageToken' parameter. What should the developer do to retrieve the next page of results?

Medium
627

Refer to the exhibit. A DevOps engineer is using NETCONF to retrieve the OSPF configuration. The <get> response is missing the network statements. What is the most likely cause?

Hard
628

An engineer retrieves the list of devices in a Meraki network via the Dashboard API. The API returns HTTP 200 OK with an empty array. What is the most likely reason?

Medium
629

A developer is preparing to add a new feature to a shared Git repository. The team uses a workflow where each feature is developed on its own branch and then merged back into the main branch through a pull request. Which Git operation should the developer perform first to begin work on the new feature?

Easy
630

A developer wants to process a list of server hostnames and create a new list containing only hostnames that start with 'web'. Which Python list comprehension correctly accomplishes this?

Easy
631

A development team is building a container image for a Node.js API. The Dockerfile currently uses the instruction `COPY . /app` before `RUN npm install`. A security review flags that the image contains local `.env` files and `.git` history. Which approach best prevents these files from entering the build context while keeping the Dockerfile functional?

Medium
632

An engineer is troubleshooting a connectivity issue between two devices on different VLANs. The switch connecting the devices is configured with 802.1Q trunking. At which OSI layer do VLANs operate?

Medium
633

A developer wants to create a new room in Cisco Webex using the API. Which HTTP request is appropriate?

Medium
634

A large enterprise uses Cisco DNA Center to manage their campus network. They have deployed fabric technology for SD-Access. The network team wants to use the DNA Center REST API to automate the addition of new wireless users to a specific virtual network (VN) based on their location (building). They have identified the API endpoint for creating a user device in the fabric. However, when they send a POST request with the appropriate JSON body, they receive a 400 Bad Request error. The JSON payload includes the mandatory fields for hostname, MAC address, and VN name. What is the most likely cause of the error?

Medium
635

A developer is building a Python application that interacts with Cisco Meraki Dashboard API. The application needs to retrieve the list of organizations. Which HTTP header must be included in the request to authenticate?

Medium
636

Which Cisco platform provides a cloud-managed networking solution with a RESTful API that uses an API key in the X-Cisco-Meraki-API-Key header?

Easy
637

A network automation engineer is using the Cisco DNA Center intent API to retrieve a list of network devices. Which API endpoint should be used?

Medium
638

A developer is designing a Cisco Catalyst Center integration that uses the intent API. Which THREE of the following are available via the intent API? (Select three.)

Hard
639

A developer is working with the Webex API to receive real-time notifications when a message is posted. Which resource should they create?

Hard
640

Drag and drop the steps to configure a new VLAN on a Cisco switch into the correct order.

Medium
641

A developer is building a Python application that uses the Cisco Webex Teams REST API to manage memberships. The application must add a person to a space and later list the members of that space. Which two HTTP methods and endpoints should the application use? (Choose two.)

Medium
642

Which THREE of the following are valid methods to automatically assign IP addresses to network hosts?

Hard
643

An administrator wants to receive real-time notifications when a new message is posted to a Webex room. Which Webex API resource should be used to configure this?

Medium
644

A network administrator wants to use Ansible to automate the configuration of a Cisco IOS-XE device. Which module is designed for this purpose?

Medium
645

In DNA Center, which API category is used to deploy templates to devices?

Easy
646

Which TWO of the following are common causes of VLAN connectivity issues?

Medium
647

A developer is preparing a Python application that reads the API base URL and an API token from the environment. The developer wants to avoid hard-coding credentials and intends to deploy the same artifact to a lab and a production environment. Which approach should be used?

Medium
648

A developer is testing a custom REST API that returns a JSON error object with an HTTP 400 status when an invalid query parameter is sent. They want to confirm that the API is behaving correctly according to REST conventions. Which HTTP status code class indicates that the client's request contains an error that the client can potentially fix?

Medium
649

A developer is writing a Dockerfile for a Node.js application. They want to set a build-time variable for the application version that can be changed without modifying the Dockerfile. Which instruction should be used?

Medium
650

Which TWO of the following are valid branching strategies in Git? (Choose two.)

Medium
651

A developer writes a script that calls a Cisco DNA Center intent API to create a new site. The first call returns HTTP 401 Unauthorized. The script already retrieved a token earlier in the same run. Which action should the script take next?

Medium
652

An engineer uses Ansible to push a configuration change to 100 switches. The playbook fails on 5 switches. What is the most efficient way to apply the change only to those 5?

Hard
653

An engineer is developing an EEM applet on a Cisco IOS XE device to run a CLI command when a specific syslog message appears. Which event trigger should be used?

Hard
654

In a RESTCONF API call to retrieve a specific interface configuration on a Cisco device, an engineer sends a GET request to /restconf/data/interfaces/interface=GigabitEthernet0/1. What Content-Type should be specified in the Accept header to receive YANG-defined JSON?

Hard
655

Which TWO HTTP methods are considered safe according to HTTP/1.1 specification?

Easy
656

Refer to the exhibit. A developer is writing an Ansible playbook to configure this interface on a Cisco IOS XE device. Which Ansible module should be used to set the IP address?

Medium
657

A network engineer is configuring a Cisco switch to support LLDP-MED for VoIP phones. Which command is required to enable LLDP globally on the switch?

Hard
658

A developer is writing a Python script that must process a large list of network device hostnames. The script needs to read each hostname, perform a blocking SSH operation, and then move to the next hostname. The developer wants to make the code more efficient by using a generator function to yield hostnames one at a time instead of loading the entire list into memory. Which Python construct should the developer use to define this generator?

Medium
659

A developer is designing a REST API for managing network devices. The API should support idempotent operations for updating device configuration. Which HTTP method should be used for the update operation?

Medium
660

When using the Meraki Dashboard API, how should the API key be included in a request?

Medium
661

When using gRPC/gNMI for model-driven telemetry, which mode allows the network device to push telemetry data to a collector without the collector initiating the connection?

Hard
662

A developer is integrating a Python script with the Cisco Webex API to create a new team. The script sends a POST request to https://webexapis.com/v1/teams with a JSON body containing the team name. The API returns HTTP 401 Unauthorized. The developer confirms the request body and URL are correct. Which of the following is the most likely cause of the 401 response?

Medium
663

Which tool is designed for infrastructure as code, uses a declarative language, and can automate configuration management across multiple devices?

Easy
664

A team uses a Jenkins declarative pipeline to deploy a microservice. The pipeline includes stages: Checkout, Build Docker Image, Run Unit Tests, Push to Registry, Deploy to Staging, and Deploy to Production. Which stage should run immediately after 'Build Docker Image' to ensure code quality before the image is pushed?

Medium
665

A developer is using the Cisco Webex Teams API to create a room and add members. The API returns a 400 error. What is the most likely cause?

Medium
666

An engineer needs to automate the deployment of VLAN configurations on a fleet of Cisco Catalyst 9000 switches running IOS-XE. The team uses Ansible Tower for automation. Which Ansible module should be used to push VLAN configuration idempotently?

Medium
667

Which DNS record type is used to verify domain ownership for email security (SPF)?

