How should I use these Understanding and Using APIs practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Understanding and Using APIs questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Understanding and Using APIs domain.

200-901 · topic practice

Understanding and Using APIs practice questions

Practise Cisco DevNet Associate 200-901 Understanding and Using APIs practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Understanding and Using APIs

Practice 10 questions Browse domain →

What the exam tests

What to know about Understanding and Using APIs

Understanding and Using APIs questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Understanding and Using APIs exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Understanding and Using APIs questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice

Read the full Understanding and Using APIs explanation →

A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?

Trap 1: The network ID is incorrect.

Wrong network ID returns 404, not empty array.

Trap 2: The API key is invalid.

Invalid API key results in 401/403, not empty array.

Trap 3: The request body is malformed.

Malformed request returns 400, not empty array.

Study all Understanding and Using APIs common traps →

A
The network exists but has no SSIDs configured.
Empty array indicates no SSIDs, which is valid.
B
The network ID is incorrect.
Why wrong: Wrong network ID returns 404, not empty array.
C
The API key is invalid.
Why wrong: Invalid API key results in 401/403, not empty array.
D
The request body is malformed.
Why wrong: Malformed request returns 400, not empty array.

Full breakdown with real-world context →

Question 2easymultiple choice

Read the full Understanding and Using APIs explanation →

When designing a REST API client for a Cisco DNA Center deployment, which authentication method should be used to obtain a token for subsequent API calls?

Trap 1: OAuth 2.0 client credentials grant.

DNA Center does not use OAuth 2.0.

Trap 2: API key in the request header.

DNA Center does not use API keys.

Trap 3: Client certificate in the request.

Certificates are not the standard authentication.

Study all Understanding and Using APIs common traps →

A
OAuth 2.0 client credentials grant.
Why wrong: DNA Center does not use OAuth 2.0.
B
API key in the request header.
Why wrong: DNA Center does not use API keys.
C
HTTP Basic authentication to obtain a token.
Correct method: POST with basic auth to get token.
D
Client certificate in the request.
Why wrong: Certificates are not the standard authentication.

Full breakdown with real-world context →

Question 3hardmultiple choice

Study the full Python automation breakdown →

A Python script uses the Cisco Meraki API to create a new network and then immediately attempts to configure an SSID on that network. The SSID creation fails with a 400 error indicating 'network is not ready'. What is the most likely cause?

Trap 1: The API rate limit has been exceeded.

Rate limiting returns 429, not 400.

Trap 2: The API key does not have write access to networks.

Insufficient permissions return 403.

Trap 3: The SSID name contains invalid characters.

Invalid format returns a different 400 error.

Study all Understanding and Using APIs common traps →

A
The network is not fully provisioned yet; a delay is needed.
Asynchronous provisioning requires waiting.
B
The API rate limit has been exceeded.
Why wrong: Rate limiting returns 429, not 400.
C
The API key does not have write access to networks.
Why wrong: Insufficient permissions return 403.
D
The SSID name contains invalid characters.
Why wrong: Invalid format returns a different 400 error.

Full breakdown with real-world context →

Question 4mediummulti select

Read the full Understanding and Using APIs explanation →

Which TWO of the following are best practices when using REST APIs in Cisco networking environments?

Trap 1: Send credentials as plain text in every request.

Insecure; use tokens.

Trap 2: Poll the API every second to get real-time updates.

Polling is inefficient; use webhooks.

Trap 3: Embed API keys directly in the URL query parameters.

Exposes keys; use headers.

Study all Understanding and Using APIs common traps →

A
Send credentials as plain text in every request.
Why wrong: Insecure; use tokens.
B
Poll the API every second to get real-time updates.
Why wrong: Polling is inefficient; use webhooks.
C
Always handle HTTP error codes like 4xx and 5xx.
Error handling is critical for robustness.
D
Embed API keys directly in the URL query parameters.
Why wrong: Exposes keys; use headers.
E
Implement caching to reduce redundant API calls.
Caching improves performance.

