Cisco 200-901 Online Practice Questions and Exam Preparation

Cisco 200-901 Online Questions & Answers

• Question 241:

  When a Cisco IOS XE networking device is configured by using RESTCONF, what is the default data encoding method?

  A. application/json-data+xml
  B. application/xml-data+json
  C. application/yaml-data+json
  D. application/yang-data+json
  D. application/yang-data+json

• Question 242:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop the code snippets from the bottom onto the blanks in the Python script to retrieve a list of hosts using the Cisco DNA Center API.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  To retrieve a list of hosts using the Cisco DNA Center API, the provided Python script needs to be completed with the appropriate code snippets. Here's how the final script looks:

  import json, requests, urllib3

  from requests.auth import HTTPBasicAuth

  from config import host, username, password

  headers = { 'Content-Type': "application/json", 'x-auth-token': "csd0934rjxx" }

  def dna_api_auth(host, username, password):

  url = "https://{}/dna/system/api/v1/auth/token".format(host) response = requests.post(url, auth=HTTPBasicAuth(username, password), headers=headers, verify=False)

  token = response.json()["Token"]

  return token

  def list_dna_devices(token):

  url = "https://{}/dna/intent/api/v1/network-device".format(host) headers["x-auth-token"] = token

  response = requests.get(url, headers=headers, verify=False) data = response.json()

  for item in data['response']:

  print(item["hostname"])

  token = dna_api_auth(host, username, password)

  list_dna_devices(token)

  application/json: This is used to set the content type for the headers. token = response.json()["Token"]: This extracts the authentication token from the response.

  data['response']: This accesses the 'response' part of the JSON data returned by the API.

  token: This passes the token to the headers for authorization. json(): This parses the response to JSON format. for item in data['response']: This loops through each item in the response data. hostname: This prints the hostname of each device.

  References:

  Cisco DNA Center Platform: Cisco DNA Center Platform

• Question 243:

  DRAG DROP

  Drag and drop the code from the bottom onto the box where the code is missing in the Python script to complete a function to return all the clients on a network by using the Cisco Meraki Dashboard API. Not all options are used.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 244:

  An engineer prepares a set of Python scripts to interact with network devices. To avoid network performance issues, the engineer wants to run them in a test environment. Which resource must be used to monitor the live execution of code in an always-available environment?

  A. packet tracer
  B. learning labs
  C. sandbox
  D. code exchange
  C. sandbox

  ---

  Comprehensive Detailed Step by Stepwith ReferencesA sandbox environment is an isolated testing environment that mimics a live network. It allows engineers and developers to run scripts and test code without affecting the production network. Cisco provides sandboxes through the DevNet portal, which are always available for testing and experimentation with network automation and programmability. Using a sandbox helps monitor the live execution of code in a controlled and safe manner, ensuring that any potential issues do not impact the actual network. References: Cisco DevNet Sandboxes Cisco DevNet Associate Certification Guide

• Question 245:

  What is a function of the default gateway in a network?

  A. to drop traffic that is destined to the default gateway
  B. to drop traffic that is not destined to the default gateway
  C. to forward traffic to the same subnet
  D. to forward traffic to different subnets
  D. to forward traffic to different subnets

  ---

  A default gateway is a router or network device that serves as an access point to another network, often the internet, when no other route is specified for a given data packet. In other words, it is used to forward traffic from the local subnet to different subnets, including external networks. When a host needs to communicate with a device on a different subnet, it sends the traffic to the default gateway, which then routes the traffic accordingly. References: Cisco DevNet Associate Certification Guide Cisco Networking Essentials, Chapter on Routing and Switching Basics

• Question 246:

  A REST API service requires authentication based on the username and password. The user "john" has the password "384279060" and the Base64 encoding of those credentials is "am9objowMTIzNDU2Nzg=". Which method completes an authentication request?

  A. The header must include: Authorization: Bearer am9obJowMTlzNDU2Nzg=
  B. The payload must include: Authorization: Bearer am9objowMTIzNDU2Nzg=
  C. The payload must include. Authorization: Basic am9objowMTlzNDU2Nzg=
  D. The header must include: Authorization: Basic am9objowMTlzNDU2Nzg=
  D. The header must include: Authorization: Basic am9objowMTlzNDU2Nzg=

• Question 247:

  Which Cisco platform is used to manage data center infrastructure through third-party tools and system integrations?

  A. Cisco DNA Center
  B. Cisco UCS Manager
  C. Cisco Intersight
  D. Cisco UCS Director
  C. Cisco Intersight

  ---

  "Cisco Intersight infrastructure services include the deployment, monitoring, management, and support of your physical and virtual infrastructure...In addition, Cisco provides integrations to third-party operations tools, starting with ServiceNow, to allow customers to use their existing solutions more efficiently." https://intersight.com/help/saas/getting_started/overview

• Question 248:

  What is a benefit of a model-driven approach for infrastructure automation?

  A. It automates the translation of a declarative language of the model into an actionable script.
  B. It enforces the generation and verification of all automation scripts through the modeling environment.
  C. It provides a small learning curve and helps system administrators with limited coding experience.
  D. It ensures that system administrators gain a good understanding of coding, and expand their experience and capabilities.
  A. It automates the translation of a declarative language of the model into an actionable script.

• Question 249:

  A developer pushes an application to production. The application receives a webhook over HTTPS without a secret. The webhook information contains credentials to service in cleartext. When the information is received, it is stored in the database with an SHA-256 hash. Credentials to the database are accessed at runtime through the use of a vault service. While troubleshooting, the developer sets the logging to debug to view the message from the webhook. What is the security issue in this scenario?

  A. Database credentials should be accessed by using environment variables defined at runtime.
  B. During the transport of webhook messages, the credentials could be unencrypted and leaked.
  C. During logging, debugging should be disabled for the webhook message.
  D. Hashing the credentials in the database is not secure enough; the credentials should be encrypted.
  B. During the transport of webhook messages, the credentials could be unencrypted and leaked.

  ---

  The main security issue in this scenario is the transmission of credentials in cleartext over HTTPS. Even though HTTPS provides a secure transport layer, the credentials should still be protected, such as by using secrets or encryption. Additionally, setting logging to debug and potentially exposing these credentials in logs is also a security concern. Cleartext Credentials: Sending credentials in cleartext within the webhook payload can expose them if HTTPS is not configured correctly or if intercepted by an attacker. Debug Logging: Enabling debug logging can expose sensitive information, including credentials, in logs. Option B highlights the risk of transmitting credentials unencrypted over HTTPS, which can lead to credential leakage. Cisco DevNet Documentation: Secure Coding Practices

• Question 250:

  What is a benefit of using a version control system?

  A. tracks changes to the files
  B. enforces change management controls
  C. centralizes binary files
  D. prevents code from being stored locally
  A. tracks changes to the files