Medium
668

A developer is designing a microservices-based network management system. One requirement is that when a new device is discovered, multiple other services must be notified asynchronously to perform tasks like inventory update, monitoring setup, and log collection. Which architectural pattern best fits this requirement?

Hard
669

Which THREE of the following are characteristics of GraphQL compared to REST? (Choose three.)

Hard
670

In a wireless network using 802.11ac, which frequency band does the standard primarily operate in to achieve higher throughput?

Hard
671

Which transport layer protocol is used by HTTP and guarantees reliable delivery?

Easy
672

A DevOps engineer is deploying a containerized application to a Kubernetes cluster. The application requires a configuration file that contains non-sensitive settings, such as the application's log level and API endpoint. The engineer wants to manage this configuration separately from the container image and make it easily updatable without rebuilding the image. Which Kubernetes resource should be used?

Medium
673

A network developer is using Cisco NSO to manage multi-vendor devices. Which three are valid approaches to handle device-specific differences? (Choose three.)

Hard
674

A network engineer is writing a script to interact with a Cisco DNA Center controller. They need to authenticate and obtain a token to include in subsequent API requests. Which HTTP header should they use to send the token?

Easy
675

A developer is using the Cisco DNA Center API and receives a token. How is this token typically used in subsequent API requests?

Medium
676

A developer is using the Cisco Meraki Dashboard API to manage networks. The developer needs to perform operations that require identifying a specific network. Which two identifiers are required when making a request to retrieve or modify a network? (Choose two.)

Medium
677

A developer wants to retrieve the list of network devices from Cisco DNA Center. Which API endpoint should be used?

Easy
678

A developer is building a Python application that must handle configuration data in multiple formats (JSON, YAML, XML) and provide a consistent interface for reading and writing. The application may add new formats later. Which design pattern best supports this extensibility while keeping the client code decoupled from concrete implementations?

Hard
679

A developer is building an application that uses Cisco Webex Teams APIs to manage memberships in a space. The developer needs to perform two operations: add a new member to a space and remove an existing member from a space. Which two API requests should the developer use? (Choose two.)

Medium
680

A developer is integrating with Cisco DNA Center's Intent API. They need to retrieve a list of all network devices and then filter for devices with a specific software version. The API returns a paginated response with a 'nextPage' field in the JSON body. Which approach should the developer use to efficiently process all devices?

Hard
681

Which DNS record type is used to map a domain name to an IPv6 address?

Easy
682

When making API calls to Cisco DNA Center, a developer receives a 401 Unauthorized error. The token was obtained using the token API endpoint. What is the most likely reason?

Medium
683

Which TWO actions are best practices for managing secrets in a CI/CD pipeline?

Medium
684

A developer is implementing error handling in a script that makes multiple API calls to Cisco ACI. Which approach is best practice for handling transient network failures?

Medium
685

Which TWO are benefits of using model-driven programmability (e.g., NETCONF/RESTCONF) over traditional CLI scripting for network automation?

Medium
686

Which command enables the NX-API feature on a Cisco NX-OS device?

Medium
687

A team is implementing a CI/CD pipeline using Jenkins. The pipeline must build a Docker image and push it to a private registry. Which Jenkins plugin is specifically designed to handle Docker builds and pushes?

Easy
688

A developer is troubleshooting a Python function that parses device configuration returned by a REST API. The function receives a JSON string and must convert it into native Python dictionaries and lists before iterating over the device entries. Which standard-library approach performs that conversion?

Easy
689

A DevOps team uses a CI/CD pipeline to deploy network configurations. They want to ensure that only authorized network engineers can trigger changes to production devices. Which integration is most appropriate?

Hard
690

A platform team stores network device configuration templates in a Git repository and wants every proposed change to be reviewed and validated before it reaches production devices. The team also needs an audit trail of who approved each change. Which Git-based workflow best meets these requirements?

Hard
691

A developer is writing a Python script that authenticates to the Cisco DNA Center REST API. The script must include an authentication token in the HTTP headers of every subsequent API call. Which HTTP header should the developer populate with the token returned by the authentication endpoint?

Medium
692

An application authenticates to Cisco Webex API using OAuth2 client credentials grant. Which three pieces of information must the application include in the token request?

Medium
693

Which TWO of the following are functions of the transport layer in the OSI model? (Choose two.)

Easy
694

A Python script uses the Cisco Meraki API to fetch the list of organizations. The script fails with a 401 HTTP status. What is the most likely cause?

Easy
695

A developer is building an automation workflow that must react when an interface on a Cisco IOS XE device goes down. The workflow should subscribe to the device and receive structured event data as changes happen, rather than polling for state. Which technology should the developer use?

Medium
696

A developer is reviewing a colleague's pull request that adds a function to a shared Python utility module. The function must return the value of a REST API response, but the reviewer notices the function currently prints the parsed response instead of returning it. Which change makes the function usable by callers that need to process the data further?

Medium
697

A developer is using Docker Compose to run a multi-service application. Which THREE keys are valid top-level keys in a docker-compose.yml file? (Choose three.)

Medium
698

A developer is writing a Python script to interact with a REST API. The API requires a JSON payload to create a new resource. Which HTTP method should be used?

Medium
699

A developer needs to read a JSON configuration file and parse it into a Python dictionary. The file contains nested objects. Which code snippet correctly accomplishes this?

Medium
700

A company uses a CI/CD pipeline to deploy network configurations. The pipeline includes a stage that runs automated tests against a simulated network environment. Which testing strategy does this represent?

Medium
701

An organization uses Ansible for configuration management and wants to secure the automation secrets (e.g., SSH keys, API tokens). The secrets are currently stored in plaintext in inventory files. The security team requires that secrets be encrypted at rest and decrypted only at runtime by authorized users. Which solution should be implemented?

Easy
702

A developer is designing a REST API for a network automation tool. Which HTTP method should be used to retrieve the current configuration of a network device?

Easy
703

A developer is using the Meraki Dashboard API to list all networks in an organization. The response includes a Link header with rel="next". What does this indicate?

Medium
704

Which TWO of the following are true about NETCONF capabilities as defined in RFC 6241?

Hard
705

A developer needs to apply a Kubernetes deployment manifest from a file named 'deployment.yaml'. Which kubectl command should be used?

Medium
706

In Postman, what feature allows you to reuse a value like a base URL or token across multiple requests?

Easy
707

In Python, which keyword is used to define a function that does not return any value?

Easy
708

A developer commits code to a GitHub repository and wants automated tests to run, followed by building a Docker image and pushing it to Docker Hub only if tests pass. Which CI/CD tool can be configured using a YAML file placed in the .github/workflows directory?

Medium
709

An automation script using Ansible tries to configure IP address 192.168.1.2 on GigabitEthernet0/1. After running, the interface remains administratively down. What is the first thing to check?

Easy
710

A network automation engineer is writing a Python script that uses the Meraki Dashboard API to update the VLAN configuration on a switch. The engineer needs to send a PUT request to the endpoint /devices/{serial}/switch/ports/{portId}. Which HTTP header must be included to authenticate the request?