Full breakdown with real-world context →

Question 5mediummultiple choice

Read the full Understanding and Using APIs explanation →

Refer to the exhibit. A network engineer runs a script that queries the Cisco DNA Center site health API. The response shows Branch1 with a healthScore of 10. What is the most likely action to improve Branch1's health?

Exhibit

Refer to the exhibit.
GET /dna/intent/api/v1/site-health HTTP/1.1
Host: 10.1.1.1
Accept: application/json
X-Auth-Token: <token>

HTTP/1.1 200 OK
Content-Type: application/json

{
  "response": [
    {
      "siteName": "Branch1",
      "healthScore": 10,
      "numberOfClients": 25
    },
    {
      "siteName": "HQ",
      "healthScore": 90,
      "numberOfClients": 150
    }
  ],
  "version": "2.1.1"
}

Trap 1: Increase the number of clients at Branch1.

That would likely decrease health.

Trap 2: Check the API authentication token.

Token is valid; the API returned data.

Trap 3: Use a different API version.

Version is not the cause of low health.

Study all Understanding and Using APIs common traps →

A
Investigate the network devices and connectivity at Branch1.
Low health score indicates problems at the site.
B
Increase the number of clients at Branch1.
Why wrong: That would likely decrease health.
C
Check the API authentication token.
Why wrong: Token is valid; the API returned data.
D
Use a different API version.
Why wrong: Version is not the cause of low health.

Full breakdown with real-world context →

Question 6hardmultiple choice

Read the full wireless explanation →

A DevOps team manages a multi-site Cisco Meraki network with 50 MX appliances and 200 MR access points. They use a Python script that calls the Meraki API to collect device utilization data every hour and stores it in a CSV file. Recently, the script started failing intermittently with HTTP 429 status codes. The team suspects rate limiting but notices that the failures occur even when only one script instance runs. The script uses a single API key and makes requests to the /devices/{serial}/uplink endpoint for each MX and the /devices/{serial}/wireless/status endpoint for each MR. The script is scheduled via cron and runs sequentially. The team wants to resolve the rate limiting while minimizing changes to the script. Which course of action should the team take?

Trap 1: Distribute the API requests across multiple API keys.

The issue is rate limiting per key, but adding delays is simpler.

Trap 2: Switch to a webhook-based approach to receive data instead of…

Requires significant re-architecture and is not minimal.

Trap 3: Use the bulk API request feature to collect data in fewer calls.

Meraki does not have a bulk endpoint for these data.

Study all Understanding and Using APIs common traps →

A
Introduce a delay between API calls to stay within the rate limit.
Adding a small delay reduces request rate and avoids 429 errors.
B
Distribute the API requests across multiple API keys.
Why wrong: The issue is rate limiting per key, but adding delays is simpler.
C
Switch to a webhook-based approach to receive data instead of polling.
Why wrong: Requires significant re-architecture and is not minimal.
D
Use the bulk API request feature to collect data in fewer calls.
Why wrong: Meraki does not have a bulk endpoint for these data.

Full breakdown with real-world context →

Question 7mediumdrag order

Read the full Understanding and Using APIs explanation →

Drag and drop the steps to troubleshoot a network connectivity issue using the OSI model from bottom to top.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 8mediumdrag order

Study the full Python automation breakdown →

Drag and drop the steps to set up a Python virtual environment for a DevNet project into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 9mediummatching

Read the full Understanding and Using APIs explanation →

Match each HTTP method to its typical use case in REST APIs.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Retrieve a resource

Create a new resource

Update an existing resource

Remove a resource

Partially modify a resource

Question 10mediummatching

Read the full Understanding and Using APIs explanation →

Match each YAML structure to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Scalar mapping

List item

Comment line

Nested mapping

Block scalar (literal)

Question 11easymultiple choice

Read the full Understanding and Using APIs explanation →

A DevOps engineer is using the Cisco Meraki API to retrieve a list of networks. Which HTTP method should be used?

Trap 1: PUT

PUT is for updating or replacing resources.

