Cisco 200-901 Online Practice Questions and Exam Preparation

Cisco 200-901 Online Questions & Answers

• Question 231:

  Refer to the exhibit. A developer can access the TLS REST API on server A, but cannot access the API on server B. The developer can ping server B. When the developer performs a packet capture on the TLS REST API port on server B, the capture shows that the packet arrived and the server responded. What causes the issue?

  

  A. Port 80 is blocked on the outgoing interface of firewall B.
  B. Port 443 is blocked on the outgoing interface of firewall A.
  C. Port 443 is blocked on the incoming interface of firewall B.
  D. Port 80 is blocked on the incoming interface of firewall A.
  C. Port 443 is blocked on the incoming interface of firewall B.

• Question 232:

  Which Cisco network management platform should be used for integration with DevOps toolchains and third-party services in a service provider environment?

  A. Cisco NSO
  B. Cisco DNA Center
  C. Cisco ACI
  D. Cisco SD-WAN
  A. Cisco NSO

• Question 233:

  DRAG DROP

  Refer to the exhibit.

  

  A developer is creating a Python script to obtain a list of HTTP servers on a network named office_east by using the Cisco Meraki API. The request has these requirements:

  Must time out if the response is not received within 2 seconds.

  Must utilize client certificates and SSL certificate verification.

  Must utilize basic authentication that uses a username of admin and a password of cisco.

  Must save the response to an object named response.

  Drag and drop the code snippets from the bottom onto the blanks in the code to meet the requirements. Not all options are used.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 234:

  A development team must find a cloud deployment model to scale its new product to external and internal users. The team is small and the data is massive. The team wants high flexibility and higher security. Which application deployment model should the team use?

  A. hybrid cloud
  B. edge
  C. public cloud
  D. private cloud
  A. hybrid cloud

  ---

  Explanation Explanation/Reference:

• Question 235:

  A distributed application is under development and the interaction between the application and an API is being tested using the URL and port:

  devasc468262987.com port 443

  The requests that were sent to the server could not execute because the application was blocked by the firewall. Which protocol must be allowed by the firewall to fix the issue?

  A. SSH
  B. HTTP
  C. HTTPS
  D. FTP
  C. HTTPS

  ---

  Explanation Explanation/Reference:In the given scenario, the application is interacting with an API using the URL "devasc468262987.com" on port 443. Port 443 is the default port for HTTPS (Hypertext Transfer Protocol Secure).

• Question 236:

  Which protocol runs over TCP port 22?

  A. SSH
  B. NETCONF
  C. HTTP
  D. Telnet
  A. SSH

• Question 237:

  Which product provides network controller-level management features?

  A. Cisco ISE
  B. Cisco DNA Center
  C. Cisco UCS Manager
  D. Cisco NX-OS
  B. Cisco DNA Center

  ---

  https://www.cisco.com/c/en/us/products/cloud-systems-management/index.html

• Question 238:

  When a Cisco IOS XE networking device is configured using RESTCONF, what is the default data- encoding method?

  A. JSON
  B. YAML
  C. XML
  D. x-form-encoding
  C. XML

• Question 239:

  While delivering a product, a team spends a lot of time installing dependencies to maintain the development and test environments. Both environments must be identical. Which action improves the delivery?

  A. Use an Ansible playbook to install the dependencies.
  B. Pack everything into the released product.
  C. Use containers to keep the environment consistent.
  D. Pre-install the product into a virtual machine.
  C. Use containers to keep the environment consistent.

• Question 240:

  Refer to the exhibit.

  

  A company recently acquired new IP-based security cameras. After discussion with the engineering team, they decide to segment the security camera traffic m the rest...The engineer assigns the new VLAN 10 for the security camera traffic. After all the devices are configured, it seems as if the cameras cannot access the Internet, .. a few minutes of debugging, the engineer restricts the problem to the router configuration. What is the cause of the issue?

  A. A specific permit statement for the 192.168.20.0/24 subnet is missing from the access list.
  B. A NAT inside rule is missing from the GlgabitEthernet0/0/0.10 interface.
  C. A specific permit statement for the 192.168.10.0/24 subnet is missing from the access list.
  D. A NAT inside rule is missing from the GigabitEthemet0/0/0 interface.
  C. A specific permit statement for the 192.168.10.0/24 subnet is missing from the access list.

  ---

  The exhibit shows the router configuration for NAT (Network Address Translation). To allow traffic from the security cameras to access the Internet, the access list needs to include a permit statement for the 192.168.10.0/24 subnet. Access List Configuration: The access list (ACL) should permit traffic from the security camera VLAN (192.168.10.0/24). NAT Configuration: The NAT configuration uses an ACL to determine which internal IP addresses are translated to the public IP address pool. Missing Permit Statement: Without a specific permit statement for the 192.168.10.0/24 subnet, the router does not translate the IP addresses from this subnet, resulting in a lack of Internet access for the security cameras. References: Cisco NAT Configuration Guide: NAT Configuration