Hard
711

A developer is writing a Python script that retrieves a device list from a Cisco DNA Center controller. The script must read the controller address and an API token from the environment rather than embedding them in source code. Which practice best supports secure, repeatable execution across developer machines and CI runners?

Easy
712

A developer needs to run a temporary container that executes a command and then exits. Which Docker command should be used?

Medium
713

Refer to the exhibit. Which key-value pair indicates whether this Meraki MR is currently connected to the cloud?

Easy
714

A large enterprise uses Cisco DNA Center to manage over 500 network devices across multiple sites. The network operations team wants to automate the validation of device compliance with a baseline configuration. They have a Python script that uses the Cisco DNA Center REST API to retrieve the device configuration and compare it against a golden configuration stored in a local file. Recently, the script started failing with a 401 HTTP response code when trying to authenticate. The team confirmed the username and password are correct and that the DNA Center server is reachable. The script uses the /api/system/v1/auth/token endpoint to obtain a token. Which of the following is the most likely cause of the 401 error?

Hard
715

A developer is building a Python application that must connect to a REST API hosted on a server. The API requires a persistent connection and the ability to send multiple requests without re-establishing a TCP handshake each time. The developer wants to minimize latency. Which HTTP feature should the application leverage?

Medium
716

A network administrator wants to use Cisco Webex APIs to automate sending messages to a specific room. Which THREE pieces of information are required to send a message using POST /v1/messages?

Easy
717

A network administrator is configuring a new subnet on a Cisco switch. The subnet uses the address 192.168.10.0/24. The administrator needs to assign an IP address to the switch's management interface so it can be reached from a remote management station on the same subnet. Which of the following IP addresses should be assigned to the switch?

Easy
718

In Python, which data type is used to represent an unordered collection of unique elements?

Easy
719

A developer is writing a Python script that uses the Cisco Meraki Dashboard API to retrieve a list of organizations. The script sends a GET request to https://api.meraki.com/api/v1/organizations but receives an HTTP 401 Unauthorized response. The developer has confirmed that the API key is correct and active. Which header must be included in the request to authenticate successfully?

Hard
720

In Python, which of the following is a valid way to define a function that accepts a variable number of positional arguments?

Easy
721

A network engineer is using the Cisco DNA Center API to retrieve a list of all sites. The API returns a large number of records, and the response includes a header indicating the total count and a limit on the number of records per page. Which HTTP response header should the engineer inspect to find the URL for the next page of results?

Medium
722

In the Cisco DNA Center intent API, which HTTP method should be used to update a specific site's information?

Medium
723

Which TWO of the following are categories of Cisco DNA Center APIs? (Choose two.)

Medium
724

A developer needs to prevent SQL injection in a web application. Which coding practice should be used when constructing database queries?

Medium
725

Which TWO statements correctly describe differences between model-driven telemetry and traditional SNMP polling?

Hard
726

A CI/CD pipeline includes stages for code commit, build, unit test, integration test, staging deploy, and production deploy. Which change would best prevent a faulty build from reaching production?

Medium
727

A developer is refactoring a Python module that currently has a single 400-line function named process_orders(). The function mixes validation, database writes, and email notification logic. The team wants to improve testability and reuse. Which software design approach should be applied first?

Medium
728

When using the requests library in Python to send a POST request, which parameter should be used to send a JSON payload in the request body?

Easy
729

An application uses OAuth 2.0 for authorization. The developer receives an access token but needs to know the user's identity. Which OAuth flow should be used to also obtain an ID token that contains user claims?

Hard
730

Which HTTP status code indicates a successful POST request that created a resource?

Easy
731

Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.

Medium
732

A developer needs a repeatable, isolated environment that contains Python 3.11, a specific set of pip packages, and the team's application code, so that every engineer and the CI runner execute identical builds. Which artifact should the developer create to meet this requirement?

Easy
733

Which TWO are benefits of using VLANs in a network? (Choose two.)

Easy
734

What is the purpose of the 'Authorization' header in a REST API request?

Easy
735

An engineer needs to authenticate to the Cisco DNA Center API to obtain a token. What is the correct authentication method and endpoint?

Medium
736

A developer is building a Python script that processes a list of network devices. Each device is represented as a dictionary with keys 'hostname' and 'ip'. The script must create a new list containing only the hostnames of devices whose IP address starts with '10.'. Which Python construct best accomplishes this in a single expression?

Medium
737

A developer wants to perform a rolling update of a Kubernetes Deployment. Which command will update the image and initiate the rollout?

Medium
738

A developer is using the Cisco Meraki Dashboard API to manage network devices. The developer needs to retrieve the list of organizations and then the list of networks within a specific organization. Which two API requests are required to accomplish this task? (Choose two.)

Medium
739

A developer uses RESTCONF to configure a network device. What is the correct content-type header to send in the request?

Medium
740

A network administrator is configuring a switch and needs to ensure that devices connected to the same VLAN can communicate with each other. The administrator wants to verify that the switch is correctly forwarding frames within the VLAN. Which of the following best describes the switch's primary function in this scenario?

Medium
741

A developer is building a Python script that calls the Cisco Webex Teams API to list all memberships in a room. The API returns a maximum of 100 items per page and includes a 'Link' header in the response. The developer needs to retrieve all memberships across multiple pages. What is the correct approach to handle pagination using the Link header?

Medium
742

A network engineer configures an HTTP/2 server. Which feature of HTTP/2 reduces overhead by compressing headers using HPACK?

Hard
743

A developer is building a real-time video streaming application that must minimize delay, even if some packets are lost. Which transport protocol is most appropriate, and why?

Hard
744

An application uses OAuth 2.0 client credentials grant to authenticate with a Cisco API. Which of the following best describes this flow?

Medium
745

A developer is using the Meraki Dashboard API to retrieve a list of clients for a given network. The initial GET request returns a 429 HTTP status. What should the developer do to handle this response appropriately?

Medium
746

A DevOps engineer runs a container using 'docker run -d -p 8080:80 nginx'. The host firewall blocks incoming traffic on port 8080 from external networks but allows from the local host. Which command would allow the engineer to test the container's web server from the same machine?

Medium
747

In the context of SDN, which API is used between the SDN controller and the network devices to configure forwarding behavior?

Medium
748

Match each Cisco platform to its primary use case.

Medium
749

A developer is using the Meraki Dashboard API to retrieve a list of devices in an organization. The API response is paginated. Which HTTP header does Meraki use to indicate the next page of results?

Medium
750

An engineer sees that a DNS query for 'www.example.com' returns a CNAME record. What does this mean?

Hard
751

A developer is writing a script that uses the Cisco DNA Center Intent API to retrieve a list of all sites in the network hierarchy. The developer needs to authenticate first. Which authentication method should be used to obtain a token for subsequent API calls?

Easy
752

An engineer is using the Cisco Meraki Dashboard API to retrieve a list of all network clients for a specific network. Which TWO of the following are required to successfully make this API call?

Medium
753

A developer is designing a data model for network device configurations using YANG. They need to represent a list of interfaces where each interface has a name (string) and speed (enumeration). Which YANG statement correctly defines this structure?

Hard
754

An organization uses Cisco ISE for network access control. A user reports inability to access the network. The switch port shows the authenticator state as 'connecting'. What does this indicate?

Hard
755

A network engineer needs to automate the configuration of VLANs across 50 switches. Which approach best follows Cisco’s recommended practices for programmability?

Easy
756

In DNA Center, which API endpoint is used to retrieve a list of current network issues?

Medium
757

Refer to the exhibit. Which Cisco DNA Center Intent API request produced this response?

Medium
758

A network engineer needs to automate the configuration of VLANs on a set of Cisco switches using Ansible. Which API should be targeted to ensure idempotent configuration updates?

Easy
759

A developer is testing a REST API endpoint using curl. The API requires an API key to be sent in the HTTP header 'X-API-Key'. Which curl command correctly includes the API key?

Easy
760

A developer is writing a Python script that uses the ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The script must filter the configuration to return only the interface configuration. Which filter type should be used in the <get-config> RPC to achieve this?

Hard
761

A Cisco Catalyst Center API uses OAuth 2.0 with the client credentials grant for server-to-server communication. Which token endpoint parameter should the client include to identify itself?

Hard
762

In Postman, you want to run a collection of API requests automatically and test responses. Which feature should you use?

Medium
763

A developer is using Cisco DNA Center API to add a new device to the inventory. Which HTTP method should be used for this operation?

Easy
764

A network administrator is configuring a new subnet for a branch office that requires 50 usable host addresses. The corporate network uses the 192.168.10.0/24 block. Which subnet mask should be used to meet the requirement with minimal waste?

Medium
765

In Cisco DNA Center's intent API, which endpoint would you use to retrieve the list of all network devices?

Easy
766

Which Cisco platform provides an API to retrieve a list of issues affecting the network?

Medium
767

Which THREE are valid Kubernetes Service types? (Select three.)

Hard
768

A developer is writing a Python script that will call a REST API. The API documentation states that the service listens on TCP port 443 and requires an encrypted channel. The developer wants to confirm from the command line that the remote host is reachable on that specific port before writing any code. Which command best accomplishes this?

Easy
769

A developer runs 'docker run -d -p 8080:80 --name web nginx:alpine'. The container fails to start. Which command is the most appropriate to investigate the issue?

Medium
770

Which Git command is used to create a new branch and switch to it in one step?

Medium
771

Refer to the exhibit. A security audit reveals that the authentication mechanism is vulnerable. Which attack is most likely possible?

Hard
772

Which THREE of the following are characteristics of HTTP/2 compared to HTTP/1.1?

Hard
773

An engineer wants to verify that a switch port is configured as an access port in VLAN 10. Which command provides this information?

Easy
774

A developer is working on a Git repository and needs to temporarily save changes that are not ready to be committed, switch to another branch to fix a bug, and then return to the original branch and reapply the saved changes. Which Git command should be used to accomplish this?

Medium
775

A Python script uses the 'requests' library to make a POST request to create a new resource. Which HTTP status code indicates successful creation?

Easy
776

Which THREE statements about RESTful APIs are true?

Hard
777

A developer is building a Python script that uses the Cisco Meraki Dashboard API. The script needs to retrieve the list of organizations the API key has access to. Which HTTP method and endpoint should the developer use?

Medium
778

A DevOps engineer is designing a REST API for a custom network automation tool. Which principle is essential for a RESTful design?

Medium
779

In a Python script using the 'requests' library to interact with Cisco DNA Center API, which function call is used to send a POST request with JSON data?

Easy
780

A developer needs to retrieve the hostname of a Cisco IOS XE device using RESTCONF. Which URI path is correct?

Hard
781

A developer is building a script to retrieve a list of network devices from Cisco DNA Center. The API response includes a 'nextToken' field in the body to indicate more results. What pagination method is being used?

Medium
782

A developer is designing a Python script that must authenticate to a Cisco Meraki API using an API key. The key should not be hardcoded in the script. Which method is most secure for managing the API key?

Medium
783

An engineer uses the Cisco Webex Teams API to send a message to a room. The API returns HTTP 403 Forbidden. What is the most likely cause?

Medium
784

A network automation team is comparing configuration management tools for managing Cisco IOS XE devices. They want to understand which TWO statements accurately describe how Ansible differs from Puppet in this context. (Choose two.)

Medium
785

In Docker, which command is used to build an image from a Dockerfile and tag it as 'myapp:v1'?

Easy
786

Which THREE of the following are benefits of using event-driven architecture in a distributed system? (Choose three.)

Hard
787

Refer to the exhibit. A developer is trying to access the REST API on a Cisco IOS XE device but receives a 401 Unauthorized error. What is the most likely cause?

Easy
788

Which TWO HTTP status codes indicate client errors?

Medium
789

Based on the routing table, what type of OSPF route is the default route (0.0.0.0/0)?

Hard
790

An engineer is troubleshooting a network issue and needs to verify the MAC address of the next-hop router on a directly connected segment. Which layer of the OSI model does the engineer need to examine to find this information?

Easy
791

A company has a web application running on Cisco DNA Center. The application uses OAuth 2.0 for authentication with an external identity provider (IdP). Recently, users have reported that they are being logged out unexpectedly after a few minutes of inactivity, even though the IdP token has a 1-hour expiration. The application developer wants to maintain usability while keeping security controls. What is the most likely cause and solution?

Medium
792

A developer is troubleshooting an application that uses HTTP/2. The developer notices that multiple requests are being sent concurrently over a single TCP connection, and the responses are being received out of order. Which HTTP/2 feature allows this behavior?

Medium
793

A developer is creating a Python function that must parse a JSON response from a Cisco DNA Center API. The function should handle cases where a key may be missing without crashing. Which approach best achieves this?

Medium
794

When designing a REST API for managing network devices, which two principles should be followed to ensure statelessness?

Medium
795

A Webex API request returns a 401 Unauthorized error. The developer has already obtained an access token. What is the most likely cause?

Medium
796

A developer is using the Webex API to create a webhook that triggers when a new message is posted in a room. What information is typically included in the webhook payload sent by Webex to the callback URL?

Medium
797

A network engineer is using Ansible to automate configuration changes on Cisco IOS XE devices. The engineer wants to ensure that the playbook applies a set of configuration lines only if they are not already present. Which Ansible module should be used to achieve idempotent configuration management?

Easy
798

Which DNS record type is used to verify domain ownership for email security protocols like SPF and DKIM?

Hard
799

Which THREE of the following are characteristics of RESTCONF compared to NETCONF? (Select three.)

Hard
800

A developer needs to create a Python script that makes a GET request to a REST API to retrieve a list of network devices. The API uses query parameters to filter by device type and status. Which TWO code snippets correctly include query parameters using the requests library? (Choose two.)

Easy
801

A developer is using the Cisco NX-API on a Cisco Nexus switch to retrieve the running configuration. The developer sends an HTTP POST request to the NX-API endpoint with the JSON payload: {"ins_api": {"version": "1.0", "type": "cli_show", "chassis": "1", "input": "show running-config", "output_format": "json"}}. The switch returns an error indicating that the command is not supported. What is the most likely reason?

Hard
802

A developer calls a REST API with GET /api/v1/devices?limit=50 and receives the first page of results plus a body field named nextPageToken. The API documentation states that results are cursor-paginated. How should the script request the next page?

Medium
803

A developer is building a Python tool that must retrieve the list of interfaces from a Cisco IOS XE device using the RESTCONF API. The device is reachable at https://10.1.1.1 and supports the ietf-interfaces YANG model. The developer wants to send the request and parse the JSON response. Which Python code snippet correctly performs this operation?

Medium
804

A network automation engineer needs to retrieve the running configuration of a Cisco IOS XE device using NETCONF. Which ncclient method should be used to fetch the configuration without modifying the device?

Easy
805

A developer is writing a Python script to interact with a Cisco device using RESTCONF. The script sends a PUT request to modify an interface configuration. Which HTTP response code indicates that the resource was successfully created?

Easy
806

Based on the exhibit, what is the most likely reason for the connection timeout?

Hard
807

A developer is writing a Python script that uses the Cisco Webex Teams API to create a new room and then add a user to that room. The script must handle the response from the room creation to extract the room ID for the subsequent membership call. Which HTTP status code should the developer expect from the room creation request, and which field in the response contains the room ID?

Hard
808

During a CI/CD pipeline, a security scan reveals that a Docker image contains a vulnerability in a base layer. Which action BEST addresses the issue?

Medium
809

An application deployed on a Kubernetes cluster must call an external payment API. The security team requires that the API credential never be stored in the container image, never appear in the pod specification, and be rotatable without rebuilding or redeploying the application. Which approach meets all three requirements?

Hard
810

Which TWO statements are correct about Ansible inventory files? (Select exactly 2.)

Easy
811

A developer is testing a REST API that returns a JSON response with a 'Location' header when a new resource is created. The developer wants to capture the URL of the newly created resource from the response. Which HTTP status code and header should the developer look for?

Medium
812

A developer writes a Python script that uses ncclient to configure a loopback interface on a Cisco IOS XE router. The script calls edit_config against the candidate datastore and then exits without calling commit. The next day, the interface is missing from the running configuration. What is the most likely cause?

Hard
813

A NETCONF manager sends a get-config request to a Cisco device and receives the above reply. The automation script expected the interface to be enabled. Which of the following is the best course of action to remediate the issue?

Hard
814

A network engineer is developing a Python application that uses the Cisco Meraki Dashboard API. The API responses are in JSON format. Which Python module is most commonly used to parse JSON responses?

Medium
815

A team is using Python scripts with netmiko to back up configurations from a large number of network devices. What is the primary advantage of using netmiko over direct paramiko for this task?

Easy
816

A developer is designing a microservices architecture where services need to discover each other using DNS. The team wants to map a service name 'payment-service.example.com' to its IPv6 address. Which DNS record type should be used?

Hard
817

A developer is writing a Python script that must authenticate to the Cisco DNA Center REST API and create a new site. The script stores the controller hostname, username, and password in environment variables. Which approach correctly obtains the authentication token required for subsequent API calls?

Medium
818

A DevOps team is building a CI/CD pipeline that configures Cisco NX-OS switches. They want to use model-driven telemetry to stream operational data. Which protocol should they use for on-change telemetry?

Medium
819

Which TWO of the following are true about REST API design principles?

Easy
820

A DevOps engineer is configuring a CI/CD pipeline that uses Cisco DNA Center API to deploy network configurations. Which two best practices should be followed? (Choose two.)

Medium
821

When using the Cisco Meraki Dashboard API with pagination, the Link header in the response contains <https://api.meraki.com/api/v1/organizations?perPage=10&startingAfter=123>; rel="next". What does this indicate?

Medium
822

Which of the following best describes the purpose of a unit test in software development?

Easy
823

A developer is using Git to manage automation code. What is the primary advantage of using 'rebase' instead of 'merge' to integrate changes from a feature branch into the main branch?

Medium
824

A team is building a CI/CD pipeline for network automation. They want to use Cisco Modeling Labs (CML) to validate configuration changes before production. What is the best approach to integrate CML into the pipeline?

Hard
825

When designing a REST API endpoint to update a network device's configuration, which HTTP method should be used?

Easy
826

Which HTTP method should be used to replace an entire existing resource in a RESTful API?

Easy
827

Which THREE of the following are direct benefits of using version control in software development?

Medium
828

A developer needs to retrieve the list of all networks in a specific Cisco Meraki organization. The developer has the organization ID and a valid API key. Which HTTP method and endpoint should be used?

Medium
829

Which Docker command is used to view the logs of a running container in real-time?

Medium
830

A network engineer is analyzing traffic and needs to identify which applications use UDP. Which three applications commonly use UDP as their transport protocol? (Choose three.)

Hard
831

A developer is writing a web application and wants to prevent SQL injection attacks. Which coding practice should be followed when constructing SQL queries?

Medium
832

A network automation script on a Cisco IOS XE device needs to retrieve the current running configuration and then compare it against a known-good baseline stored on a Git server. The script must use a protocol that encrypts all data in transit and supports programmatic, structured retrieval of the configuration without screen-scraping. Which approach should the script use?

Medium
833

Which TWO Kubernetes resources are used to provide configuration data to pods? (Choose TWO.)

Medium
834

A network automation script uses the requests library to retrieve device information from a REST API. The API requires authentication via a bearer token. Which code example correctly sets the Authorization header?

Medium
835

A developer is writing a Python script that processes a large CSV file. The script uses 'with open(file, 'r') as f' to read the file. Why is this approach preferred over calling f = open(file) and then f.close()?

Hard
836

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required?

Medium
837

A developer is designing a Python application that interacts with multiple Cisco REST APIs. They need to implement robust error handling for common HTTP status codes. Which TWO of the following status codes indicate that the client should retry the request after a delay? (Choose two.)

Hard
838

An engineer is writing a Python script that must authenticate to the Cisco Meraki Dashboard API and then retrieve the list of organizations the API key can access. Which authentication method and endpoint combination is correct?

Medium
839

A network automation team is evaluating tools to manage configuration drift across a fleet of Cisco IOS XE devices. They want to ensure that device configurations remain in the desired state and that any unauthorized changes are detected and remediated. Which two capabilities are essential for a configuration drift detection and remediation solution in this environment? (Choose two.)

Medium
840

Refer to the exhibit. A developer receives this response from Cisco DNA Center API. What is the most likely cause and solution?

Hard
841

A developer creates a Dockerfile with the following content: FROM python:3.9-slim, COPY app.py /app/, RUN pip install flask, EXPOSE 5000, CMD ["python", "/app/app.py"]. When building the image with 'docker build -t myapp .', what is the purpose of the EXPOSE instruction?

Easy
842

A developer wants to create a Docker image that runs a Python application. Which instruction should be placed at the end of the Dockerfile to specify the command that runs when the container starts?

Easy
843

In a CI/CD pipeline using Jenkins, which stage is typically executed immediately after the build stage to ensure code quality before deployment?

Medium
844

A script using the Meraki Python library fails with an error 'Rate limit exceeded'. The developer needs to handle this. Which approach is correct?