Trap 2: POST

POST is for creating resources, not retrieving.

Trap 3: DELETE

DELETE is for deleting resources.

Study all Understanding and Using APIs common traps →

A
PUT
Why wrong: PUT is for updating or replacing resources.
B
POST
Why wrong: POST is for creating resources, not retrieving.
C
DELETE
Why wrong: DELETE is for deleting resources.
D
GET
GET is designed to retrieve resources.

Full breakdown with real-world context →

Question 12easymultiple choice

Read the full REST/YANG explanation →

An automation script needs to update the hostname of a Cisco IOS-XE device via RESTCONF. Which HTTP method is appropriate?

Trap 1: PATCH

PATCH is for partial updates, but Cisco RESTCONF implementations may not support it as widely; PUT is the standard for full replacement.

Trap 2: GET

GET is for retrieving data.

Trap 3: POST

POST is for creating a new resource, not updating.

Study all Understanding and Using APIs common traps →

A
PUT
PUT is used to replace the target resource with the request payload.
B
PATCH
Why wrong: PATCH is for partial updates, but Cisco RESTCONF implementations may not support it as widely; PUT is the standard for full replacement.
C
GET
Why wrong: GET is for retrieving data.
D
POST
Why wrong: POST is for creating a new resource, not updating.

Full breakdown with real-world context →

Question 13easymultiple choice

Study the full Python automation breakdown →

A network engineer is writing a Python script to interact with Cisco DNA Center. After successfully authenticating and receiving a token, what header must be included in subsequent API requests?

Trap 1: In a custom header

While possible, Cisco DNA Center uses the standard Authorization header.

Trap 2: In the URL query string

Tokens should not be passed in URLs for security reasons.

Trap 3: In the request body

The token is not sent in the body.

Study all Understanding and Using APIs common traps →

A
In a custom header
Why wrong: While possible, Cisco DNA Center uses the standard Authorization header.
B
In the URL query string
Why wrong: Tokens should not be passed in URLs for security reasons.
C
In the request body
Why wrong: The token is not sent in the body.
D
In the Authorization header as Bearer
The standard way is to include 'Authorization: Bearer <token>' in the header.

Full breakdown with real-world context →

Question 14mediummultiple choice

Read the full Understanding and Using APIs explanation →

A developer is using the Cisco Webex Teams API to create a room and add members. The API returns a 400 error. What is the most likely cause?

Trap 1: Invalid access token

Invalid token would result in a 401 Unauthorized.

Trap 2: Network connectivity issue

Network issues typically result in timeout or connection errors, not a 400 response.

Trap 3: Room name already exists

Duplicate names might cause a 409 Conflict, not 400.

Study all Understanding and Using APIs common traps →

A
Invalid access token
Why wrong: Invalid token would result in a 401 Unauthorized.
B
Missing required fields
400 errors are commonly due to missing or invalid fields.
C
Network connectivity issue
Why wrong: Network issues typically result in timeout or connection errors, not a 400 response.
D
Room name already exists
Why wrong: Duplicate names might cause a 409 Conflict, not 400.

Full breakdown with real-world context →

Question 15mediummultiple choice

Read the full REST/YANG explanation →

An automation tool uses RESTCONF to configure a Cisco device. The device returns a 404 error for a PUT request. What does this indicate?

Trap 1: The server is overloaded

Overloaded server leads to 503 Service Unavailable.

Trap 2: The request body is malformed

Malformed body leads to 400 Bad Request.

Trap 3: Authentication failed

Authentication failure leads to 401.

Study all Understanding and Using APIs common traps →

A
The server is overloaded
Why wrong: Overloaded server leads to 503 Service Unavailable.
B
The request body is malformed
Why wrong: Malformed body leads to 400 Bad Request.
C
Authentication failed
Why wrong: Authentication failure leads to 401.
D
The resource does not exist
404 is specifically for not found.

Full breakdown with real-world context →

Question 16mediummultiple choice

Study the full SD-WAN breakdown →

A Cisco SD-WAN vManage API call to retrieve device inventory returns a 401 error. Which step is most likely missing?

