Cisco 200-901 Online Practice Questions and Exam Preparation

Cisco 200-901 Online Questions & Answers

• Question 561:

  Which two commands download and execute an Apache web server container in Docker with a port binding 8080 in the container to 80 on the host? (Choose two.)

  A. docker pull apache
  B. docker run -p 8080:80 httpd
  C. docker run -p 80:8080 httpd
  D. docker pull httpd
  E. docker pull https
  C. docker run -p 80:8080 httpd
  D. docker pull httpd

  ---

  To download and run an Apache web server container in Docker with a port binding of 8080 in the container to port 80 on the host, you can use the following two commands: 1. docker pull httpd:latest - This command will download the latest version of the Apache web server Docker image from the Docker Hub. 2. docker run -p 80:8080 -d httpd - This command will start a new container based on the httpd image, with a port binding of 8080 in the container to port 80 on the host. The -d flag runs the container in detached mode, meaning it will run in the background and not block the terminal.

• Question 562:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop the code from the bottom onto the box where the code is missing on the Meraki Python script to create a new network.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 563:

  An engineer must review and clean up a code repository. During the review, the engineer finds a file named config.json that contains API URLs, shared keys, and other application configurations. Which two methods, according to best practice, must be used to protect secrets? (Choose two.)

  A. Store in plaintext if they are not stored in a code repository.
  B. Store as plaintext when the server is secured physically.
  C. Never appear in plaintext at rest or in transit.
  D. Make them long, secure strings that include numbers with special characters.
  E. Always store in a secure vault.
  C. Never appear in plaintext at rest or in transit.
  E. Always store in a secure vault.

  ---

  To protect secrets such as API URLs, shared keys, and other application configurations, it is best practice to: C. Ensure they never appear in plaintext at rest or in transit. Encrypt sensitive data both when it is stored (at rest) and when it is transmitted over the network (in transit). This prevents unauthorized access and exposure. E. Always store secrets in a secure vault. Use dedicated secret management tools like HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault to store and manage sensitive information securely. These tools provide mechanisms for access control, audit logging, and automatic rotation of secrets. References: Securing Secrets HashiCorp Vault AWS Secrets Manager

• Question 564:

  Which tool allows changes to the configuration management toolset to be tested?

  A. Cisco VIRL
  B. NAPALM
  C. Ansible
  D. pyATS
  D. pyATS

• Question 565:

  A developer needs to prepare the file README.md in the working tree for the next commit operation using Git. Which command needs to be used to accomplish this?

  A. git -a README.md
  B. git add README.md
  C. git add README.md staging
  D. git commit README.md
  B. git add README.md

  ---

  Explanation Explanation/Reference:https://teamtreehouse.com/community/committing-the-readmemd-file-to-repository

• Question 566:

  Refer to the exhibit.

  

  A network engineer must collect information from the network. The engineer prepares a script to automate workflow by using Cisco Meraki API. The script must run over nested loops to collect organization and network information and uses the collected data for final collection. Which process is being automated by using the Python script?

  A. Gather the IDs of the ACME organization, the BLDG21 network, and the dents on the network
  B. Provide the BLDG21 network information if it is part of the ACME organization
  C. Collect the IDs of the clients on the BLDG21 network
  D. List the IDs from the ACME organization
  C. Collect the IDs of the clients on the BLDG21 network

• Question 567:

  Which platform has an API that has the capability to obtain a list of vulnerable software on user devices?

  A. Cisco Advanced Malware Protection
  B. Cisco Umbrella
  C. Cisco Identity Services Engine
  D. Cisco Firepower
  A. Cisco Advanced Malware Protection

• Question 568:

  Which type of OWASP threat uses malicious scripts that are injected into otherwise benign and trusted websites?

  A. brute force
  B. man-in-the-middle
  C. XSS
  D. SQL injection
  C. XSS

• Question 569:

  Users cannot access a webserver and after the traffic is captured, the capture tool shows an ICMP packet that reports "communication administratively prohibited". What is the cause of this webserver access issue?

  A. An access list along the path is blocking the traffic.
  B. Users must authenticate on the webserver to access it.
  C. A router along the path is overloaded and thus dropping traffic.
  D. The traffic is not allowed to be translated with NAT and dropped.
  A. An access list along the path is blocking the traffic.

  ---

  Communication Administratively Prohibited: This is generated if a router cannot forward a packet due to administrative filtering. RFC 1812

• Question 570:

  DRAG DROP

  

  Refer to the exhibit. Drag and drop the code snippets from the bottom to the blanks in the code to enable keepalive for the FastEthernet 2/0 interface. Not all options are used.

  Select and Place:

  

  

  ---

  Explanation/Reference: