200-901 practice test

1. Question 1 · 1

   Which two concepts describe test-driven development? (Choose two.)

   Choose all answers that apply.

   • User acceptance testers develop the test requirements.
   • It enables code refactoring.
   • Tests are created when code is ready for release.
   • Implementation is driven by incremental testing of release candidates.
   • Write a test before writing code.

2. Question 2 · 1

   What is an advantage of a version control system?

   Choose one answer.

   • facilitates resolving conflicts when merging code
   • ensures that unit tests are written
   • prevents over-writing code or configuration files
   • forces the practice of trunk-based development

3. Question 3 · 1

   A developer is attempting to retrieve all the messages from a Cisco Webex space. The server responds by sending the first 1,000 messages. The developer must make additional requests to retrieve the rest of the messages. Which API constraint is described in this scenario?

   Choose one answer.

   • payload limiting
   • throttling
   • pagination
   • rate limiting

4. Question 4 · 1

   Refer to the exhibit. A developer just finished testing a Python script and wants to save the list of packages and versions installed on the current machine. The developer must make sure that it will not cause any issues if tested on another device due to different library versions. Which line of code needs to be placed on the snippet where the code is missing?

   Choose one answer.

   

   • pip freeze 2> requirements.txt
   • pip freeze > requirements.txt
   • pip freeze => requirements.txt
   • pip freeze | requirements.txt

5. Question 5 · 1

   A developer pushes an application to production. The application receives a webhook over HTTPS without a secret. The webhook information contains credentials to service in cleartext. When the information is received, it is stored in the database with an SHA-256 hash. Credentials to the database are accessed at runtime through the use of a vault service. While troubleshooting, the developer sets the logging to debug to view the message from the webhook. What is the security issue in this scenario?

   Choose one answer.

   • Database credentials should be accessed by using environment variables defined at runtime.
   • During the transport of webhook messages, the credentials could be unencrypted and leaked.
   • During logging, debugging should be disabled for the webhook message.
   • Hashing the credentials in the database is not secure enough; the credentials should be encrypted.

6. Question 6 · 1

   Refer to the exhibit. A developer cannot reach the web application behind an NGINX load balancer. The developer sends a request to an application FQDN with cURL but gets an HTTP 502 response. Which action solves the problem?

   Choose one answer.

   

   • Fix errors in the server configuration, which is behind the load balancer.
   • Bring up the load balancer to the active state.
   • Fix errors in the cURL request sent by the client.
   • Change the default gateway on the load balancer to an active one.

7. Question 7 · 1

   Refer to the exhibit. A network engineer wants use API update information about device interfaces. The network devices are deployed in a Cisco DevNet Sandbox and have running interfaces. Which value is suitable as the headers variable?

   Choose one answer.

   

   • {'Content-Type': 'application/yang.data+yaml', 'Accept': 'application/yang.data+yaml'}
   • {'Content-Type': 'application/yang.data+json', 'Accept': 'application/yang.data+json'}
   • {'Content-Type': 'application/yang.data+utf8l', 'Accept': 'application/yang.data+utf8'}
   • {'Content-Type': 'application/restconf.data+txt', 'Accept': 'application/restconf.data+txt'}

8. Question 8 · 1

   Which action do webhooks enable an application to perform?

   Choose one answer.

   • Increase the request rate limit.
   • Populate the application with restricted data.
   • Receive real-time data.
   • Implement a push model.

9. Question 9 · 1

   Refer to the exhibit. A developer can access the TLS REST API on server A, but cannot access the API on server B. The developer can ping server B. When the developer performs a packet capture on the TLS REST API port on server B, the capture shows that the packet arrived and the server responded. What causes the issue?

   Choose one answer.

   

   • Port 80 is blocked on the outgoing interface of firewall B.
   • Port 443 is blocked on the outgoing interface of firewall A.
   • Port 443 is blocked on the incoming interface of firewall B.
   • Port 80 is blocked on the incoming interface of firewall A.

10. Question 10 · 1

    DRAG DROP - Refer to the exhibit. Drag and drop the code from the bottom onto the box where the code is missing to complete the function that adds a new global access rule that denies traffic using the Cisco ASA REST API. Not all options are used. Select and Place:

    Match each destination with an option.

    

    

    permit field

    • • "permit": False,
    • • + asa_IP + "/api/access/global/rules"
    • • 'POST', objectRequestUrl,
    • • if res.status_code == 201:
    • • if res.status_code == 203:
    • • + asa_IP + "/access/global/rules"

    objectRequestUrl assignment

    • • "permit": False,
    • • + asa_IP + "/api/access/global/rules"
    • • 'POST', objectRequestUrl,
    • • if res.status_code == 201:
    • • if res.status_code == 203:
    • • + asa_IP + "/access/global/rules"

    request call

    • • "permit": False,
    • • + asa_IP + "/api/access/global/rules"
    • • 'POST', objectRequestUrl,
    • • if res.status_code == 201:
    • • if res.status_code == 203:
    • • + asa_IP + "/access/global/rules"

    success condition

    • • "permit": False,
    • • + asa_IP + "/api/access/global/rules"
    • • 'POST', objectRequestUrl,
    • • if res.status_code == 201:
    • • if res.status_code == 203:
    • • + asa_IP + "/access/global/rules"

11. Question 11 · 1

    DRAG DROP - Drag and drop the API characteristics from the left onto the categories on the right. Select and Place:

    Match each destination with an option.

    

    REST

    • • The API is seen as a function call.
    • • There is communication between server and client.
    • • It follows a resource-oriented model.
    • • The API can be stateless.

    RPC

    • • The API is seen as a function call.
    • • There is communication between server and client.
    • • It follows a resource-oriented model.
    • • The API can be stateless.

12. Question 12 · 1

    How are operations on REST APIs performed as compared to RPC APIs?

    Choose one answer.

    • In a REST API, operations are performed on an object (node) that is identified by a URL, but RPC APIs are operation-oriented.
    • In a REST API, operations are performed on an external resource that is defined on the API, but the RCP APIs are resource-oriented.
    • In a REST API, operations are performed on a platform that is identified by the URL, but RPC APIs are platform-oriented.
    • In a REST API, operations are performed on an internal resource that is defined on the API, but RPC APIs are resource-oriented.

13. Question 13 · 1

    Refer to the exhibit. Which Python data structure does my_json contain?

    Choose one answer.

    

    • map
    • list
    • json
    • dict

14. Question 14 · 1

    Which platform has an API that can be used to obtain a list of vulnerable software on user devices?

    Choose one answer.

    • Cisco Umbrella
    • Cisco Firepower
    • Cisco Identity Services Engine
    • Cisco Advanced Malware Protection

15. Question 15 · 1

    While developing a real-time VoIP application on a Cisco Webex platform, users report that their voice gets chopped or parts of the conversation drop out. Which network constraint is impacting the application?

    Choose one answer.

    • jitter
    • capacity
    • delay
    • latency

Paid access to all 472 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.