Free Preparation Discussions
MENU
Cisco 200-901 Exam Questions
- Topic 1: Software Development and Design: The topic covered include data formats (XML, JSON, and YAML), how to explain parsing of common data format (XML, JSON, and YAML) to Python data structures, describe the concepts of test-driven development, the contrast between various software development techniques such as waterfall or agile, and describing the advantages of organizing code into methods/functions, classes, and modules. Moreover, the topics covered include clone, add or remove, commit, push or pull, and merge conflicts.
- Topic 2: Understanding and Using APIs: The topics in this domain of the exam including how to construct a REST API request to accomplish a task given API documentation, define common usage patterns related to webhooks, pinpoint the constraints when consuming APIs, explain common HTTP response codes associated with REST APIs, troubleshooting an issue for given the HTTP response code and pinpointing the parts of an HTTP response.
- Topic 3: Cisco Platform and Development: In this module, the topics covered include how to create a Python script that uses a Cisco SDK given SDK documentation, define the capabilities of Cisco network management platforms and APIs (Meraki, Cisco DNA Center, ACI, Cisco SD-WAN, and NSO), explain the skills related to Cisco compute management platforms and APIs, describe the capabilities of Cisco collaboration platforms and APIs such as Webex, Webex devices, Cisco Unified Communication Manager including AXL and UDS interfaces, and explaining the capabilities of Cisco security platforms and APIs.
- Topic 4: Application Deployment and Security: In this section, the advantages of edge computing are defined in addition to identifying attributes of different application deployment frameworks. It also covers how to identify the attributes of these application deployment types, virtual machines, bare metal, and containers. More topics covered include how to describe elements for a CI/CD pipeline in application deployments, construct a Python unit test, interpret contents of a Dockerfile, use Docker images in a local developer environment, and to identify application security issues related to secret protection, encryption (storage and transport), and data handling.
- Topic 5: Infrastructure and Automation: The topics covered include how to describe the value of model-driven programmability for infrastructure automation, compare controller-level to device-level management, describe the use and roles of network simulation and test tools, explain the components and benefits of CI/CD pipeline in infrastructure automation, define foundations of infrastructure as code, the skills related to automation tools such as Ansible, Terraform, and Cisco NSO, identify the workflow being automated by a Python script. Moreover, the topics include how to pinpoint the workflow being automated by an Ansible playbook, pinpoint the workflow being automated by a bash script, interpret the outcomes of a RESTCONF or NETCONF query, YANG models, and a unified diff.
- Topic 6: Networking Fundamentals: The topics covered include how to explain the purpose and usage of MAC addresses and VLANs, the purpose and usage of IP addresses, routes, subnet mask/prefixes, and gateways. It also covers topics such as explaining the function of switches, routers, firewalls, and load balancers and analyzes a basic network topology diagram with switches, routers, firewalls, load balancers, and port values. The topics also include the function of management, data, and control planes in a network device, the functionality of these IP Services: DHCP, DNS, NAT, SNMP, NTP, recognize common protocol port values including SSH, Telnet, HTTP, HTTPS, and NETCONF, and how to pinpoint the cause of application connectivity problems related to NAT, proxy, and VPN.
Free Cisco 200-901 Exam Actual Questions
Note: Premium Questions for 200-901 were last updated On May. 02, 2025 (see below)
Which type of OWASP threat forges a malicious HTTP request into an application?
Cross-Site Request Forgery (CSRF) is a type of attack that forges a malicious HTTP request and sends it from a user's browser to a different site where the user is authenticated. The attacker tricks the user into executing unwanted actions on a web application in which the user is currently authenticated. This can lead to unauthorized actions being performed on the user's behalf.
Cisco DevNet Associate Certification Guide
OWASP CSRF Prevention Cheat Sheet
Which type of threat occur when an attacker can send hostile data to an interpreter within an application?
Injection attacks occur when untrusted data is sent to an interpreter as part of a command or query. The attacker's hostile data can trick the interpreter into executing unintended commands or accessing data without proper authorization. Common types of injection attacks include SQL injection, command injection, and LDAP injection. These types of attacks exploit vulnerabilities in how an application processes input data, allowing attackers to inject malicious commands or queries into the system.
Cisco DevNet Associate Certification Guide: Chapter on Security, specifically on common web application vulnerabilities.
OWASP (Open Web Application Security Project) Top Ten Web Application Security Risks: Injection.
An engineer is creating an API to automatically obtain specific zones from Cisco Meraki MV cameras. The data that is provided when the API runs must represent the current analytic zones that are configured on the cameras. The API must start automatically at 6 p.m. every day and save the data on a server for further processing. Which part of the HTTP request must be configured to meet these requirements?
When creating an API to interact with Cisco Meraki MV cameras, the request header must specify the correct content type to ensure the server understands the format of the request data. Setting the Content-Type header to 'application/json' indicates that the request body is formatted as JSON. This is essential for APIs that expect JSON data for requests and responses.
Additionally, the API must be scheduled to run automatically at 6 p.m. every day. This can be achieved using a cron job or a scheduling tool like cron in Unix-based systems or Task Scheduler in Windows.
Cisco DevNet Associate Certification Guide
Cisco Meraki API Documentation
Refer to the exhibit.
A network engineer makes a RESTCONF API call to Cisco IOS XE to retrieve information. Which HTTP method and URL does the engineer use to make the ..call?
A)
B)
C)
D)
The provided JSON configuration includes information about a GigabitEthernet interface with the name '2'. To retrieve information about this specific interface using a RESTCONF API call, the correct HTTP method and URL must be used.
HTTP Method: The GET method is used to retrieve information from the server.
Correct URL: The URL must specify the path to the particular interface. The correct URL structure includes the native and interface resources, followed by the interface type (GigabitEthernet) and its specific name ('2').
The correct RESTCONF API call to retrieve the information would be:
GET https://devnetlab.local/restconf/api/running/native/interface/GigabitEthernet/2/
This URL correctly targets the specific GigabitEthernet interface named '2' in the running configuration.
Cisco RESTCONF API Documentation: RESTCONF API Guide
Which tool simulates a network that runs Cisco equipment?
Cisco Modeling Labs (CML) is a network simulation tool that allows users to create, configure, and simulate networks with Cisco devices and topologies.
Cisco Modeling Labs (CML): CML provides a virtual environment where users can simulate network topologies and devices, including routers, switches, and other network components.
Simulation and Testing: CML allows users to test configurations, troubleshoot network issues, and study network behavior in a controlled environment.
Cisco Modeling Labs: Cisco Modeling Labs
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Jolene
3 hours agoBarbra
1 months agoGail
2 months agoChau
3 months agoRickie
3 months agoKarol
4 months agoAdelina
5 months agoAdelina
5 months agoWilliam
5 months agoRodolfo
6 months agoDetra
6 months agoLenita
6 months agoElliot
6 months agoEmiko
7 months agoErnie
7 months agoDylan
7 months agoAlaine
7 months agoCasie
7 months agoYong
8 months agoLuis
8 months agoArlene
8 months agoJohnathon
8 months agoMaddie
9 months agoYoko
10 months agoLavera
10 months agoVirgina
10 months agoLeonardo
10 months agoRomana
1 years ago