200-901 · topic practice

Infrastructure and Automation practice questions

Practise Cisco DevNet Associate 200-901 Infrastructure and Automation practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Infrastructure and Automation

What the exam tests

What to know about Infrastructure and Automation

Infrastructure and Automation questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Infrastructure and Automation exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Practice set

Infrastructure and Automation questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice
Open the full VLAN trunking answer →

An engineer needs to automate the deployment of a new VLAN across multiple switches. Which tool is best suited for this task?

A DevOps team wants to version control their network configurations. Which tool should they use?

During an automation script run, a network device returns HTTP 429. What does this indicate?

Question 4mediummultiple choice
Study the full Python automation breakdown →

A network automation engineer is writing a Python script to configure multiple devices. Which library is most appropriate for SSH-based interactions?

In a CI/CD pipeline for network changes, which practice best ensures that a configuration push does not disrupt production traffic?

Question 6hardmultiple choice
Read the full Ansible explanation →

An engineer uses Ansible to push a configuration change to 100 switches. The playbook fails on 5 switches. What is the most efficient way to apply the change only to those 5?

Which protocol is commonly used to retrieve real-time telemetry data from network devices in a streaming fashion?

Question 8mediummultiple choice
Read the full Ansible explanation →

A company uses a centralized automation server that runs Ansible playbooks. What is the best security practice for storing SSH credentials?

In a network automation workflow, a developer needs to ensure idempotency. What does idempotency mean in this context?

Question 10mediummultiple choice
Review the full routing breakdown →

An engineer is tasked with automating the backup of running configurations from 50 routers. Which approach is most scalable?

Which data format is most commonly used in REST API requests and responses in modern network automation?

Which TWO of the following are characteristics of a declarative automation model? (Select exactly 2.)

Question 13hardmulti select
Read the full Ansible explanation →

Which THREE of the following are best practices for writing Ansible playbooks for network automation? (Select exactly 3.)

Question 14mediummulti select
Read the full REST/YANG explanation →

Which TWO of the following are benefits of using NETCONF over SNMP for network automation? (Select exactly 2.)

Which THREE of the following are valid methods to handle API rate limiting in a Python automation script? (Select exactly 3.)

Question 16mediummultiple choice
Read the full DHCP explanation →

Refer to the exhibit. An automation script expects the interface IP address to be configured via DHCP. Based on the output, what is the current configuration source for the IP address?

Exhibit

Refer to the exhibit.

R1#show run | section interface GigabitEthernet0/1
interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 duplex auto
 speed auto
!
R1#show ip interface GigabitEthernet0/1
GigabitEthernet0/1 is up, line protocol is up
  Internet address is 192.168.1.1/24
  Broadcast address is 255.255.255.255
  Address determined by non-volatile memory
  MTU is 1500 bytes
  Helper address is not set
  Directed broadcast forwarding is disabled
  Outgoing access list is not set
  Inbound  access list is not set

Refer to the exhibit. A Python script uses the YANG model to configure the interface. After applying this JSON payload via a PATCH request, what is the expected operational state of the interface?

Exhibit

Refer to the exhibit.

{
  "ietf-interfaces:interface": {
    "name": "GigabitEthernet0/1",
    "description": "Link to Core",
    "type": "iana-if-type:ethernetCsmacd",
    "enabled": false,
    "ietf-ip:ipv4": {
      "address": [
        {
          "ip": "10.10.10.1",
          "netmask": "255.255.255.0"
        }
      ]
    }
  }
}
Question 18easymultiple choice
Read the full Ansible explanation →

Refer to the exhibit. An Ansible playbook targeting a Cisco IOS device fails with this error. What is the most likely cause?

Exhibit

Refer to the exhibit.

Error: 'Failed to authenticate to device 192.168.1.100:22'
Question 19hardmultiple choice
Read the full Ansible explanation →

You are a network automation engineer at a large enterprise. The network consists of 200 Cisco Catalyst switches distributed across five data centers. Each switch runs IOS-XE and supports NETCONF. Your team uses a centralized Ansible control node to manage configurations. Recently, the security team mandated that all management access must use SSH keys instead of passwords. You updated the Ansible inventory to use SSH keys and tested on a few switches successfully. However, when you run the playbook against all switches, about 30 switches fail with the error: 'Authentication failed.' You verify that the SSH public key is correctly deployed on those switches via the console. What is the most likely cause of the failure?

Question 20hardmultiple choice
Read the full Ansible explanation →

You are automating the deployment of a new software image on a fleet of Cisco Nexus switches using Ansible. The switches are in a production environment and must have minimal downtime. You have a maintenance window of 30 minutes per switch. Your playbook performs the following steps: 1) Copy the image to the switch via SCP, 2) Set the boot variable to the new image, 3) Save the configuration, 4) Reload the switch. During a dry run on a test switch, you notice that the reload step takes 8 minutes, but the copy step takes 15 minutes due to slow link speed. For the production rollout, you need to reduce the overall time per switch. Which approach should you take?

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Infrastructure and Automation sessions

Start a Infrastructure and Automation only practice session

Every question in these sessions is drawn from the Infrastructure and Automation domain — nothing else.

Related practice questions

Related 200-901 topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the 200-901 exam test about Infrastructure and Automation?
Infrastructure and Automation questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Infrastructure and Automation questions in a focused session?
Yes — the session launcher on this page draws every question from the Infrastructure and Automation domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 200-901 topics?
Use the topic links above to move to related areas, or go back to the 200-901 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the 200-901 exam covers. They are not copied from any real exam or dump site.