How many Hard Difficulty Questions questions are on this page?

This page has 20 Hard Difficulty Questions scenario questions for the 200-901 exam, each with detailed explanations and wrong-answer analysis.

How should I approach 200-901 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Cisco DevNet Associate 200-901 questions

Scenario-based practice

Hard Difficulty Questions

Practise Cisco DevNet Associate 200-901 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

200-901

exam code

Cisco

vendor

Scenario guide

How to approach hard difficulty questions

These are the questions most candidates get wrong. They require connecting multiple concepts, reading tricky output, or knowing edge-case behaviour that isn't on most study cards. Practising them trains you to operate under uncertainty — a necessary skill on the real exam.

Quick answer

Hard Difficulty Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmultiple choice

Full question →

Refer to the exhibit. A developer is building a Docker image for a Node.js application. The Dockerfile contains: ``` FROM node:14 WORKDIR /usr/src/app COPY package*.json ./ RUN npm install COPY . . CMD ["node", "app.js"] ``` When building, the error shown occurs. What is the most likely cause?

Exhibit

Refer to the exhibit.
```
Error: EACCES: permission denied, mkdir '/usr/src/app/node_modules/.cache'
    at Object.mkdirSync (fs.js:753:3)
    at ...
```

A
The Dockerfile should use the root user for running npm install.
Why wrong: Running as root is a security risk; the issue is about file permissions, not user.
B
The npm install command should be run with the --unsafe-perm flag.
Why wrong: The --unsafe-perm flag allows npm to run as root, but that is not the recommended solution; the proper fix is to set directory permissions.
C
The base image node:14 is outdated and contains a bug.
Why wrong: The error is permission-related, not a bug in the base image.
D
The application is running as a non-root user (e.g., node) that lacks write permission to the working directory.
The node image often uses the node user; if the WORKDIR is owned by root, the node user cannot write to it. The fix is to ensure proper ownership.

Hard Difficulty Questions

How to approach hard difficulty questions

Quick answer

Related 200-901 topic practice pages

Application Deployment and Security practice questions

Software Development and Design practice questions

Understanding and Using APIs practice questions

Cisco Platforms and Development practice questions

Network Fundamentals practice questions

Infrastructure and Automation practice questions

200-901 fundamentals practice questions

200-901 scenario practice questions

200-901 troubleshooting practice questions

Practice scenarios

Refer to the exhibit. A developer is building a Docker image for a Node.js application. The Dockerfile contains: ``` FROM node:14 WORKDIR /usr/src/app COPY package*.json ./ RUN npm install COPY . . CMD ["node", "app.js"] ``` When building, the error shown occurs. What is the most likely cause?

Exhibit

A network engineer is configuring EtherChannel between two switches. The switches are connected via four links. The engineer wants to load balance traffic based on source and destination IP addresses. Which configuration command should be used on Cisco IOS?

A developer is using the Meraki Dashboard API to retrieve a list of clients for a network. The API returns a 429 error. What should the developer do to handle this correctly?

A developer is working with the Cisco SD-WAN vManage API to monitor overlay tunnels. They need to retrieve a list of all devices with their site IDs and IP addresses. Which API endpoint is most appropriate?

An engineer is exploring YANG models for network interfaces. They need a vendor-neutral model that can be used across multiple device types. Which YANG model should they use?

A developer notices that after a new deployment, the application is not receiving traffic. The Service selector does not match the pod labels. Which kubectl command can be used to inspect the Service's selector?

A developer needs to send a message to a specific room in Webex using the API. What is the correct endpoint and required body parameter for the room destination?

A Kubernetes cluster runs a microservice that needs to read configuration values from a ConfigMap and sensitive database credentials from a Secret. The pod manifest references both resources. How should the Secret be mounted to avoid exposing sensitive data in logs or environment variables?

In a network automation workflow, a developer needs to ensure idempotency. What does idempotency mean in this context?

A network engineer configures an HTTP/2 server. Which feature of HTTP/2 reduces overhead by compressing headers using HPACK?

An IPv6-enabled host is trying to discover the MAC address of another host on the same link. The host knows the destination IPv6 address but does not have a corresponding entry in the neighbor cache. Which protocol and message type does the host use?

A security team is developing an application that collects network alerts from Cisco Firepower Management Center (FMC) API. The API requires OAuth2 authorization code grant flow. After obtaining an authorization code, what must the application do to get an access token?

A large enterprise uses Cisco SD-Access with fabric automation. The network administrator wants to automate the process of adding a new user device to a specific virtual network (VN) based on its MAC address. Which API or tool should they use?

When implementing network automation with Cisco devices, which THREE practices help ensure idempotency? (Select THREE)

An organization wants to automate the deployment of wireless configurations across multiple Meraki networks using the Meraki Dashboard API. What authentication method should the developer use in the API requests?

In Cisco DNA Center, which API endpoint is used to retrieve the site hierarchy?

An engineer is troubleshooting packet loss between two hosts on different subnets. The traceroute shows that packets reach the first hop router but then stop. The router's ARP table shows an incomplete entry for the next-hop IP address. What is the most likely cause?

An HTTP/2 connection uses multiple concurrent streams over a single TCP connection. Which feature of HTTP/2 enables this?

A Cisco Catalyst Center API uses OAuth 2.0 with the client credentials grant for server-to-server communication. Which token endpoint parameter should the client include to identify itself?

An EEM applet is triggered when a specific syslog message pattern appears. Which action should be used to send a custom syslog message?