hardMultiple ChoiceObjective-mapped
350-401 Practice Question: An engineer is using the Cisco SD-WAN vManage…
An engineer is using the Cisco SD-WAN vManage REST API to retrieve the list of WAN edge devices. The engineer sends a GET request to 'https://vmanage/dataservice/device' and receives a 401 Unauthorized error. The engineer has already obtained a JSESSIONID cookie by authenticating with the API. What is the most likely cause of the error?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The JSESSIONID cookie must be included in the request headers for authentication.
A 401 error indicates that authentication is required or has failed. Even with a JSESSIONID cookie, the engineer must include it in the request headers. Additionally, vManage APIs often require a CSRF token for state-changing operations, but for GET requests, the JSESSIONID should suffice. The most likely cause is that the cookie is not being sent with the request, or the session has expired.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The JSESSIONID cookie must be included in the request headers for authentication.
Why this is correct
Correct because the session cookie must be sent with each request to maintain authentication.
- ✗
The engineer must use a different authentication method, such as OAuth2, instead of cookies.
Why it's wrong here
Incorrect because vManage supports cookie-based authentication; the issue is that the cookie is not being sent.
- ✗
The URI is incorrect; the correct URI should be 'https://vmanage/dataservice/device/wanedge'.
Why it's wrong here
Incorrect because the URI '/dataservice/device' is correct; a wrong URI would result in a 404 error.
- ✗
The engineer must include a CSRF token in the request header for GET requests.
Why it's wrong here
Incorrect because CSRF tokens are typically required for state-changing methods like POST, PUT, DELETE, not for GET.
Go deeper
Related to this question
Learn chapter
SDN Controllers and Cisco ACI
Key term
REST API for Network Devices
A REST API for network devices is a set of rules that allows software applications to communicate with routers, switches, and firewalls using standard web methods like GET, POST, PUT, and DELETE over HTTP or HTTPS.
Key term
Cisco SD-WAN
Cisco SD-WAN is a software-defined wide area network architecture that separates the control and data planes to centrally manage and optimize traffic across multiple WAN connections.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.