mediumMultiple ChoiceObjective-mapped
200-901 Practice Question: Refer to the exhibit
Exhibit
configure terminal ip http server ip http secure-server ip http authentication local ip http access-class 23 ! access-list 23 permit 192.168.1.0 0.0.0.255
Refer to the exhibit. A developer from subnet 10.10.10.0/24 cannot reach the RESTCONF API on the IOS-XE device. What is the most likely cause?
⚠ Common exam trap
Cisco often tests the distinction between HTTP/HTTPS server enablement and access-class filtering, trapping candidates who assume RESTCONF requires the HTTP server or that authentication is the root cause when a subnet is blocked.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 10.10.10.0/24 subnet is not permitted by the access-class.
The access-class configured under the RESTCONF API restricts incoming connections to specific subnets. Since the developer is on subnet 10.10.10.0/24, which is not listed in the permit statement, all HTTPS requests from that subnet are dropped before reaching the API. This is the most direct cause of the connectivity failure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
HTTPS is not enabled on the device.
Why it's wrong here
The 'ip http secure-server' command enables HTTPS.
- ✗
The HTTP server is not enabled.
Why it's wrong here
The configuration includes 'ip http server', so HTTP is enabled.
- ✗
Authentication is not configured as local.
Why it's wrong here
Authentication is set to local with 'ip http authentication local'.
- ✓
The 10.10.10.0/24 subnet is not permitted by the access-class.
Why this is correct
Access-list 23 permits only 192.168.1.0/24, blocking all other subnets.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.