Cisco DevNet Associate 200-901 practice test

A company uses a CI/CD pipeline to deploy network configurations. The pipeline includes a stage that runs automated tests against a simulated network environment. Which testing strategy does this represent?

Trap 1: Regression testing

Regression testing ensures that new changes do not adversely affect existing functionality, but the scenario is about testing in a simulated environment before deployment.

Trap 2: Unit testing

Unit testing tests individual functions or modules, not integrated configurations in a simulated environment.

Trap 3: Smoke testing

Smoke testing is a preliminary test to check basic functionality, not a full test against a simulated environment.

A
Regression testing
Why wrong: Regression testing ensures that new changes do not adversely affect existing functionality, but the scenario is about testing in a simulated environment before deployment.
B
Unit testing
Why wrong: Unit testing tests individual functions or modules, not integrated configurations in a simulated environment.
C
Integration testing
Integration testing validates the interaction between components in a simulated or staging environment.
D
Smoke testing
Why wrong: Smoke testing is a preliminary test to check basic functionality, not a full test against a simulated environment.

Question 2hardmulti select

Which TWO statements about REST API design best practices are correct?

Trap 1: API versioning should be implemented using query parameters only

Versioning via query parameters is uncommon; path or header versioning is preferred.

Trap 2: HTTP PUT method should be used for partial updates to a resource

PUT is for full replacement; PATCH is for partial updates.

Trap 3: Responses should return only HTTP status codes without a body

Responses typically include a body with details or representation of the resource.

A
API versioning should be implemented using query parameters only
Why wrong: Versioning via query parameters is uncommon; path or header versioning is preferred.
B
HTTP PUT method should be used for partial updates to a resource
Why wrong: PUT is for full replacement; PATCH is for partial updates.
C
Resources should be represented using nouns in the URI
Using nouns for resources (e.g., /devices) is a REST best practice.
D
Responses should return only HTTP status codes without a body
Why wrong: Responses typically include a body with details or representation of the resource.
E
HTTP verbs should describe the action performed on the resource
Verbs like GET, POST, PUT, DELETE define the action.

Question 3mediummultiple choice

A network engineer is using the Cisco Meraki API to retrieve a list of SSIDs for a specific network. The API returns an HTTP 200 status but an empty array for the SSIDs. Which of the following is the most likely cause?

Trap 1: The network ID is incorrect.

Wrong network ID returns 404, not empty array.

Trap 2: The API key is invalid.

Invalid API key results in 401/403, not empty array.

Trap 3: The request body is malformed.

Malformed request returns 400, not empty array.

A
The network exists but has no SSIDs configured.
Empty array indicates no SSIDs, which is valid.
B
The network ID is incorrect.
Why wrong: Wrong network ID returns 404, not empty array.
C
The API key is invalid.
Why wrong: Invalid API key results in 401/403, not empty array.
D
The request body is malformed.
Why wrong: Malformed request returns 400, not empty array.

Question 4easymultiple choice

When designing a REST API client for a Cisco DNA Center deployment, which authentication method should be used to obtain a token for subsequent API calls?

Trap 1: OAuth 2.0 client credentials grant.

DNA Center does not use OAuth 2.0.

Trap 2: API key in the request header.

DNA Center does not use API keys.

Trap 3: Client certificate in the request.

Certificates are not the standard authentication.

A
OAuth 2.0 client credentials grant.
Why wrong: DNA Center does not use OAuth 2.0.
B
API key in the request header.
Why wrong: DNA Center does not use API keys.
C
HTTP Basic authentication to obtain a token.
Correct method: POST with basic auth to get token.
D
Client certificate in the request.
Why wrong: Certificates are not the standard authentication.

Study the full Python automation breakdown →

Question 5hardmultiple choice

A Python script uses the Cisco Meraki API to create a new network and then immediately attempts to configure an SSID on that network. The SSID creation fails with a 400 error indicating 'network is not ready'. What is the most likely cause?

Trap 1: The API rate limit has been exceeded.

Rate limiting returns 429, not 400.

Trap 2: The API key does not have write access to networks.

Insufficient permissions return 403.

Trap 3: The SSID name contains invalid characters.

Invalid format returns a different 400 error.

A
The network is not fully provisioned yet; a delay is needed.
Asynchronous provisioning requires waiting.
B
The API rate limit has been exceeded.
Why wrong: Rate limiting returns 429, not 400.
C
The API key does not have write access to networks.
Why wrong: Insufficient permissions return 403.
D
The SSID name contains invalid characters.
Why wrong: Invalid format returns a different 400 error.

Read the full wireless explanation →

Question 6hardmultiple choice

A DevOps team manages a multi-site Cisco Meraki network with 50 MX appliances and 200 MR access points. They use a Python script that calls the Meraki API to collect device utilization data every hour and stores it in a CSV file. Recently, the script started failing intermittently with HTTP 429 status codes. The team suspects rate limiting but notices that the failures occur even when only one script instance runs. The script uses a single API key and makes requests to the /devices/{serial}/uplink endpoint for each MX and the /devices/{serial}/wireless/status endpoint for each MR. The script is scheduled via cron and runs sequentially. The team wants to resolve the rate limiting while minimizing changes to the script. Which course of action should the team take?

Trap 1: Distribute the API requests across multiple API keys.

The issue is rate limiting per key, but adding delays is simpler.

Trap 2: Switch to a webhook-based approach to receive data instead of…

Requires significant re-architecture and is not minimal.

Trap 3: Use the bulk API request feature to collect data in fewer calls.

Meraki does not have a bulk endpoint for these data.

A
Introduce a delay between API calls to stay within the rate limit.
Adding a small delay reduces request rate and avoids 429 errors.
B
Distribute the API requests across multiple API keys.
Why wrong: The issue is rate limiting per key, but adding delays is simpler.
C
Switch to a webhook-based approach to receive data instead of polling.
Why wrong: Requires significant re-architecture and is not minimal.
D
Use the bulk API request feature to collect data in fewer calls.
Why wrong: Meraki does not have a bulk endpoint for these data.