Hard
845

A company uses Ansible to automate network configuration. They have an Ansible control node that must reach all network devices. Which transport protocol does Ansible use by default to connect to Cisco IOS devices?

Medium
846

A security engineer is configuring a CI/CD pipeline that builds container images. The pipeline must fail the build if the image contains a package with a known critical vulnerability. The scanner runs as a separate step after the image is built. Which approach correctly integrates vulnerability scanning into the pipeline?

Hard
847

A developer is writing a Python application that interacts with a REST API. The API requires authentication using an API key. The developer wants to avoid hardcoding the API key in the source code. Which approach should be used to securely provide the API key to the application?

Medium
848

A network team is implementing automation to provision new switchports across a campus network. They decide to use a controller-based approach with Cisco DNA Center. What is the primary advantage of using DNA Center for this task?

Medium
849

A team uses GitHub Actions for CI/CD. Their workflow includes a job that builds a Docker image and pushes it to a private registry. The job needs to authenticate to the registry using secrets stored in GitHub. Which approach is most secure for passing credentials?

Hard
850

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

Hard
851

Which of the following is a non-overlapping channel in the 2.4 GHz Wi-Fi band?

Easy
852

A network engineer is using Ansible to automate configuration changes on a group of Cisco IOS XE devices. The engineer wants to ensure that the playbook only makes changes if the device configuration differs from the desired state, and that the playbook reports whether any changes were made. Which Ansible feature should the engineer rely on?

Easy
853

A network automation script uses the Python ncclient library to modify a device configuration. Which NETCONF operation should be used to apply configuration changes?

Easy
854

A security team is developing an application that collects network alerts from Cisco Firepower Management Center (FMC) API. The API requires OAuth2 authorization code grant flow. After obtaining an authorization code, what must the application do to get an access token?

Hard
855

Which THREE of the following are characteristics of IPv6? (Select exactly three.)

Hard
856

A developer runs 'docker-compose up -d' for a multi-service application. What does the '-d' flag do?

Easy
857

A developer is troubleshooting a REST API integration that intermittently returns HTTP 429 responses. Which TWO practices help the client handle rate limiting correctly? (Choose two.)

Hard
858

A developer is writing a Python script that consumes a REST API. The API returns a large number of records and uses pagination via a 'next' link in the response body. The developer needs to automatically follow these links until all records are retrieved. Which Python library feature is most appropriate for making the HTTP requests and handling the pagination loop?

Medium
859

A network administrator configures a switch port to belong to VLAN 10. Which OSI layer is primarily involved in VLAN tagging?

Medium
860

A developer is building an application that needs to retrieve information from a REST API that uses cursor-based pagination. The response includes a 'next_cursor' field when more results are available. How should the developer structure the requests to retrieve all pages of data?

Medium
861

A developer is using the Cisco DNA Center Intent API to manage network devices. The developer needs to programmatically retrieve a list of all devices that match a specific hostname pattern. Which two actions must be performed to accomplish this? (Choose two.)

Medium
862

When using RESTCONF to configure a network device, which URL path prefix and content-type header should be used?

Medium
863

Match each Git command to its function.

Medium
864

An application needs to retrieve all network clients from a specific Meraki network. The API response may be paginated. Which query parameters can be used to implement cursor-based pagination with the Meraki Dashboard API?

Hard
865

In a CI/CD pipeline, a code quality check fails due to a security vulnerability in a third-party library. What is the best practice to address this?

Hard
866

Using the Cisco DNA Center API, an engineer wants to create a new site with building and floor information. Which HTTP method and endpoint should be used?

Hard
867

A developer is designing a Python class to model a network device. The class should prevent direct modification of the device's IP address after it is set, while still allowing the address to be read. Which implementation achieves this encapsulation requirement?

Hard
868

A Python script uses the ncclient library to connect to a Cisco NX-OS device over NETCONF. After establishing the session, the script executes an editing operation with candidate datastore. Which additional step is required to make the changes take effect immediately on the running configuration?

Medium
869

A developer is building a Python script to create a new network in a Cisco Meraki organization. The developer must authenticate to the Dashboard API. Which HTTP header is used to pass the API key?

Medium
870

A developer is writing a Python unit test for a function that parses interface status from a network device. The function raises a custom exception called InterfaceDownError when an interface is administratively down. Which unittest assertion correctly verifies that calling parse_interface('down') raises InterfaceDownError?

Medium
871

A developer is writing a Python script to back up Cisco router configurations via SSH. Which two libraries are appropriate for this task? (Choose two.)

Easy
872

An administrator is configuring a Cisco Meraki Dashboard API integration. After receiving a 429 HTTP response, what header should be examined to determine when the request can be retried?

Medium
873

A developer wants to use Postman to test a REST API that requires a Bearer token. Where should the token be placed in the request?

Easy
874

Which TWO statements about the MVC pattern are correct? (Choose two.)

Medium
875

A developer is integrating with a REST API that returns a 429 Too Many Requests status code along with a Retry-After header. The developer's script currently retries immediately upon receiving a 429. What should the developer do to correctly handle rate limiting?

Hard
876

In a Docker Compose file, which key is used to define the dependency order between services?

Easy
877

A developer is reviewing a CI/CD pipeline that builds a Python application and pushes a Docker image to a registry. The pipeline currently runs as a single stage that installs dependencies, runs tests, and pushes the image. The team wants to ensure that the image is not pushed if any test fails. Which change should be made to the pipeline?

Hard
878

A developer is building a Python application that must authenticate to Cisco Webex APIs on behalf of a service account. The application will run unattended and must not require interactive user login. The developer has already registered an integration in the Webex Developer Portal and obtained the client ID and client secret. Which OAuth 2.0 grant type should the application use?

Medium
879

A developer is implementing secure coding practices to prevent SQL injection. Which approach is most effective when building a SQL query with user input?

Hard
880

A developer is building a microservice that must call an internal API. The API uses mutual TLS (mTLS), and the service must validate the server certificate against a private CA. Which configuration should the client use to verify the server identity?

Hard
881

Which YANG model is an OpenConfig model commonly used for interface configuration?

Easy
882

A network engineer is troubleshooting a connectivity issue between two hosts on different subnets. The engineer suspects a problem with the default gateway configuration. Which two statements about default gateways are correct? (Choose two.)

Hard
883

Which YANG model is an OpenConfig model used for interface configuration?

Medium
884

A network engineer is using the Cisco Meraki Dashboard API to retrieve a list of organizations. The API returns a JSON array. Which HTTP method should be used to fetch this list?

Easy
885

A developer needs to retrieve a list of network devices from Cisco DNA Center. Which API endpoint should be used?

Medium
886

Which HTTP method is idempotent and used to update a resource by sending the full representation?

Medium
887

An administrator needs to retrieve the hostname of an IOS XE device using RESTCONF. Which URL and data path should they use?

Medium
888

A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)

Medium
889

Which tool is used to explore and validate YANG models?

Easy
890

A network engineer is using Cisco IOS XE RESTCONF to retrieve the hostname of a device. The device has already enabled netconf-yang and restconf. Which URL path should be used?

