200-901 Infrastructure and Automation Practice Question
Which THREE of the following are key principles of Infrastructure as Code (IaC) as applied to network automation?
⚠ Common exam trap
Cisco often tests the misconception that IaC allows manual overrides for critical devices or that one-time scripts are acceptable, but the exam expects you to recognize that all changes must be code-driven, version-controlled, and idempotent to ensure consistency and auditability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configuration should be idempotent.
Idempotency ensures that applying the same configuration multiple times results in the same final state, preventing unintended changes. In network automation, tools like Ansible or Terraform use idempotent modules (e.g., `ios_config`) to verify the current device state before applying changes, avoiding configuration drift or repeated command failures.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Manual configuration is preferred for critical devices.
Why it's wrong here
IaC promotes automation over manual.
- ✓
Configuration should be idempotent.
Why this is correct
Idempotency ensures consistent state.
- ✓
Configuration should be validated through automated testing.
Why this is correct
Automated testing ensures reliability.
- ✗
Temporary scripts should be used for one-time changes.
Why it's wrong here
IaC prefers reusable, versioned code.
- ✓
All configuration code should be stored in version control.
Why this is correct
Version control is essential for IaC.
Go deeper
Related to this question
About these practice questions
One of 989 original 200-901 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.