Scenario practice questions

A CI/CD pipeline for a microservice application includes stages: code commit, build Docker image, push to registry, deploy to staging, run integration tests, and deploy to production. The team wants to ensure that if integration tests fail, the pipeline stops and does not proceed to production. Which CI/CD concept is used to enforce this behavior?

Trap 1: Rolling update

Rolling update is a deployment strategy.

Trap 2: Container orchestration

Container orchestration manages containers, not pipeline flow.

Trap 3: Artifact management

Artifact management stores build outputs.

A
Stage gates
Stage gates control progression based on conditions.
B
Rolling update
Why wrong: Rolling update is a deployment strategy.
C
Container orchestration
Why wrong: Container orchestration manages containers, not pipeline flow.
D
Artifact management
Why wrong: Artifact management stores build outputs.

Question 2mediummultiple choice

Which OAuth 2.0 grant type is most appropriate for a server-to-server integration where no user interaction is required, such as a backend service calling Cisco API?

Trap 1: Authorization code grant

Requires user consent via a browser redirect.

Trap 2: Password grant

Requires user credentials and is deprecated in many scenarios.

Trap 3: Device code grant

Used for devices with limited input, still requires user interaction.

A
Authorization code grant
Why wrong: Requires user consent via a browser redirect.
B
Password grant
Why wrong: Requires user credentials and is deprecated in many scenarios.
C
Device code grant
Why wrong: Used for devices with limited input, still requires user interaction.
D
Client credentials grant
Allows a client to act on its own behalf without user involvement.

Question 3mediummulti select

A developer receives HTTP 409 Conflict when updating a network configuration via Cisco NX-OS API. Which two scenarios could cause this error?

Trap 1: The request body contains malformed JSON.

Malformed JSON results in a 400 Bad Request, not 409.

Trap 2: The request includes unsupported parameters.

Unsupported parameters typically cause a 400 Bad Request.

Trap 3: The API key used is invalid.

An invalid API key results in 401 Unauthorized.

A
The resource was recently modified by another client.
A concurrent modification leads to a version conflict, resulting in 409.
B
The update conflicts with a lock held by another transaction.
Locking conflicts cause a 409 Conflict error.
C
The request body contains malformed JSON.
Why wrong: Malformed JSON results in a 400 Bad Request, not 409.
D
The request includes unsupported parameters.
Why wrong: Unsupported parameters typically cause a 400 Bad Request.
E
The API key used is invalid.
Why wrong: An invalid API key results in 401 Unauthorized.

Question 4hardmultiple choice

A developer is implementing OAuth 2.0 for a Cisco Webex integration that needs to send messages on behalf of a user. The integration runs on a server with no user interface. Which OAuth 2.0 flow should be used?

Trap 1: Implicit flow

Deprecated and insecure; not recommended.

Trap 2: Authorization Code flow with PKCE

Requires user interaction and a browser.

Trap 3: Device Code flow

For devices with limited input, not for servers.

A
Implicit flow
Why wrong: Deprecated and insecure; not recommended.
B
Client Credentials flow
Server-to-server without user context; suitable for non-interactive apps.
C
Authorization Code flow with PKCE
Why wrong: Requires user interaction and a browser.
D
Device Code flow
Why wrong: For devices with limited input, not for servers.

Question 5hardmulti select

Which THREE are valid Kubernetes Service types? (Select three.)

Trap 1: Deployment

Deployment is a workload resource, not a Service type.

Trap 2: Ingress

Ingress is an API object that manages external access, not a Service type.

A
NodePort
Exposes service on each Node's IP at a static port.
B
Deployment
Why wrong: Deployment is a workload resource, not a Service type.
C
ClusterIP
Default type, exposes service on a cluster-internal IP.
D
LoadBalancer
Exposes service externally using a cloud provider's load balancer.
E
Ingress
Why wrong: Ingress is an API object that manages external access, not a Service type.

Read the full DNS explanation →

Question 6mediummulti select

A network administrator is configuring a DNS server. Which TWO DNS record types are used for IPv6 address resolution?

Trap 1: MX record

MX records specify mail servers.

Trap 2: CNAME record

CNAME is an alias, not for address resolution.

Trap 3: A record

A records are for IPv4 addresses.

A
MX record
Why wrong: MX records specify mail servers.
B
CNAME record
Why wrong: CNAME is an alias, not for address resolution.
C
PTR record
PTR records are used for reverse DNS lookup, which also works with IPv6.
D
AAAA record
AAAA records map to IPv6 addresses.
E
A record
Why wrong: A records are for IPv4 addresses.

Read the full REST/YANG explanation →

Question 7mediummulti select

A developer is troubleshooting a Cisco RESTCONF API call that returns a 409 Conflict error. Which two scenarios could cause this? (Choose two.)

Trap 1: Authentication token is missing.

Missing token results in 401 Unauthorized.

Trap 2: The resource does not exist.

A missing resource would give 404, not 409.

Trap 3: The request contains invalid data types.

Invalid data types result in 400 Bad Request.

A
Authentication token is missing.
Why wrong: Missing token results in 401 Unauthorized.
B
The resource's current state conflicts with the requested change (e.g., trying to delete a resource that is in use).
State conflicts, like deleting a resource that is referenced, cause 409.
C
The resource already exists and the request attempts to create a duplicate.
Creating a duplicate resource is a typical cause of 409.
D
The resource does not exist.
Why wrong: A missing resource would give 404, not 409.
E
The request contains invalid data types.
Why wrong: Invalid data types result in 400 Bad Request.

Question 8hardmultiple choice

A developer is using the Cisco Webex API to create a room and add members. The API requires an access token with the appropriate scopes. The developer receives a 401 Unauthorized error when trying to create a room. What is the most likely cause?

Trap 1: The access token only has the 'spark:rooms_read' scope

Incorrect. The 'spark:rooms_read' scope would cause a 403 Forbidden when attempting to create a room, not a 401. A 401 is an authentication error, not an authorization error.

Trap 2: The access token has the 'spark:memberships_write' scope but not…

Incorrect. Missing the 'spark:rooms_write' scope is an authorization issue, which returns a 403 Forbidden, not a 401.

Trap 3: The access token is not being sent in the Authorization header

Incorrect. While a missing Authorization header would indeed cause a 401, the developer is using an access token, so an expired token is a more likely cause than a completely missing token.

A
The access token only has the 'spark:rooms_read' scope
Why wrong: Incorrect. The 'spark:rooms_read' scope would cause a 403 Forbidden when attempting to create a room, not a 401. A 401 is an authentication error, not an authorization error.
B
The access token has the 'spark:memberships_write' scope but not 'spark:rooms_write'
Why wrong: Incorrect. Missing the 'spark:rooms_write' scope is an authorization issue, which returns a 403 Forbidden, not a 401.
C
The access token is not being sent in the Authorization header
Why wrong: Incorrect. While a missing Authorization header would indeed cause a 401, the developer is using an access token, so an expired token is a more likely cause than a completely missing token.
D
The access token has expired
Correct. An expired access token results in a 401 Unauthorized error. Given the developer is using a token and receives a 401, expiration is the most plausible cause.