Hard
891

Which data structure in Python would be most appropriate for storing a collection of unique items and performing fast membership tests?

Easy
892

When using the NX-API on Cisco NX-OS, which HTTP method is used to send CLI commands in JSON format?

Medium
893

An automation engineer needs to retrieve the current running configuration from a Cisco IOS XE device using RESTCONF over HTTPS. The device supports the ietf-netconf-monitoring YANG module. Which HTTP method and URI should be used to fetch the configuration data represented by a specific YANG model?

Easy
894

A developer is using the Cisco DNA Center API to retrieve device details. The API requires authentication using a token obtained from the /dna/system/api/v1/auth/token endpoint. The token has an expiration time. Which HTTP status code indicates that the token has expired and a new one must be obtained?

Hard
895

A network engineer is writing a Python script that uses the requests library to call a REST API. The API requires an API key to be passed in the header. Which HTTP header field is commonly used to transmit an API key for authentication?

Easy
896

A team deploys a containerized web application and wants to verify that the image running in production was built from the reviewed source and has not been altered since. Which practice directly provides this guarantee?

Easy
897

Which THREE of the following are common security vulnerabilities listed in the OWASP Top 10? (Choose three.)

Easy
898

A developer is building a Python client that calls a REST API returning JSON. The client must detect authentication failures, rate limiting, and server errors so it can retry or alert appropriately. Which coding practice should be applied?

Hard
899

Which NX-OS API method allows sending CLI commands in JSON format without enabling any additional features?

Medium
900

Which two statements are true about Cisco DevNet Sandboxes?

Easy
901

An engineer is comparing TCP and UDP for a new telemetry service that sends small, frequent datagrams from thousands of IoT sensors to a collector. The design prioritizes low overhead and does not require retransmission of lost readings. Which two characteristics apply to UDP in this scenario? (Choose two.)

Medium
902

A developer is using Git for version control of a Python library. A colleague accidentally committed a large sensitive file. Which Git command sequence should be used to remove the file from history without losing subsequent changes?

Hard
903

Based on the exhibit, what is the frequency of the telemetry subscription?

Easy
904

A developer is deploying a web application to a Kubernetes cluster. The application must be reachable from the internet on port 443, and the team wants the cluster to automatically provision a TLS certificate. Which Kubernetes resource should the developer create to expose the application with TLS termination and automatic certificate management?

Medium
905

A developer is creating a YANG data model for a new interface feature. The model must allow the user to choose from a predefined set of values for the 'duplex' leaf. Which YANG statement should be used to restrict the values to 'full', 'half', and 'auto'?

Hard
906

In a CI/CD pipeline for a network automation project, which stage is responsible for validating the syntax of YAML configuration files?

Hard
907

A developer is building a RESTful API with Python Flask. Which TWO are recommended security best practices for exposing the API over HTTPS?

Easy
908

A developer is designing unit tests for a Python function that calls a Cisco Meraki Dashboard API endpoint to retrieve organization inventory. The tests must run quickly in CI without making real network calls, and must verify that the function builds the correct request. Which TWO practices should the developer implement? (Choose two.)

Medium
909

A developer is writing a Python script that calls the Cisco Webex Rooms API to create a new team room. The script must send JSON data in the request body and receive JSON responses. Which HTTP header should be set to ensure the API interprets the request body as JSON and returns JSON?

Easy
910

An engineer must push a configuration change to a Cisco IOS XE router using NETCONF. The engineer wants to stage the change so it can be previewed and later committed or discarded, rather than applying it immediately to the running configuration. Which NETCONF capability enables this behavior?

Easy
911

A DevOps team is securing a CI/CD pipeline that deploys containerized applications to Kubernetes. Which THREE practices enhance security?

Hard
912

Which of the following is a best practice for securing API keys in a CI/CD pipeline?

Easy
913

A developer is reviewing a Python script that makes a REST API call using the requests library. The script must set a custom HTTP header 'X-Auth-Token' with a value from an environment variable. Which code snippet correctly adds this header to the request?

Easy
914

In a Docker bridge network, two containers can communicate with each other using which identifier by default?

Medium
915

A Webex bot needs to receive real-time notifications when a new message is posted in a Webex space. Which Webex API feature should the bot implement?

Medium
916

A developer is integrating with Cisco DNA Center. After a successful POST to create a new site, the API returns HTTP 202 Accepted with a task ID in the response body. The developer needs to confirm when the site creation completes. What should the developer do next?

Hard
917

A network administrator is configuring a new subnet for a branch office that requires at least 50 usable host addresses. Which subnet mask would meet this requirement while minimizing address waste?

Medium
918

A company is adopting DevSecOps practices. Which THREE practices should be implemented to secure application deployment?

Hard
919

A Python script used for network automation requires storing an API secret. Which approach is the most secure and recommended best practice?

Easy
920

A developer is configuring a GitHub Actions workflow that must authenticate to AWS to push an image to Amazon ECR. The security team prohibits long-lived AWS access keys in repository secrets. Which authentication method should the workflow use?

Hard
921

A developer is designing a REST API for managing network devices. Which three best practices should be followed for the API design? (Choose three.)

Medium
922

A Python script uses a dictionary to store device configuration parameters. Which key, if any, will raise a KeyError if it does not exist in the dictionary?

Easy
923

Which data serialization format is most commonly used for configuration files in Cisco automation tools like Ansible?

Easy
924

A DevOps engineer is implementing Infrastructure as Code (IaC) for network devices. Which of the following practices is most critical to ensure that the environment state matches the desired configuration defined in code?

Medium
925

A network automation engineer is evaluating options for model-driven programmability on Cisco devices. Which THREE are valid YANG model sources or tools? (Choose three.)

Hard
926

When using the Meraki Dashboard API, what is the correct method to authenticate requests?

Medium
927

In the MVC (Model-View-Controller) pattern, which component is responsible for handling user input and updating the model?

Hard
928

A developer wants to create a Webex webhook that triggers when a new message is posted in any room the bot is in. Which resource event should they subscribe to?

Medium
929

Which three capabilities are offered by the Cisco DNA Center REST API?

Medium
930

In the context of SDN, which API allows a network controller to communicate with the forwarding plane of network devices?

Hard
931

A developer is writing a Python script that uses the Cisco DNA Center Intent API to retrieve a list of all network devices. The script must handle pagination to ensure all devices are returned. Which TWO parameters are used to control pagination in the Cisco DNA Center API? (Choose two.)

Medium
932

Which EEM applet action is used to execute a CLI command when an event triggers?

Medium
933

A developer is creating a Python script that uses the Cisco Webex Teams REST API. The script needs to read the WEBCEX_ACCESS_TOKEN environment variable and include it as a Bearer token in the HTTP Authorization header for every request. Which code snippet correctly accomplishes this?

Medium
934

Which NETCONF operation is used to retrieve the entire configuration datastore from a network device?

Medium
935

A developer is using Docker Compose to define a multi-container application. The application requires a database container and a web server container that must communicate with each other. Which Docker Compose file section defines the individual containers and their configurations?