Trap 1: The request body is missing required fields

Missing fields lead to 400 Bad Request.

Trap 2: The device is unreachable

Unreachable device does not cause a 401 from vManage.

Trap 3: The API endpoint is incorrect

Incorrect endpoint leads to 404 Not Found.

Study all Understanding and Using APIs common traps →

A
The authentication token is expired or invalid
401 indicates authentication failure.
B
The request body is missing required fields
Why wrong: Missing fields lead to 400 Bad Request.
C
The device is unreachable
Why wrong: Unreachable device does not cause a 401 from vManage.
D
The API endpoint is incorrect
Why wrong: Incorrect endpoint leads to 404 Not Found.

Full breakdown with real-world context →

Question 17hardmultiple choice

Study the full Python automation breakdown →

A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?

Trap 1: Change the API endpoint to a different region

Changing endpoint may not resolve rate limiting; it's a client-side issue.

Trap 2: Check the API token

Token issues cause 401, not 429.

Trap 3: Increase the rate limit on the dashboard

Rate limits are enforced by the API; they cannot be increased arbitrarily.

Study all Understanding and Using APIs common traps →

A
Change the API endpoint to a different region
Why wrong: Changing endpoint may not resolve rate limiting; it's a client-side issue.
B
Check the API token
Why wrong: Token issues cause 401, not 429.
C
Increase the rate limit on the dashboard
Why wrong: Rate limits are enforced by the API; they cannot be increased arbitrarily.
D
Implement retry logic with exponential backoff and respect Retry-After header
This is the standard approach for handling rate limiting.

Full breakdown with real-world context →

Question 18hardmultiple choice

Read the full Understanding and Using APIs explanation →

A team is designing a CI/CD pipeline that uses the Cisco ACI REST API to deploy tenant policies. Which best practice should be followed for secure credential management?

Trap 1: Store credentials in plain text in the pipeline configuration

Plain text is insecure and violates best practices.

Trap 2: Hardcode credentials in the source code

Hardcoding credentials in source code is a security risk.

Trap 3: Use a shared user account with no MFA

Shared accounts without MFA are insecure.

Study all Understanding and Using APIs common traps →

A
Store credentials in plain text in the pipeline configuration
Why wrong: Plain text is insecure and violates best practices.
B
Use a secrets management service and reference it in the pipeline
Secrets management services like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault provide secure storage.
C
Hardcode credentials in the source code
Why wrong: Hardcoding credentials in source code is a security risk.
D
Use a shared user account with no MFA
Why wrong: Shared accounts without MFA are insecure.

Full breakdown with real-world context →

Question 19hardmultiple choice

Read the full NAT/PAT explanation →

An engineer is using the Cisco Intersight API to manage UCS servers. The API response returns a paginated list. What is the proper way to retrieve all items?

Trap 1: Increase the page size limit to maximum

Increasing page size may still not retrieve all items if there are many, and may hit API limits.

Trap 2: Send multiple requests with different offsets manually

Manual offset calculation is error-prone and not as reliable as using provided links.

Trap 3: Use a single request with a filter to get all

Filters may not retrieve all items if pagination is still enforced.

Study all Understanding and Using APIs common traps →

A
Loop through pages using the 'next' link in the response
Following pagination links is the recommended pattern.
B
Increase the page size limit to maximum
Why wrong: Increasing page size may still not retrieve all items if there are many, and may hit API limits.
C
Send multiple requests with different offsets manually
Why wrong: Manual offset calculation is error-prone and not as reliable as using provided links.
D
Use a single request with a filter to get all
Why wrong: Filters may not retrieve all items if pagination is still enforced.

Full breakdown with real-world context →

Question 20mediummulti select

Read the full REST/YANG explanation →

A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)

Trap 1: Authentication token is missing.

Missing token results in 401 Unauthorized.

Trap 2: The resource does not exist.

A missing resource would give 404, not 409.