Easy
936

Which two authentication methods are commonly used with Cisco APIs? (Choose two.)

Easy
937

A developer is writing unit tests for a Python module that parses show command output from network devices. The tests must be deterministic and must not depend on real devices or the network. Which TWO practices should the developer apply? (Choose two.)

Hard
938

A developer is working with the Cisco SD-WAN vManage API to monitor overlay tunnels. They need to retrieve a list of all devices with their site IDs and IP addresses. Which API endpoint is most appropriate?

Hard
939

A network engineer is designing a subnetting scheme for a company that requires 5 subnets from the 192.168.1.0/24 network. What subnet mask should be used, and how many usable hosts per subnet will be available?

Hard
940

A developer is using the Meraki API to retrieve a list of networks for an organization. Which HTTP method and endpoint should be used?

Medium
941

A developer needs to send a message to a specific room in Webex using the API. What is the correct endpoint and required body parameter for the room destination?

Hard
942

A developer needs to create a Python function that accepts any number of keyword arguments and prints them. Which function definition correctly uses **kwargs?

Medium
943

In a network automation workflow, a developer needs to ensure idempotency. What does idempotency mean in this context?

Hard
944

An IPv6-enabled host is trying to discover the MAC address of another host on the same link. The host knows the destination IPv6 address but does not have a corresponding entry in the neighbor cache. Which protocol and message type does the host use?

Hard
945

A network engineer captures traffic between a client and a server. The client sends a TCP segment with the SYN flag set. The server responds with a segment that has both SYN and ACK flags set. Which field in the server's response acknowledges the client's initial sequence number?

Medium
946

A REST API returns a 500 Internal Server Error when a client sends a malformed JSON payload. What is the most appropriate HTTP response code to indicate a client-side error?

Medium
947

In a microservices architecture, which of the following is a primary advantage over a monolithic architecture?

Hard
948

Which three of the following are common data formats used with REST APIs on Cisco platforms?

Medium
949

An automation engineer is writing a Python script that uses the ncclient library to retrieve the running configuration from a Cisco IOS XE device via NETCONF. The device requires SSH and uses the default NETCONF port. Which code snippet correctly establishes a NETCONF session and retrieves the configuration?

Hard
950

An engineer needs to modify the running configuration of a Cisco IOS-XE device using a protocol that is stateless and uses HTTP methods. Which protocol should be used?

Easy
951

A network engineer is using a REST API to retrieve a list of network devices from a controller. The API requires authentication using a token. Which HTTP header should be used to include the token in the request?

Medium
952

Which TWO are valid methods to secure a Docker container?

Easy
953

An engineer is troubleshooting packet loss between two hosts on different subnets. The traceroute shows that packets reach the first hop router but then stop. The router's ARP table shows an incomplete entry for the next-hop IP address. What is the most likely cause?

Hard
954

A network engineer is troubleshooting an Ansible playbook that targets Cisco IOS XE devices over SSH. The playbook connects successfully but fails when applying configuration, and the engineer suspects the connection plugin and transport settings. Which TWO actions should the engineer take to verify and correct the connection configuration? (Choose two.)

Hard
955

A developer is integrating with a REST API that uses rate limiting. The API documentation states that clients can make 100 requests per minute. The developer's application needs to fetch data from multiple endpoints. Which HTTP status code should the application expect if it exceeds the rate limit, and what header might indicate when to retry?

Medium
956

A developer is writing a script that calls a REST API returning JSON. The script uses the Python requests library and must detect when the server responds with a 429 Too Many Requests status. Which expression correctly evaluates the status code?

Hard
957

An EEM applet is triggered when a specific syslog message pattern appears. Which action should be used to send a custom syslog message?

Hard
958

A developer is writing a Python script that must retrieve the current operational state of a Cisco IOS XE device through its RESTCONF API. The device uses YANG models, and the script must read interface statistics without altering the configuration. Which HTTP method should the script use, and what is the correct URL structure?

Medium
959

A network automation engineer needs to retrieve the Layer 2 topology for a specific VLAN from Cisco DNA Center. Which API endpoint should be used?

Medium
960

A network automation team uses a CI/CD pipeline. Which practice best ensures that configuration changes are validated before deployment to production?

Medium
961

A developer is using Git to manage a project. They need to temporarily save changes that are not ready to be committed so they can switch to another branch. Which Git command should they use?

Easy
962

A developer is using the Python requests library to call a REST API on a Cisco DNA Center controller. The API requires a token for authentication. The developer writes code to obtain the token and then call the network-device endpoint. Which HTTP header must be included in the second request to authenticate using the token?

Easy
963

A developer has built a container image locally and needs to push it to Docker Hub so a CI runner can pull it. The image is currently tagged only as `webapp:latest`. The Docker Hub repository is `devopsuser/webapp`. Which command sequence correctly prepares and uploads the image?

Medium
964

A developer is building a script that authenticates to the Cisco DNA Center API. The documentation states that the authentication endpoint returns a token that must be included in subsequent API calls. Which authentication scheme does Cisco DNA Center expect for those subsequent calls?

Medium
965

A network engineer is troubleshooting a connectivity issue between two hosts in different VLANs on the same switch. The hosts are in VLAN 10 and VLAN 20, respectively. The switch has an SVI for each VLAN and IP routing is enabled. Which command should be used to verify that the switch is forwarding traffic between the VLANs?

Easy
966

Which THREE factors influence the convergence time of OSPF in a large enterprise network? (Choose three.)

Hard
967

A developer is writing an integration that calls a REST API which returns a large collection of items across many pages. The API documentation states that the response includes a 'next' link when more results are available. Which approach correctly retrieves the complete collection?

Hard
968

A CI/CD pipeline for network automation includes a stage that runs Ansible playbooks against a staging environment. The pipeline is triggered by Git commits. After a commit, the pipeline fails because the Ansible inventory file is missing. What is the most likely reason?

Hard
969

A development team is using Cisco Intersight to manage their on-premises and cloud infrastructure. They want to ensure that API access to Intersight is secure and follows best practices. Which TWO measures should they implement to protect their Intersight API credentials and access? (Choose two.)

Hard
970

A developer is building an application that interacts with the Webex API to create rooms and send messages. The application needs to receive real-time notifications when a new message is posted in any room. Which TWO actions should the developer take? (Choose two.)

Medium
971

Which TWO are common authentication methods used when interacting with Cisco APIs?

Easy
972

Which THREE are valid reasons to use Cisco DNA Center's Assurance APIs in an enterprise network?

Hard
973

An organization uses Cisco DNA Center and wants to use its Intent API to retrieve the health score of all wireless clients. Which API endpoint and method should be used?

Hard
974

Given the Python list comprehension: result = [x*2 for x in range(10) if x > 5] What is the value of result?

Hard
975

A developer is creating a Python script to interact with a Cisco NX-OS device using the NX-API. The script will send HTTP requests to the device's management IP. Which command must be configured on the NX-OS device to enable the NX-API feature?

Easy

Frequently asked questions

What does the scenario questions domain cover on the 200-901 exam?
scenario questions questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 975 scenario questions questions in the 200-901 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only scenario questions questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.