Trap 3: The request contains invalid data types.

Invalid data types result in 400 Bad Request.

Study all Understanding and Using APIs common traps →

A
Authentication token is missing.
Why wrong: Missing token results in 401 Unauthorized.
B
The resource's current state conflicts with the requested change (e.g., trying to delete a resource that is in use).
State conflicts, like deleting a resource that is referenced, cause 409.
C
The resource already exists and the request attempts to create a duplicate.
Creating a duplicate resource is a typical cause of 409.
D
The resource does not exist.
Why wrong: A missing resource would give 404, not 409.
E
The request contains invalid data types.
Why wrong: Invalid data types result in 400 Bad Request.

Full breakdown with real-world context →

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Understanding and Using APIs sessions

Start a Understanding and Using APIs only practice session

Every question in these sessions is drawn from the Understanding and Using APIs domain — nothing else.

10 questions 20 questions 30 questions 50 questions

Browse all Understanding and Using APIs questions →Mixed 200-901 session

Frequently asked questions

What does the 200-901 exam test about Understanding and Using APIs?: Understanding and Using APIs questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?: Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Understanding and Using APIs questions in a focused session?: Yes — the session launcher on this page draws every question from the Understanding and Using APIs domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 200-901 topics?: Use the topic links above to move to related areas, or go back to the 200-901 question bank to see all topics.
Are these real exam questions or dumps?: These are original practice questions written to test the same concepts the 200-901 exam covers. They are not copied from any real exam or dump site.

Understanding and Using APIs only

10 questions 20 questions 30 questions 50 questions

Mixed 200-901 session

Track your progress

A free account saves results across sessions and highlights which topics need work.

Study resources

All 200-901 questions Understanding and Using APIs domain overview 200-901 exam guide

Exam traps to avoid

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Understanding and Using APIs practice questions

What to know about Understanding and Using APIs

Common Understanding and Using APIs exam traps

Understanding and Using APIs questions

A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?

When designing a REST API client for a Cisco DNA Center deployment, which authentication method should be used to obtain a token for subsequent API calls?

A Python script uses the Cisco Meraki API to create a new network and then immediately attempts to configure an SSID on that network. The SSID creation fails with a 400 error indicating 'network is not ready'. What is the most likely cause?

Which TWO of the following are best practices when using REST APIs in Cisco networking environments?

Refer to the exhibit. A network engineer runs a script that queries the Cisco DNA Center site health API. The response shows Branch1 with a healthScore of 10. What is the most likely action to improve Branch1's health?

Exhibit

Drag and drop the steps to troubleshoot a network connectivity issue using the OSI model from bottom to top.

Drag and drop the steps to set up a Python virtual environment for a DevNet project into the correct order.

Match each HTTP method to its typical use case in REST APIs.

Match each YAML structure to its description.

A DevOps engineer is using the Cisco Meraki API to retrieve a list of networks. Which HTTP method should be used?

An automation script needs to update the hostname of a Cisco IOS-XE device via RESTCONF. Which HTTP method is appropriate?

A network engineer is writing a Python script to interact with Cisco DNA Center. After successfully authenticating and receiving a token, what header must be included in subsequent API requests?

A developer is using the Cisco Webex Teams API to create a room and add members. The API returns a 400 error. What is the most likely cause?

An automation tool uses RESTCONF to configure a Cisco device. The device returns a 404 error for a PUT request. What does this indicate?

A Cisco SD-WAN vManage API call to retrieve device inventory returns a 401 error. Which step is most likely missing?

A Python script using the Cisco Meraki API v1 is failing with a 429 status code. What is the recommended course of action?

A team is designing a CI/CD pipeline that uses the Cisco ACI REST API to deploy tenant policies. Which best practice should be followed for secure credential management?

An engineer is using the Cisco Intersight API to manage UCS servers. The API response returns a paginated list. What is the proper way to retrieve all items?

A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)

Track your progress over time

Start a Understanding and Using APIs only practice session

Related 200-901 topic practice pages

Software Development and Design practice questions